Exam MS-101 topic 3 question 156 discussion

C is correct

C and D https://learn.microsoft.com/en-us/purview/dlp-sensitivity-label-as-condition

I don't seewhy everyone is so passionate about answer B here. Auditing should be switched on by default. And - more importantly - C looks like a perfectly acceptable solution to me, why go against it? Activity explorer stores activities with regard to items protected via sensitivity labels. It makes sense that unless you don't define these labels, there will be nothing to show, doesn't it?

With E5 auditing is on by default, why B?

Turn on auditing

Chicken and the egg. you need auditing turned on in order to log activity. but you need labels or nothing will be recorded in the audit log. explain it 2 me like i'm a 5yr old.

Turn on auditing, Acitivity explorer get the audi logs from the unified audit log.

B: Turn on Audting It's hard to find the specific wording in a Microsoft article, but this is from Cloud Academy "Before you can use Activity Explorer, you need to ensure auditing is enabled in your Microsoft 365 tenant so that it can record user and admin activity within the organization to the audit log. Once this data is recorded, it can be viewed in a report." https://cloudacademy.com/course/microsoft-365-configuring-using-activity-explorer-2474/introduction-to-activity-explorer/

The link mention https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-activity-explorer?view=o365-worldwide Activity explorer gathers activity information from the audit logs on multiple sources of activities. For more detailed information on what labeling activity makes it to Activity explorer, see Labeling events available in Activity explorer.

https://learn.microsoft.com/en-us/microsoft-365/compliance/data-classification-activity-explorer?view=o365-worldwide

I'd go with B: Turn on auditing