You want to audit only script blocks that contain the word 'Invoke'. How can you configure script block logging to do this?

hard📝 Workflow Q8 of 15

PowerShell - Scripting Best Practices

ASet registry key to log only script blocks with 'Invoke' keyword

BEnable script block logging and use event log filters to search for 'Invoke'

CModify PowerShell to block all scripts except those with 'Invoke'

DUse a custom script to disable logging except for 'Invoke' commands

Step-by-Step Solution

Solution:

Step 1: Understand script block logging scope
Script block logging records all script blocks; filtering is done after logging.
Step 2: Use event log filtering
To audit specific content like 'Invoke', use event log filters or queries to find matching entries.
Final Answer:
Enable logging and filter event logs for 'Invoke' -> Option B
Quick Check:
Filter logs after enabling script block logging [OK]

Quick Trick: Filter event logs to find specific script block content [OK]

Common Mistakes:

Master "Scripting Best Practices" in PowerShell

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More PowerShell Quizzes