Exam MS-500 topic 4 question 60 discussion

Starting in January 2019, Microsoft is turning on mailbox audit logging by default for all Office 365 organizations. This means that certain actions performed by mailbox owners, delegates, and admins are automatically logged, and the corresponding mailbox audit records will be available when you search for them in the mailbox audit log. Before mailbox auditing was turned on by default, you had to manually enable it for every user mailbox in your organization.

Answer reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide#change-the-mailbox-actions-to-audit:~:text=You%20can%20use%20the%20AuditAdmin%2C%20AuditDelegate%2C,365%20group%20mailboxes%20can't%20be%20customized).

By adding the "Mailbox Search" role to the Organization Management role group, you enable auditing for all Microsoft Exchange Online users. This role provides the necessary permissions to search and access mailbox audit logs for auditing purposes.

C is correct!

C. Run the Set-Mailbox cmdlet Change the mailbox actions to audit You can use the AuditAdmin, AuditDelegate, or AuditOwner parameters on the Set-Mailbox cmdlet to change the mailbox actions that are audited for user mailboxes and shared mailboxes (audited actions for Microsoft 365 group mailboxes can't be customized). https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide

correct answer. As previously explained, one of the key benefits of having mailbox auditing on by default is: you don't need to manage the mailboxes actions that are audited. Microsoft does this for you and we'll automatically add new mailbox actions to be audited by default as they're released. However, your organization might be required to audit a different set of mailbox actions for user mailboxes and shared mailboxes. Change the mailbox actions to audit You can use the AuditAdmin, AuditDelegate, or AuditOwner parameters on the Set-Mailbox cmdlet to change the mailbox actions that are audited for user mailboxes and shared mailboxes (audited actions for Microsoft 365 group mailboxes can't be customized).

https://docs.microsoft.com/en-us/microsoft-365/compliance/enable-mailbox-auditing?view=o365-worldwide#:~:text=Manually%20enable%20mailbox%20auditing%20on%20individual%20mailboxes%20(run%20the%20command%2C%20Set-Mailbox%20-Identity%20%3CMailboxIdentity%3E%20-AuditEnabled%20%24true).%20After%20you%20do%20this%2C%20you%20can%20use%20audit%20log%20searches%20in%20the%20Microsoft%20365%20compliance%20center%20or%20via%20the%20Office%20365%20Management%20Activity%20API.