After a suspicious admin role change, auditors ask whether Microsoft 365 retained an activity history they can investigate. Which Purview benefit answers that need?
Select an answer to reveal the explanation.
Short Explanation
When something weird happened last Tuesday, you need a paper trail. Purview auditing keeps that activity history so investigators can reconstruct who did what.
Full Explanation
Microsoft Purview auditing retains records of activities across Microsoft 365 so organizations can investigate security and compliance incidents. That forensic and compliance value is distinct from collaboration features or unrelated Facilities workflows. At fundamentals depth, remember auditing exists to support after-the-fact investigation.