What should you use?

Your company has a Microsoft 365 subscription.

You need to identify which users performed the following privileged administration tasks:

✑ Deleted a folder from the second-stage Recycle Bin if Microsoft SharePoint

✑ Opened a mailbox of which the user was not the owner

✑ Reset a user password

What should you use?
A . Microsoft Azure Active Directory (Azure AD) audit logs
B . Microsoft Azure Active Directory (Azure AD) sign-ins
C . Security & Compliance content search
D . Security & Compliance audit log search

View Answer

Answer: A

Explanation:

References: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-logs-overview