Exam MS-220 topic 3 question 58 discussion

Actual exam question from Microsoft's MS-220

Question #: 58
Topic #: 1

HOTSPOT -
A company uses Exchange Online. The company configures a shared mailbox named Shared1 for delegated access.
Delegates report that emails from February 10, 2022 through February 15, 2022 are missing from the shared mailbox.
You need to review the audit logs for the shared mailbox.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Domza at Dec. 7, 2022, 6:50 a.m.

Comments

Submit Cancel

jomor797

2 years, 3 months ago

-logonTypes will just tell you when someone accessed a mailbox, not what they did. Should be -operations

upvoted 1 times

Sebix23

2 years, 2 months ago

Wrong answer

upvoted 1 times

...

coolbru

2 years, 4 months ago

The answer is half right. It should be >Search-MailboxAuditLog >Operations. 'Operations' include Delete and Move operations which you'd need to look for if items are missing. https://learn.microsoft.com/en-us/powershell/module/exchange/search-mailboxauditlog?view=exchange-ps#-operations

upvoted 1 times

Sebix23

2 years, 2 months ago

Wrong answer Search-MailboxAuditLog -Identity kwok -LogonTypes Owner -ShowDetails -StartDate 1/1/2016 -EndDate 3/1/2016 | Where-Object {$_.Operation -eq "HardDelete"} https://learn.microsoft.com/en-us/powershell/module/exchange/search-mailboxauditlog?view=exchange-ps#-operations

upvoted 1 times

...

Domza

2 years, 7 months ago

Correct` Link: https://learn.microsoft.com/en-us/powershell/module/exchange/search-mailboxauditlog?view=exchange-ps

upvoted 2 times

...