PsLoggedOn and PsGetSid are not logging tools. They are command-line utilities used in the Windows
operating system.
PsLoggedOn is an applet that displays both the local and remote logged on users. If an attacker specifies a
user name instead of a computer, PsLoggedOn searches the computers in the network and tells whether the
user is currently logged on or not. The command syntax for PsLoggedOn is as follows:
psloggedon [- ] [-l] [-x] [\\computername | username]
PsGetSid is a tool that is used to query SIDs remotely. Using PsGetSid, the attacker can access the SIDs of
user accounts and translate an SID into the user name. The command syntax for PsGetSid is as follows:
psgetsid [\\computer[,computer[,...] | @file] [-u username [-p password]]] [account|SID]
Answer options C and D are incorrect. Timbersee and Swatch are tools used for logging network activities in
the Linux operating system.

IGMP
Explanation:
The Internet Group Management Protocol (IGMP) is a communication protocol that communicates information
between the network routers and the multicast end stations. It allows the receivers to request a multicast data
stream from a specific group address. However, multicast traffic is sent to a single MAC address but is
processed by multiple hosts. The IGMP allows an end station to connect to a multicast group and leave it, while
being connected to the group address. It can be effectively used for gaming and showing online videos.
Although it does not actually act as a transport protocol, it operates above the network layer. It is analogous to
ICMP for unicast connections. It is susceptible to some attacks, so firewalls commonly allow the user to disable
it if not needed.

There are different methods that a device can use for logging information on a Cisco router:
Terminal logging: In this method, log messages are sent to the VTY session.
Console logging: In this method, log messages are sent directly to the console port.
Buffered logging: In this method, log messages are kept in the RAM on the router. As the buffer fills, the older messages are overwritten by the newer messages.
Syslog logging: In this method, log messages are sent to an external syslog server where they are stored and sorted.
SNMP logging: In this method, log messages are sent to an SNMP server in the network.
Answer option C is incorrect. This is an invalid option.