MS-102 · Question #537
You have a Microsoft 365 subscription. All users have their email stored in Microsoft Exchange Online. In the mailbox of a user named User1, you need to preserve a copy of all the email messages…
The correct answer is B. From the Security & Compliance admin center, create a label and a label policy. To automatically preserve email content matching specific keywords, you create a retention label with a condition that applies the label to content containing the keyword 'ProjectX', then publish or auto-apply that label via a label policy targeting User1's mailbox. Auto-apply…
Question
You have a Microsoft 365 subscription. All users have their email stored in Microsoft Exchange Online. In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word ProjectX. What should you do?
Options
- AFrom the Security & Compliance admin center, create a data loss prevention (DLP) policy.
- BFrom the Security & Compliance admin center, create a label and a label policy.
- CFrom the Security & Compliance admin center, start a message trace.
- DFrom Microsoft Defender for Cloud Apps, create an activity policy.
How the community answered
(24 responses)- A13% (3)
- B79% (19)
- C4% (1)
- D4% (1)
Explanation
To automatically preserve email content matching specific keywords, you create a retention label with a condition that applies the label to content containing the keyword 'ProjectX', then publish or auto-apply that label via a label policy targeting User1's mailbox. Auto-apply label policies can scan Exchange content and apply retention labels based on keyword matches, ensuring copies are preserved. A DLP policy (A) is designed to detect and restrict sharing of sensitive data, not to preserve content. A message trace (C) only tracks mail flow metadata in near-real-time; it does not preserve message content. A Defender for Cloud Apps activity policy (D) monitors cloud app behavior but does not preserve mailbox content.
Topics
Community Discussion
No community discussion yet for this question.