For which activities should you search and by which field should you filter in the audit log search?

HOTSPOT

You have a Microsoft 365 subscription. Your network uses an IP address space of 51.40.15.0/24. An Exchange Online administrator recently created a role named Role1 from a computer on the network. You need to identify the name of the administrator by using an audit log search.

For which activities should you search and by which field should you filter in the audit log search? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

View Answer

Answer: