Exam MS-500 topic 4 question 66 discussion

There is no View-Only Audit logs role in Exchange Admin Center. The documentation for the View-Only Logs role also state that it applies to Exchange Server 2013 https://learn.microsoft.com/en-us/exchange/view-only-audit-logs-role-exchange-2013-help

Permissions required to use the audit log search tool You must be assigned the View-Only Audit Logs or Audit Logs role in Exchange Online to search the audit log. By default, these roles are assigned to the Compliance Management and Organization Management role groups on the Permissions page in the Exchange admin center. Global administrators in Office 365 and Microsoft 365 are automatically added as members of the Organization Management role group in Exchange Online. For more information, see Manage role groups in Exchange Online. Found here: https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-troubleshooting-scenarios?view=o365-worldwide

"View-Only Audit Logs" "View and export audit reports. Because these reports might contain sensitive information, you should only assign this role to people with an explicit need to view this information." https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/scc-permissions?view=o365-worldwide

I think given answer is correct, but it isn't a standalone role, you'd need to create a custom role and assign it to that, making the user a member of the new group.

From the link: "To give a user the ability to search the audit log with the minimum level of privileges, you can create a custom role group in Exchange Online, add the View-Only Audit Logs or Audit Logs role, and then add the user as a member of the new role group."

B should be correct

D is correct: https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/activity-reports?view=o365-worldwide#who-can-see-reports

Correct, according to the provided link.

Given link contains as mentioned below, as per that B is correct Ans "If you assign a user the View-Only Audit Logs or Audit Logs role on the Permissions page in the compliance portal, they won't be able to search the audit log. You have to assign the permissions in Exchange Online. This is because the underlying cmdlet used to search the audit log is an Exchange Online cmdlet."

There is no View-Only Audit logs role in Exchange Admin Center. D is the right Answer. Security readers has the ability to read AAD sign-in reports and Audit logs.

correct