You deploy Office 365. All the members of a team named Sales have full access to a shared mailbox named Sales. You enable auditing for all shared mailboxes. From the Sales mailbox, an email message that contains inappropriate content is sent. You need to identify which user sent the message. What should you do?

You deploy Office 365. All the members of a team named Sales have full access to a shared mailbox named Sales. You enable auditing for all shared mailboxes. From the Sales mailbox, an email message that contains inappropriate content is sent. You need to identify which user sent the message. What should you do?
A . From the Exchange Control Panel, run an administrator role group report.
B . From Windows PowerShell, run the Get-SharingPolicy cmdlet.
C . From WindowsPowerShell, run the Write-AdminAuditLog cmdlet.
D . From Windows PowerShell, run the New-MailboxAuditLogSearch cmdlet.

View Answer

Answer: D

Explanation:

The cmdlet New-MailboxAuditLogSearch is used to search in auditlogs.