Question
You want to view the administrative actions taken by a service administrator in Microsoft 365.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation
Statement 1 (No): Search & intelligence is where administrators manage Microsoft Search, including answers, connectors and verticals. It helps users find content and does not record what administrators did.
Statement 2 (Yes): The Microsoft Defender portal has an Audit page at https://security.microsoft.com/auditlogsearch. It searches the unified audit log, which records supported user and admin operations, and it is identical to audit log search in the Microsoft Purview portal.
Statement 3 (Yes): The Audit solution in the Microsoft Purview portal searches the unified audit log. That log holds audit records for both user and admin activities, including directory activities performed in the Microsoft 365 admin center.
