What should you use?

Your company has a Microsoft 365 subscription.

You need to identify which users performed the following privileged administration tasks:

• Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint

• Opened a mailbox of which the user was not the owner

• Reset a user password

What should you use?
A . Microsoft Azure Active Directory (Azure AD) audit logs
B . Security & Compliance content search
C . Microsoft Azure Active Directory (Azure AD) sign-ins
D . Security & Compliance audit log search

View Answer

Answer: D