Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

To help organizations investigate compromised email accounts, Microsoft 365 audits access to mail data by mail protocols and clients. What mailbox-auditing action does Microsoft 365 use in Audit (Premium) to provide this functionality?

MailItemsAccessed

AuditExchangeMail

ExchangeMailActivity

2.

Audit (Premium) helps organizations conduct forensic and compliance investigations by providing access to important events. Which of the following prerequisites must be completed so that audit logs will be generated when users perform these events?

An extra add-on license must be purchased per user

Users must be assigned an Audit (Premium) license

The MailItemsAccessed action must be enabled

3.

Tailspin Toys has implemented Microsoft Purview Audit (Premium). It set up Audit (Premium) for its users. It's now enabling Audit (Premium) events to be logged. Which of the following items is an Audit (Premium) event that Tailspin Toys must enable?

ExchangeQueryInitiated

SearchQueryInitiatedSharePoint

InitiateOneDriveQuery

You must answer all questions before checking your work.