Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Enable auditing
The “Elevation of Exchange admin privileges” alert policy relies on Unified Audit Log events (e.g., Add-RoleGroupMember). If auditing isn’t enabled, the alert can’t trigger.
Answer is A. Enable auditing. Logical answer due to the process of elimination. Communication policy is regarding sensitive information or threatening language, as a couple of examples. Insider risk policy is regarding IP theft, data leakage, etc. Usage analytics is regarding M365 services, resource allocation.