You suspect that your web server has been the target of a denial-of-service attack. You would like to view information about the number of connections to the server over the past three days. Which log would you most likely examine

Performance log

Explanation:

The Windows Performance Logs and Alerts, is a service that monitors and collects the performance data on resources, processes, threads, cache, memory, and processor, dependent on parameters which are preconfigured and scheduled, and logs the data or results in an alert

The service can be enabled from the file perfmon.exe

From the logs, troubleshooting the security of the system can be performed by monitoring file access, unusual or unauthorized activities, network connections, unusual system behavior, error messages and unusual network behavior

click the big logo on the top left of the screen.   hope this !

-ttl