AB-900 Certification Practice Question #13

Question

Your organization has a Microsoft 365 subscription.

You discover that some users cannot sign in to Microsoft 365.

You need to view the failed Microsoft 365 sign-in attempts.

What should you use?

Accepted Answer

Failed Microsoft 365 sign-in attempts are recorded in the **Microsoft Entra sign-in logs**, viewed in the **Microsoft Entra admin center** (Identity → Monitoring & health → Sign-in logs), where each entry shows success/failure status, error codes, IP, location, and Conditional Access outcome. The Defender portal handles security incidents, Purview handles compliance/audit, and the Microsoft 365 admin center handles tenant administration — none is the sign-in-log surface.

More AB-900 practice questions