Exam MS-500 topic 1 question 62 discussion

You have to be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the audit log. From: https://learn.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

Managing Audit permissions from the Exchange admin center will be discontinued starting February 2, 2024. You should start using the compliance portal now to manage Audit permissions and familiarize yourselves with the new permissions controls. To minimize impact to your organization, all existing Audit permissions currently assigned in the Exchange admin center will be automatically configured in the compliance portal on February 2, 2024.

Correct. Was on the exam

The Exchange admin center can also be used to assign permissions for searching Office 365 audit logs, but it is not the recommended method. In the Exchange admin center, you can assign the 'Mailbox Search' role to a user, which will give them access to search mailboxes for specific content. However, this role does not provide the necessary permissions to search the Office 365 audit logs. The recommended method for assigning permissions to search Office 365 audit logs is through the Microsoft 365 Compliance center, which provides more granular controls and better visibility into compliance-related activities. The Compliance center also allows you to assign other compliance-related roles and permissions, such as eDiscovery permissions and data loss prevention policies. So the answer should be D. the Microsoft 365 Compliance center

This makes zero sense, why would you have to do this in the Exchange admin center?

I think its unclear what Audit logs they are asking about. but Azure AD Audit logs requires: Reports reader. you all are talking about compliance audit logs. ref: https://learn.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task#monitoring---audit-logs

You have to be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the audit log. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center. Global administrators in Office 365 and Microsoft 365 are automatically added as members of the Organization Management role group in Exchange Online. To give a user the ability to search the audit log with the minimum level of privileges, you can create a custom role group in Exchange Online, add the View-Only Audit Logs or Audit Logs role, and then add the user as a member of the new role group. For more information, see Manage role groups in Exchange Online. Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-search?view=o365-worldwide

I agree with B. https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-standard-setup?source=recommendations&view=o365-worldwide see Step 2

i think it is A

I believe B is correct. https://learn.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide "You have to be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the audit log. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center."

the reference is correct and it points to the given reply

I think “C” is correct