Microsoft
MS-900 · Question #168
Your company has a Microsoft 365 subscription. You need to identify which users performed the following privileged administration tasks: - Deleted a folder from the second-stage Recycle Bin of Microso
Sign in or unlock MS-900 to reveal the answer and full explanation for question #168. The question stem and answer options stay visible for context.
Submitted by ricky.ec· Mar 5, 2026Describe security, compliance, privacy, and trust in Microsoft 365
Question
Your company has a Microsoft 365 subscription. You need to identify which users performed the following privileged administration tasks: - Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint - Opened a mailbox of which the user was not the owner - Reset a user password What should you use?
Options
- AMicrosoft Azure Active Directory (Azure AD) audit logs
- BSecurity & Compliance content search
- CMicrosoft Azure Active Directory (Azure AD) sign-ins
- DSecurity & Compliance audit log search
Unlock MS-900 to see the answer
You've previewed enough free MS-900 questions. Unlock MS-900 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Audit logging#Security & Compliance Center#SharePoint Online#Exchange Online#User activity monitoring