You have an Azure AD Premium P2 tenant. You create a Log Analytics workspace. You need to ensure that you can view Azure AD audit log information by using Azure Monitor. What should you do first?

Question

Options

• AModify the Diagnostics settings for Azure AD.
• BRun the Update-MgOrganization cmdlet.
• CRun the Update-MgDomain cmdlet.
• DCreate an Azure AD workbook.

• A
  92% (46)
• B
  2% (1)
• C
  4% (2)
• D
  2% (1)

Explanation

Explanation

Modifying the Diagnostics settings for Azure AD is the required first step because this is how you configure Azure AD to send its audit logs, sign-in logs, and other data to a destination such as a Log Analytics workspace - without this configuration, no Azure AD log data will flow into Azure Monitor at all.

Why the distractors are wrong:

• Option B (Update-MgOrganization) updates organizational properties (e.g., display name, address) and has no relevance to log routing or diagnostics.
• Option C (Update-MgDomain) manages domain settings within the tenant and is completely unrelated to log analytics or monitoring configuration.
• Option D (Create an Azure AD workbook) is something you would do after logs are already flowing into Log Analytics - a workbook visualizes data but cannot collect it without the diagnostic pipeline first being established.

Memory Tip: Think of it as a pipe before a tap - Diagnostic Settings create the pipe that routes logs to Log Analytics; Azure Monitor/workbooks are just the tap you turn on to view that data. You must build the pipe first!

No community discussion yet for this question.