ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam
Go to Exam

Exam MS-101 topic 3 question 11 discussion

Actual exam question from Microsoft's MS-101
Question #: 11
Topic #: 3
[All MS-101 Questions]

Your company has a Microsoft 365 subscription.
You need to identify which users performed the following privileged administration tasks:
✑ Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint
✑ Opened a mailbox of which the user was not the owner
✑ Reset a user password
What should you use?

  • A. Microsoft Azure Active Directory (Azure AD) audit logs
  • B. Microsoft 365 compliance content search
  • C. Microsoft Azure Active Directory (Azure AD) sign-ins
  • D. Microsoft 365 compliance audit log search
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by mnak at Nov. 4, 2021, 8:12 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
mnak
Highly Voted 3 years, 8 months ago
Answer is D. AAD Audit logs don't contain data on mailbox/sharepoint actions.
upvoted 25 times
Alejack
3 years, 7 months ago
correct https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide
upvoted 7 times
...
ChizzyO
2 years ago
Yes, that is correct. Microsoft 365 compliance audit log search D is the answer. AAD audit log will only show you who reset password from the given activities in the question but the compliance audit log will give you info on all the given activities.
upvoted 2 times
...
...
Velda
Highly Voted 3 years, 7 months ago
Same question as in MS-100 (Question #2 Topic 2 ). Correct answer is D.
upvoted 11 times
...
ACTOSA
Most Recent 2 years, 3 months ago
Selected Answer: A
Only place you can check Password audits. Compliance wont show you anything to do with that. Purview is all about DLP.
upvoted 1 times
EsamiTopici
2 years, 3 months ago
go to audit logs, nothing about sharepoint and mailbox
upvoted 1 times
...
...
danesz
3 years, 1 month ago
Selected Answer: D
D is correct
upvoted 2 times
...
venwaik
3 years, 1 month ago
Selected Answer: D
Came on exam 09-05-2022
upvoted 3 times
...
Musa007
3 years, 2 months ago
Selected Answer: D
Correct answer is D
upvoted 3 times
...
JamesM9
3 years, 3 months ago
The M365 Compliance audit log (now found at compliance.microsoft.com) contains everything required in order to ascertain who made the changes specified within the question. Therefore, the answer here is D - Compliance audit log search.
upvoted 2 times
...
TashaGirl
3 years, 3 months ago
Selected Answer: D
100% D
upvoted 1 times
...
Glorence
3 years, 5 months ago
still valid, it was in my exam last Feb 5, 2022
upvoted 4 times
...
maxustermann
3 years, 5 months ago
Selected Answer: D
Correct is D
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel