Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 2 question 18 discussion

Actual exam question from Microsoft's MS-101

Question #: 18
Topic #: 2

You have a Microsoft 365 subscription.
From the subscription, you perform an audit log search, and you download all the results.
You plan to review the audit log data by using Microsoft Excel.
You need to ensure that each audited property appears in a separate Excel column.
What should you do first?

A. From Power Query Editor, transform the JSON data.
B. Format the Operations column by using conditional formatting.
C. Format the AuditData column by using conditional formatting.
D. From Power Query Editor, transform the XML data.

Show Suggested Answer

Suggested Answer: A 🗳️
After you search the Office 365 audit log and download the search results to a CSV file, the file contains a column named AuditData, which contains additional information about each event. The data in this column is formatted as a JSON object, which contains multiple properties that are configured as property:value pairs separated by commas. You can use the JSON transform feature in the Power Query Editor in Excel to split each property in the JSON object in the
AuditData column into multiple columns so that each property has its own column. This lets you sort and filter on one or more of these properties
References:
https://docs.microsoft.com/en-us/microsoft-365/compliance/export-view-audit-log-records

by LeeM84 at May 20, 2020, 12:19 p.m.

Comments

Submit Cancel

potpal

Highly Voted 4 years, 1 month ago

On test 05.10.21

upvoted 44 times

joyyyyyyyyyyyyy

4 years ago

so what?

upvoted 2 times

otday

4 years ago

Are you dumb? They are letting us know its still relevant

upvoted 88 times

Durden871

2 years, 12 months ago

They are, in fact, a thief of joy.

upvoted 4 times

...

rrrr5r

2 years, 9 months ago

In Sep 16th 22's exam.

upvoted 6 times

...

LeeM84

Highly Voted 5 years, 1 month ago

You can use the JSON transform feature in Power Query in Excel to split the AuditData column into multiple columns so that each property has its own column. This lets you sort and filter on one or more of these properties https://docs.microsoft.com/en-us/microsoft-365/compliance/detailed-properties-in-the-office-365-audit-log?view=o365-worldwide

upvoted 23 times

...

GotDamnImIn

Most Recent 2 years, 2 months ago

Selected Answer: A

Was in exam in March 2023

upvoted 1 times

...

Lelek

2 years, 4 months ago

Selected Answer: A

Answer A is correct

upvoted 1 times

...

denmaillbox

2 years, 12 months ago

A! https://docs.microsoft.com/en-us/microsoft-365/compliance/export-view-audit-log-records?view=o365-worldwide

upvoted 1 times

...

junior6995

3 years, 5 months ago

This is the type of question that I'd have gotten wrong if wasn't for examtopics

upvoted 7 times

Durden871

2 years, 12 months ago

I don't even understand the purpose of this question. How relevant is this to the reset of the MS-101? It's so out in left field that it seems like it's purposefully trying to lower your score.

upvoted 2 times

Contactfornitish

2 years, 11 months ago

Not really. Actually a perfectly valid one for practical reasons. Most details in audit log come into securitydata column and that is in json format. If using powershell then we use convert-fromJSON and if downloading from portal then we need to use power query. Knowing this makes life easier

upvoted 2 times

Contactfornitish

2 years, 11 months ago

Auditdata column i meant

upvoted 1 times

...

junior6995

3 years, 7 months ago

Sometimes I don't understand why questions like this one are part of this exam....

upvoted 7 times

us3r

3 years, 7 months ago

so that dumps have actually a meaning... and they sell them...

upvoted 3 times

...