MS-100 Quality Control & Assurance 2

Question 1

A Microsoft 365 administrator wants to verify that all user sign-ins are being audited. Which portal provides the Unified Audit Log for sign-in events?

Accepted Answer

Microsoft 365 compliance center

Answer

The Microsoft 365 compliance center (purview.microsoft.com) hosts the Unified Audit Log, which captures sign-in and other activities across Microsoft 365 services.

Question 2

Which PowerShell cmdlet is used to search the Unified Audit Log programmatically in Microsoft 365?

Accepted Answer

Search-UnifiedAuditLog

Answer

Search-UnifiedAuditLog is the Exchange Online PowerShell cmdlet used to query the Unified Audit Log with date ranges, record types, and user filters.

Question 3

An admin notices that audit log search is not returning results. What is the most likely cause?

Accepted Answer

Unified Audit Log is not enabled for the tenant

Answer

Unified Audit Logging must be explicitly enabled via the compliance center or PowerShell; new tenants may not have it on by default.

Question 4

How long are audit log records retained by default for Microsoft 365 E3 licensed tenants?

Accepted Answer

90 days

Answer

E3 tenants retain Unified Audit Log records for 90 days; E5 or add-on licenses extend retention to one year.

Question 5

A company needs to ensure that its Microsoft 365 configuration aligns with the CIS Benchmark. Which tool provides built-in policy assessments for this purpose?

Accepted Answer

Microsoft Compliance Manager

Answer

Compliance Manager in the Microsoft Purview compliance portal offers pre-built assessments including CIS Benchmarks to evaluate and track compliance posture.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Quality Control & Assurance 2