Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft is retiring this exam on Nov 30, 2026.
Question 13 of 358
Free Preview · 358 of 1,193 · questions 1–358 of 1,193 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Enable auditing
The “Elevation of Exchange admin privileges” alert policy relies on Unified Audit Log events (e.g., Add-RoleGroupMember). If auditing isn’t enabled, the alert can’t trigger.
Answer is A. Enable auditing. Logical answer due to the process of elimination. Communication policy is regarding sensitive information or threatening language, as a couple of examples. Insider risk policy is regarding IP theft, data leakage, etc. Usage analytics is regarding M365 services, resource allocation.