HOTSPOT You have a Microsoft 365 E5 subscription that uses Microsoft Purview and contains a user named User1. User1 shares a Microsoft Power BI report file from the Microsoft OneDrive folder of your company to an external user by using Microsoft Teams. You need to identify which Power BI report file was shared. How should you configure the search? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Interactive Drag & Drop Matching
Drag each configuration to its target, or tap an option then tap a target slot.
Available Configurations3 remaining
This refers to the type of data source from which the activity records are retrieved.
These are the actions performed in your environment that are logged for auditing purposes.
This refers to the specific service or application where the activity took place.
Targets & Placement
1Activities
Drop configuration here
2Record Type
Drop configuration here
3Workload
Drop configuration here
Explanation
Hotspot Solution:
Recommended Community Solution:
Activities: These are the actions performed in your environment that are logged for auditing purposes. They can include a variety of actions such as file sharing, downloading files, copying files, etc. 2. Record Type: This refers to the type of data source from which the activity records are retrieved. It can be Microsoft Teams, OneDrive, PowerBiAudit. 3. Workload: This refers to the specific service or application where the activity took place. It can be Microsoft Teams, OneDrive, PowerBi, SharePoint, etc. Now, tying them up: - The activity is "Share file, folder or site" because User1 shared a Power BI report file. This activity logs any instance of sharing a file, folder, or site. - The record type is "OneDrive"because the Power BI report file was stored in OneDrive, and we want to retrieve activity records from there. - The workload is "Microsoft Teams" because the sharing activity was performed through Microsoft Teams.
Community Discussion
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
1
From Microsoft Teams (workload) a onedrive (Record Type) file is shared (Activity). I think DChilds explained it correct.
2
I spend more time on this question since it has been seen 27/04.2024 as DChilds said.. By performing some auditlog search in our current tenant.. Some selection in activities or record types limits the other selections. So.. My final review on this question is that Activities: Share file, folder, or site Record type: OneDrive Workload: OneDrive Why both record type and workload is OneDrive? When search audit logs, I found that some shares via Teams chat also seen OneDrive as workload. So first is share file because we want to find which file was shared with external so, to narrow search filter last 2 option OneDrive and also user can be selected in search but it is not case in question.