Microsoft 365 Security Administration — Question 27

You have a Microsoft 365 E5 subscription.
Some users are required to use an authenticator app to access Microsoft SharePoint Online.
You need to view which users have used an authenticator app to access SharePoint Online. The solution must minimize costs.
What should you do?

Answer options

• A. From the Microsoft 365 Security admin center, download a report.
• B. From Azure Log Analytics, query the logs.
• C. From the Microsoft 365 Security admin center, perform an audit log search.
• D. From the Enterprise applications blade of the Azure Active Directory admin center, view the sign-ins.

Correct answer: D

Explanation

The correct answer is D because the Enterprise applications blade of the Azure Active Directory admin center provides detailed sign-in logs, including authentication methods used. Options A and C do not specifically show authenticator app usage, and option B involves querying logs that may not directly indicate the authenticator app usage in SharePoint Online.