You have a Microsoft 365 subscription. You need to view the IP address from which a user synced a Microsoft SharePoint Online library. What should you do?

Question

Options

• AFrom the SharePoint admin center, view the usage reports.
• BFrom the Security & Compliance admin center, perform an audit log search.
• CFrom the Microsoft 365 admin center, view the usage reports.
• DFrom the Microsoft 365 admin center, view the properties of the user's user account.

• A
  3% (1)
• B
  81% (26)
• C
  13% (4)
• D
  3% (1)

Explanation

The Security & Compliance admin center's Audit Log Search records detailed activity events across Microsoft 365 services, including SharePoint Online sync events. Each log entry captures metadata such as the user, action performed, timestamp, and the source IP address. The Usage Reports in the Microsoft 365 or SharePoint admin centers show aggregate usage statistics (e.g., active users, storage) but do not record IP-level activity per event. The user account properties in the Microsoft 365 admin center show profile information, not activity logs. Only the audit log search provides the granularity needed to identify the IP address from which a specific sync action was initiated.

No community discussion yet for this question.