Microsoft 365 Mobility and Security (legacy) — Question 160

You purchase a Microsoft 365 subscription.
Your company plans to use a third-party security information and event management (SIEM) application. The company does not want to record and retain audit log data in Microsoft 365.
You need to turn off Microsoft 365 auditing.
What should you use?

Answer options

• A. the Microsoft 365 compliance center
• B. Exchange Online PowerShell
• C. the Azure Active Directory Module for Windows PowerShell
• D. the Microsoft 365 admin center

Correct answer: B

Explanation

The correct method to disable Microsoft 365 auditing is through Exchange Online PowerShell, as it provides specific cmdlets for managing audit settings. The Microsoft 365 compliance center and Microsoft 365 admin center do not offer the capability to turn off auditing directly, while the Azure Active Directory Module for Windows PowerShell is not focused on Exchange-specific audit settings.