Audit Logging Quiz

Quiz covering Governance and Compliance

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which tool in the Microsoft Purview compliance portal is primarily used to search for and investigate user and administrator activities across Microsoft 365 services?

2. 2

   A security administrator needs to ensure that audit logs are retained for 1 year for all users. Which license level is required to support a 1-year audit log retention policy in Microsoft 365?

3. 3

   You notice that audit logs for a specific user are not appearing in the search results. What is the most likely reason for this?

4. 4

   Which of the following activities is recorded in the Unified Audit Log by default without requiring additional configuration?

5. 5

   An organization requires that specific high-value activities (such as 'MailItemsAccessed') be audited for users with E5 licenses. Why might these specific events not appear in a standard Audit log search?