exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 5 question 16 discussion

Actual exam question from Microsoft's SC-400
Question #: 16
Topic #: 5
[All SC-400 Questions]

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft 365 subscription.

You have a user named User1. Several users have full access to the mailbox of User1.

Some email messages sent to User1 appear to have been read and deleted before the user viewed them.

When you search the audit log in the Microsoft Purview compliance portal to identify who signed in to the mailbox of User1, the results are blank.

You need to ensure that you can view future sign-ins to the mailbox of User1.

Solution: You run the Set-Mailbox -Identity "User1" -AuditEnabled $true command.

Does that meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
smicu
4 months, 3 weeks ago
Selected Answer: B
SDiwan explanation is correct
upvoted 1 times
...
Mr_Broekhoest
9 months, 1 week ago
Selected Answer: A
You can not see delegate login or emails read but you can see hard and soft deletions by delegates with this command.
upvoted 1 times
...
Amin4799
1 year, 2 months ago
Selected Answer: A
A-Yes The -AuditEnabled $true parameter enables mailbox audit logging for User1.
upvoted 2 times
EM1234
1 year, 1 month ago
No Read SDiWan's response about the goal of the question. Read carefully or you will never be able to make an 890.
upvoted 2 times
...
...
SDiwan
1 year, 4 months ago
Selected Answer: B
The goal of the question is to enable logs for sign-ins of other users who have full access to the mailbox, these users are called "Delegates". Sign-in of Delegates are not logged by default. it needs to be manually enabled, this command does not enable audit log for delegates sign-ins.
upvoted 4 times
SDiwan
1 year, 4 months ago
Correct command should be: Set-Mailbox -Identity "User1" -AuditDelegate @{Add="MailboxLogin"}
upvoted 5 times
Mr_Broekhoest
9 months, 1 week ago
There is no Mailboxlogin switch for -Auditdelegate. Only Owner login is audited and not admin or delegate login. See table entry for Mailboxlogin https://learn.microsoft.com/en-us/purview/audit-mailboxes#mailbox-actions-for-user-mailboxes-and-shared-mailboxes
upvoted 1 times
...
...
...
sswitzer
1 year, 4 months ago
Selected Answer: A
From chatgpt: Yes, running the Set-Mailbox -Identity "User1" -AuditEnabled $true command helps meet the goal of viewing future sign-ins to the mailbox of User1. This command enables mailbox audit logging for the specified mailbox (User1).
upvoted 1 times
...
CharlieGolf
1 year, 4 months ago
Selected Answer: A
Correct. https://learn.microsoft.com/en-us/purview/audit-mailboxes
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...