nerdexam
Microsoft

MS-220 · Question #87

A company uses Exchange Online. A user named User1 reports that emails are missing from their mailbox. You perform an audit log search and are unable to locate any logs for User1. You need to…

The correct answer is B. Get-MailboxAuditBypassAssociation -Identity User1 | Format-List AuditByPassEnabled D. Get-OrganizationConfig | Format-List AutditDisabled. https://learn.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or- off?view=o365-worldwide

Troubleshoot compliance and retention issues

Question

A company uses Exchange Online. A user named User1 reports that emails are missing from their mailbox. You perform an audit log search and are unable to locate any logs for User1. You need to identify the cause of the missing audit logs. Which two commands can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AGet-MsolUser -SearchString User1 | Format-List Licenses
  • BGet-MailboxAuditBypassAssociation -Identity User1 | Format-List AuditByPassEnabled
  • CGet-AdminAuditLogConfig | Format-List UnifiedAuditLogIngestionEnabled
  • DGet-OrganizationConfig | Format-List AutditDisabled

How the community answered

(54 responses)
  • A
    9% (5)
  • B
    70% (38)
  • C
    20% (11)

Explanation

https://learn.microsoft.com/en-us/microsoft-365/compliance/turn-audit-log-search-on-or- off?view=o365-worldwide

Topics

#mailbox audit#audit bypass#audit log#missing emails

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-220 Practice