Your company has a Microsoft 365 subscription.
You need to identify which users performed the following privileged administration tasks:
Deleted a folder from the second-stage Recycle Bin of Microsoft SharePoint
Opened a mailbox of which the user was not the owner
Reset a user password
What should you use
A. Microsoft Azure Activity Directory (Azure AD) audit logs
B. Security & Compliance content search
C. Microsoft Azure Activity Directory (Azure AD) sign-ins
D. Security & Compliance audit log search
Answer is D. Azure AD audit logs are for system health. Security & Compliance audit logs are for the types of activities the question mentions
it is D. The reference only mentions Azure-specific items, and nothing that is in the requirements of the question. All of those from the question are in the S&CC audit logs – heck, that’s what they are for.