Exam CAS-004 topic 1 question 293 discussion

o E-discovery; Given the organization's situation with many legal holds, the ability to efficiently find and retrieve relevant emails and other electronic data for legal discovery is crucial. o DLP (Data Loss Prevention): While DLP can be useful for preventing data leaks and unauthorized access, its primary focus is on security, not necessarily on the efficient retrieval of data for legal purposes.

E-discovery (electronic discovery) is crucial for organizations involved in frequent litigation and legal holds. This functionality allows the organization to search, preserve, and retrieve relevant electronic communications (such as emails) in response to legal or regulatory requests.

Only A makes sense really

Given the organization's need to handle frequent litigation and manage numerous legal holds, incorporating e-discovery functionality into the new email system is crucial. It ensures compliance with legal requirements by enabling effective preservation, search, and retrieval of electronic communications.

There are at least 5 Email services that have built-in e-discovery capabilities, so the answer is C. I don't know why so many people believe that e-discovery can't be part of an Email platform...

Only A makes sense really

How do you have e-discovery in an email system?? DLP is the correct answer

The fact that there are already a large number of legal holds, chances are that there is already e-discovery as part of the process. DLP makes sense.

C. "You can place a mailbox on Litigation hold to retain all mailbox content, including deleted items and the original versions of modified items. When you place a user mailbox on Litigation hold, content in the user's archive mailbox (if it's enabled) is also retained. When you create a hold, you can specify a hold duration (also called a time-based hold) so that deleted and modified items are retained for a specified period and then permanently deleted from the mailbox. Or you can just retain content indefinitely (called an infinite hold) or until the Litigation hold is removed. If you do specify a hold duration period, it's calculated from the date a message is received or a mailbox item is created."

First, a definition: A legal hold is a process that an organization uses to preserve all forms of potentially relevant information when litigation is pending or reasonably anticipated. The only two that relate to what an email service can provide are A and B. Between these two, a DLP is the best choice for preserving information. A. DLP - Data Loss Prevention (DLP) for email systems helps organizations prevent sensitive data within email from being lost, leaked, misused, or accessed by unauthorized individuals. B. Encryption - Encrypting an email message in Outlook means it's converted from readable plain text into scrambled cipher text. Only the recipient who has the private key that matches the public key used to encrypt the message can decipher the message for reading. Any recipient without the corresponding private key, however, sees indecipherable text.

C; E-Discovery

The correct answers is C