Exam SC-401 topic 3 question 6 discussion

Actual exam question from Microsoft's SC-401

Question #: 6
Topic #: 3

HOTSPOT -
You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.
You create the audit retention policies shown in the following table.

The users perform the following actions:
User1 renames a Microsoft SharePoint Online site.
User2 sends an email message.
How long will the audit log records be retained for each action? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by leprechaun at June 3, 2025, 9:30 a.m.

Comments

Submit Cancel

leprechaun

Highly Voted 2 months ago

User1 renames a SharePoint site Matching policy: AuditRetention4 Record type: SharePoint Activity: SiteRenamed User: User1 Retention: 9 months Priority: 40 (higher than AuditRetention5 which is general) Correct Answer: 9 months User2 sends an email message Activity: Send (ExchangeItem) AuditRetention2 has the activity, but only applies to User1, not User2 No other ExchangeItem policy matches Send for User2 Default retention applies, which in Microsoft 365 E5 is: Default audit log retention for ExchangeItem (E5 license): 1 year Correct Answer: 1 year

upvoted 13 times

...

SH_Train

Most Recent 1 month, 3 weeks ago

When User1 renames a Sharepoint site, the audit retention period will be 6 months as policy AuditRetention3 is a higher priority. If the record type is selected (Sharepoint) and no activities are selected (SiteRenamed), then this policy will apply to all activities for the selected record types.

upvoted 1 times

...