What should you do first?

You have a Microsoft 365 subscription.

From the subscription, you perform an audit log search, and you download all the results.

You plan to review the audit log data by using Microsoft Excel.

You need to ensure that each audited property appears in a separate Excel column.

What should you do first?
A . From Power Query Editor, transform the JSON data.
B . Format the Operations column by using conditional formatting.
C . Format the AuditData column by using conditional formatting.
D . From Power Query Editor, transform the XML data.

View Answer

Answer: A

Explanation:

After you search the Office 365 audit log and download the search results to a CSV file, the file contains a column named AuditData, which contains additional information about each event. The data in this column is formatted as a JSON object, which contains multiple properties that are configured as property: value pairs separated by commas. You can use the JSON transform feature in the Power Query Editor in Excel to split each property in the JSON object in the AuditData column into multiple columns so that each property has its own column. This lets you sort and filter on one or more of these properties

References: https://docs.microsoft.com/en-us/microsoft-365/compliance/export-view-audit-log-records