MS-102 Practice Question 3102
Exam: MS-102
Domain: Manage compliance by using Microsoft Purview
Difficulty: medium
Which Exchange Online PowerShell cmdlet is used to query the Microsoft Purview unified audit log programmatically for administrative actions?
Answer Options
A
Search-UnifiedAuditLog
B
Get-MailboxStatistics
C
Test-EmailFlowOrientation
D
Set-ExecutionPolicy
Correct Answer
A: Search-UnifiedAuditLog
Explanation
The Search-UnifiedAuditLog cmdlet queries the tenant unified audit log using filters for date ranges, operations, record types, and user identities.