A user cannot sign in; the account looks enabled. The admin needs the failure reason, error code, and any Conditional Access that blocked the attempt. Where first?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Sign-in logs are the black box recorder for authentication. Open them first.
Full explanation below image
Full Explanation
Correct Answer — B
Entra sign-in logs detail failure reasons, error codes, client, location, and CA results. Site usage, message trace, and printer queues don't explain interactive sign-in failures.
Exam tip: Auth issues → Entra sign-in logs first.