Exam MS-740 topic 4 question 3 discussion

DRAG DROP -
You are the global administrator of a tenant.
An account is blocked due to suspicious user activities.
You need to investigate the user activities.
Where should you investigate activities? To answer, drag the appropriate portals to the correct activities. Each portal may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide