nerdexam
Microsoft

SC-401 · Question #222

You have a Microsoft 365 subscription. You plan to retain the following audit log record types and activities for the next three years: - CopilotInteraction: All activities selected (1/1)…

The correct answer is A. 1. Microsoft Purview audit retention policies support multiple record types within a single policy, and for each record type you can select all activities or only specific activities. Since all three record types here share the same retention duration (3 years) and the same…

Implement data loss prevention and retention

Question

You have a Microsoft 365 subscription. You plan to retain the following audit log record types and activities for the next three years:

  • CopilotInteraction: All activities selected (1/1)
  • Interacted with Copilot
  • ComplianceDLPEndpoint: All activities selected (2/2)
  • Matched DLP rule
  • Removed DLP rule from document
  • AzureActiveDirectory: 2 of 25 activities selected (2/25)
  • Reset user password
  • Changed user password

What is the minimum number of audit retention policies you should create to retain only the selected record types and activities?

Options

  • A1
  • B2
  • C3
  • D5

How the community answered

(22 responses)
  • A
    77% (17)
  • B
    5% (1)
  • C
    14% (3)
  • D
    5% (1)

Explanation

Microsoft Purview audit retention policies support multiple record types within a single policy, and for each record type you can select all activities or only specific activities. Since all three record types here share the same retention duration (3 years) and the same organizational scope, they can all be consolidated into one policy: CopilotInteraction with all activities, ComplianceDLPEndpoint with all activities, and AzureActiveDirectory with only the two specified activities. You only need additional policies when retention durations differ or when you need different user/group scopes. Because none of those conditions apply here, the minimum is 1 policy.

Topics

#Audit Retention Policies#Microsoft 365 Audit#Data Retention#Compliance

Community Discussion

No community discussion yet for this question.

Full SC-401 Practice