Exam SC-200 topic 1 question 60 discussion

A. Perform a user data search There’s no specific feature called "user data search" in Microsoft Purview. This option is vague and doesn’t align with a known tool for searching email content, so it’s not appropriate. B. Create a records management disposition This refers to managing the lifecycle of records (e.g., retention or deletion policies), not searching for specific content like emails. It doesn’t meet the requirement. C. Perform an audit search Audit searches track user activities (e.g., logins or file access) in audit logs, not the content of emails. This is unrelated to searching email subject lines. D. Perform a content search Content search is a Microsoft Purview tool designed to search for content, such as emails, across Microsoft 365. It allows you to specify mailboxes and use search queries (e.g., for "Project1" in the subject), making it the ideal choice.

The correct answer is: D. Perform a content search. Explanation: Content Search in Microsoft Purview eDiscovery allows you to search email messages, Teams chats, and documents across Exchange Online, SharePoint, OneDrive, and Teams. You can filter the search to look for emails where the subject line contains "Project1" and limit the scope to mailboxes of users who worked on Project1. This is the best approach for identifying relevant emails efficiently. Why Not the Other Options? A. User Data Search → Not a valid feature in Purview. B. Records Management Disposition → Used for managing retention policies, not searching emails. C. Audit Search → Used for tracking user activities, not searching email content.

コンテンツ検索は、対象ユーザーを選択して実行できます。 https://learn.microsoft.com/ja-jp/purview/ediscovery-content-search

You can search mailboxes of only the relevant users makes me think its audit search, content search will pull everything from everyone. Feel free to correct me if im wrong!

D is correct answer