You have a Microsoft 365 subscription that uses Microsoft Defender XDR.

You plan to investigate suspicious activity in the subscription by using Microsoft Graph activity logs.

You need to search for requests to delete resources from the subscription and identify the users that initiated the requests.

How should you complete the KQL query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.