Your company`s Azure subscription includes a hundred virtual machines that have Azure Diagnostics enabled. You have been tasked with retrieving the identity of the user that removed a virtual machine fifteen days ago. You have already accessed Azure Monitor. Which of the following options should you use? 

Answer options:

A. Application Log
B. Metrics
C. Activity Log
D. Logs

C

Azure activity logs provide insight into the operations that were performed on resources in your subscription. Activity logs were previously known as audit logs or operational logs, because they report control-plane events for your subscriptions. Reference: https://docs.microsoft.com/en-us/azure/security/azure-log-audit