Refer to the exhibit. You run this KQL query in Azure Monitor Log Analytics for an Azure SQL Database. What type of events does the query return?
AUSC indicates audit change events.
Why this answer
Option C is correct because action_id_s == 'AUSC' corresponds to AUDIT_CHANGE events in SQL Server audit logs. Option A is wrong because 'AUSC' is not for schema changes. Option B is wrong because it is not for logins.
Option D is wrong because it is not for data modifications.