Exam MS-500 topic 1 question 19 discussion

Actual exam question from Microsoft's MS-500

Question #: 19
Topic #: 1

You have a Microsoft 365 E5 subscription.
Some users are required to use an authenticator app to access Microsoft SharePoint Online.
You need to view which users have used an authenticator app to access SharePoint Online. The solution must minimize costs.
What should you do?

A. From the Microsoft 365 Security admin center, download a report.
B. From Azure Log Analytics, query the logs.
C. From the Microsoft 365 Security admin center, perform an audit log search.
D. From the Enterprise applications blade of the Azure Active Directory admin center, view the sign-ins.

Show Suggested Answer

Suggested Answer: D 🗳️
The user sign-ins report provides information on the sign-in pattern of a user, the number of users that have signed in over a week, and the status of these sign- ins.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. From the Enterprise applications blade of the Azure Active Directory admin center, view the sign-ins.
2. From the Azure Active Directory admin center, view the sign-ins.
Other incorrect answer options you may see on the exam include the following:
1. From the Enterprise applications blade of the Azure Active Directory admin center, view the audit logs.
2. From the Azure Active Directory admin center, view the audit logs.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins

by JoshJosh at Jan. 14, 2023, 11:56 p.m.