You have a Microsoft 365 E5 subscription. You need to use Microsoft Defender for Cloud Apps to monitor user mailbox activities. What should you do?

The correct answer is C. Enable mailbox audit logging. Exchange Mailbox audit logging must be turned on for each user mailbox before user activity in Exchange Online is logged. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-office-365

Submitted by neha2k· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

Options

ACreate an activity policy.
BCreate an access policy.
CEnable mailbox audit logging.
DCreate an app connector for Microsoft 365.

How the community answered

(35 responses)

A
6% (2)
B
3% (1)
C
80% (28)
D
11% (4)

Explanation

Exchange Mailbox audit logging must be turned on for each user mailbox before user activity in Exchange Online is logged. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-office-365

Topics

#Microsoft Defender for Cloud Apps#Mailbox Auditing#Security Monitoring#Microsoft 365 Security

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice