Courseiva
Describe Microsoft 365 apps and servicesmediumDrag & DropObjective-mapped

MS-900 Describe Microsoft 365 apps and services Practice Question

Drag and drop the steps to enable Microsoft 365 audit logging in the compliance center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.

The correct sequence to enable Microsoft 365 audit logging in the compliance center is: first sign in to the Microsoft 365 Compliance center, then navigate to the Audit solution, click 'Start recording user and admin activity' to enable auditing, and finally wait for the audit log to become active (which may take up to 24 hours). This order ensures that all prerequisites are met and the feature is properly activated.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.

    Why this is correct

    This sequence is correct because signing in to the Microsoft 365 Compliance center is mandatory to establish an authenticated session and verify your organization's admin or compliance permissions. Once signed in, you navigate to the Audit solution under the Solutions section to access the audit log management page. The 'Start recording user and admin activity' button enables auditing, which is off by default, and the subsequent wait is necessary because Microsoft 365 provisions the audit log pipeline, which can take up to 48 hours to activate fully.

  • Step 1: Navigate to the Audit solution. Step 2: Sign in to the Microsoft 365 Compliance center. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.

    Why it's wrong here

    This order is invalid because the Microsoft 365 Compliance center is an authenticated portal; without signing in first, you have no session or token to retrieve the Audit solution page. Attempting to navigate directly would trigger an authentication challenge or redirect to a login screen, preventing access to any audit-related features. The correct process requires authentication as the foundational step before any solution-specific navigation can occur.

  • Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Click 'Start recording user and admin activity'. Step 3: Navigate to the Audit solution. Step 4: Wait for the audit log to be enabled.

    Why it's wrong here

    This order places the activation action before locating the Audit solution, which is impossible because the 'Start recording user and admin activity' button exists only on the Audit solution's interface. You must first navigate to that page to render the button and any related controls in your browser session. Clicking a button that is not yet loaded on the page would fail, and the sequence also incorrectly implies that the action is available globally within the Compliance center.

  • Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Wait for the audit log to be enabled. Step 4: Click 'Start recording user and admin activity'.

    Why it's wrong here

    This sequence is illogical because it expects you to wait for the audit log to be enabled before actually enabling it. The 'Start recording user and admin activity' command is the trigger that initiates the audit log provisioning; without clicking it, no enabling process occurs, and the wait would be meaningless. Navigation alone only provides the interface, not the activation, so the click must precede any waiting period.

About these practice questions

One of 217 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.