Exam SC-300 topic 4 question 15 discussion

You can also choose to download the filtered data, up to 250,000 records, by selecting the Download button. You can download the logs in either CSV or JSON format So this question, can be one of those that you will got Corect if you choose any of both csv or JSON, You can use the JSON transform feature in the Power Query Editor in Excel to split each property in the JSON object in the AuditData column into multiple columns so that each property has its own column. So my vote goes to C, JSON https://docs.microsoft.com/en-us/microsoft-365/compliance/export-view-audit-log-records?view=o365-worldwide

C - Answer is correct - Audit Logs show the fact policies were changed (tested in tenant), Sign-ins only show access was granted/denied

Anser: C (JSON) as others mentioned. Based on the information available and considering the potentially true statement, the correct option for exporting logs that contain detailed information about changes to conditional access policies is: Correct Answer: C. Audit logs in JSON format Explanation: Audit Logs: These logs capture detailed information about various activities in Azure AD, including changes to conditional access policies. JSON Format: JSON format provides structured data that is easier to parse and analyze, making it suitable for ingestion by third-party security information and event management (SIEM) systems.

The correct answer is C. audit logs in JSON format. Audit logs contain a record of all administrative actions and changes made within Azure AD, such as user and group management, application assignments, and policy modifications.

The correct answer is C. audit logs in JSON format. Audit logs contain a record of all administrative actions and changes made within Azure AD, such as user and group management, application assignments, and policy modifications.

C. Audit logs in JSON format: Audit logs in JSON format contain detailed information about various activities in Azure AD, including changes to conditional access policies. These logs provide comprehensive data that can be ingested by third-party security information and event management (SIEM) systems for analysis. They are typically the preferred format for auditing and monitoring purposes because they contain structured data that is easier to parse and analyze.

We don't know what 3rd part SIEM the logs will be imported to. JSON is more universal than csv..

Correct Answer: C

C. audit logs in JSON format

just pass the exam today. This came in the question.

On exam few days ago.

On the exam 1/20/2022

it's "D" and not "C" because in Sign-ins you can see the conditional access usage .

Looks correct.