nerdexam
Microsoft

SC-401 · Question #76

You have a Microsoft 365 subscription that contains the users shown in the following table. You review the audit retention period of each user. Which users' audit logs are retained for nine months?

The correct answer is A. User3 only. Microsoft 365 E5 subscriptions include Purview Audit (Premium), which provides a default audit log retention period of one year, encompassing nine months of retention.

Implement data loss prevention and retention

Question

You have a Microsoft 365 subscription that contains the users shown in the following table. You review the audit retention period of each user. Which users' audit logs are retained for nine months?

Exhibit

SC-401 question #76 exhibit

Options

  • AUser3 only
  • BUser1 and User3
  • CUser2 and User3
  • DUser1, User2, and User3

How the community answered

(23 responses)
  • A
    96% (22)
  • B
    4% (1)

Why each option

Microsoft 365 E5 subscriptions include Purview Audit (Premium), which provides a default audit log retention period of one year, encompassing nine months of retention.

AUser3 onlyCorrect

Users with a Microsoft 365 E5 license (like User3) are provisioned with Audit (Premium), which includes a default audit log retention period of one year (365 days). This retention period encompasses nine months.

BUser1 and User3

This is incorrect because User1, with a Microsoft 365 Business Standard license, is provisioned with Audit (Standard), which only retains audit logs for 90 days.

CUser2 and User3

This is incorrect because User2, with a Microsoft 365 E3 license, is provisioned with Audit (Standard), which only retains audit logs for 90 days.

DUser1, User2, and User3

This is incorrect because both User1 and User2 are provisioned with Audit (Standard), which only retains audit logs for 90 days, not nine months.

Concept tested: Microsoft Purview audit log retention periods

Source: https://learn.microsoft.com/en-us/purview/audit-log-retention-policies

Topics

#Audit logs#Retention policies#Microsoft Purview#Compliance

Community Discussion

No community discussion yet for this question.

Full SC-401 Practice