Exam MS-220 topic 3 question 28 discussion

Actual exam question from Microsoft's MS-220

Question #: 28
Topic #: 1

A company uses Exchange Online.
A user named User1 reports that emails are missing from their mailbox. You perform an audit log search and are unable to locate any logs for User1.
You need to identify the cause of the missing audit logs.
Which two commands can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Get-MsolUser –SearchString User1 | Format-List Licenses
B. Get-MailboxAuditBypassAssociation –Identity User1 | Format-List AuditByPassEnabled
C. Get-AdminAuditLogConfig | Format-List UnifiedAuditLogIngestionEnabled
D. Get-OrganizationConfig | Format-List AutditDisabled

Show Suggested Answer

Suggested Answer: BD 🗳️

by Janker at Oct. 25, 2022, 7:30 p.m.

Comments

Submit Cancel

Couch

2 years, 1 month ago

Selected Answer: BD

B shows if auditing is disabled on a single mailbox. D shows if auditing is disabled organization-wide.

upvoted 2 times

...

Couch

2 years, 2 months ago

Selected Answer: BD

B bypasses audit for a mailbox. D bypasses mailbox auditing for the entire org.

upvoted 1 times

...

Expat1

2 years, 4 months ago

Selected Answer: BC

Answer B would indicate if a specific user is allowed to bypass mailbox audit logging. https://learn.microsoft.com/en-us/powershell/module/exchange/get-mailboxauditbypassassociation?view=exchange-ps Answer C the UnifiedAuditLogIngestionEnabled parameter indicates if logging is turned on for user and admin activities in the tenant. https://learn.microsoft.com/en-us/powershell/module/exchange/set-adminauditlogconfig?view=exchange-ps

upvoted 1 times

...

Chrissie73

2 years, 6 months ago

Selected Answer: BC

D can't be right because command just has 2 Parameters, but not the one that is proposed as answer: Get-OrganizationConfig [-DomainController <Fqdn>] [<CommonParameters>]

upvoted 1 times

...

Domza

2 years, 7 months ago

I think this: LOL https://learn.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or-off?view=o365-worldwide

upvoted 3 times

...

Janker

2 years, 8 months ago

I think B and D are correct

upvoted 4 times

...