MS-101 Exam QuestionsBrowse all questions from this exam

MS-101 Exam - Question 298


You have a Microsoft 365 subscription.

You need to identify which administrative users performed eDiscovery searches during the past week.

What should you do from the Security & Compliance admin center?

Show Answer
Correct Answer: D

To identify which administrative users performed eDiscovery searches during the past week from the Security & Compliance admin center, you should perform an audit log search. The audit log records various activities performed by users, including eDiscovery searches, making it the appropriate tool for tracking administrative actions.

Discussion

4 comments
Sign in to comment
Aleyah
Mar 10, 2021

D. Perform an audit log search

[Removed]
Dec 31, 2020

Correct - see https://docs.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

karank19
Jan 26, 2022

Given Answer is Correct.

CSai
May 17, 2021

D. Perform an audit log search