AB-900 Certification Practice Question #1

Question

You want to view the administrative actions taken by a service administrator in Microsoft 365.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Accepted Answer

Administrative actions in Microsoft 365 are written to the **Unified Audit Log** and reviewed through the **Audit** solution in the **Microsoft Purview** portal, which makes Statement 3 true. Statement 1 is false because *Search & intelligence* in the Microsoft 365 admin center governs Microsoft Search and content insights, not auditing. Statement 2 is the contested one: the fundamentals distinction treats the **Microsoft Defender** portal as the home for alerts, incidents, and threat analytics rather than the audit log, so the two most-reasoned community answers mark it No. A minority marks it Yes because audit can be reached while investigating Defender threats — that genuine split keeps confidence below 80%.

More AB-900 practice questions