Microsoft Exam Questions

Which cmdlet should you use in a scheduled task?

You have an Exchange Server 2013 organization.
You need to ensure that an administrator named Adminl receives a daily email message that contains a log of
all the Exchange Server administrative actions.
Which cmdlet should you use in a scheduled task?

A.
Search-AdminAuditLog

B.
Set-AdminAuditLogConfig

C.
New-AdminAuditLogSearch

D.
Write-AdminAuditLog

Explanation:
New-AdminAuditLogSearch
http://technet.microsoft.com/en-us/library/ff459243(v=exchg.150).aspx
After the New-AdminAuditLogSearch cmdlet is run, the report is delivered to the mailboxes you specify within
15 minutes. The log is included as an XML attachment on the report email message. The maximum size of the
log that can be generated is 10 megabytes (MB).
You need to be assigned permissions before you can run this cmdlet. Although all parameters for this cmdlet
are listed in this topic, you may not have access to some parameters if they’re not included in the permissions
assigned to you. To see what permissions you need, see the “View-only administrator audit logging” entry in the
Exchange and Shell infrastructure permissions topic.
New-AdminAuditLogSearch -ExternalAccess $true -StartDate 07/25/2013 -EndDate 10/24/2013 –
StatusMailRecipients admin@contoso.com,pilarp@contoso.com -Name “Datacenter admin audit log”