You are reviewing alerts in the Microsoft 365 Defender portal. How long are the alerts retained in the portal?

The correct answer is D. 6 months. Data from Microsoft Defender for Endpoint is retained for 180 days, visible across the portal. However, in the advanced hunting investigation experience, it's accessible via a query for a period of 30 days…

Submitted by carter_n· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

Options

A30 days
B60 days
C3 months
D6 months
E12 months

How the community answered

(24 responses)

A
8% (2)
D
88% (21)
E
4% (1)

Explanation

Data from Microsoft Defender for Endpoint is retained for 180 days, visible across the portal. However, in the advanced hunting investigation experience, it's accessible via a query for a period of 30 days. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/data-storage- privacy?view=o365-worldwide#how-long-will-microsoft-store-my-data-what-is-microsofts-data- retention-policy

Topics

#Microsoft 365 Defender#Alert retention#Security alerts#Defender XDR

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice