A company has a set of virtual machines defined in Azure. They want to find out which user shuts down a particular virtual machine in the last 7 days. Which of the following can help with this requirement?

Answer options:

A.Azure Advisor
B.Azure Event Hubs
C.Azure Activity Logs
D.Azure Service Health

Answer – C 
You see all operations on all resources via the use of Azure Activity Logs. 
An example is given below shows operations being logged against the Virtual Machine service. 

Since this is clear from the implementation, all other options are incorrect. 
For more information on Activity Logs, please visit the below URL- 

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/activity-logs-overview