Exam MS-203 topic 2 question 23 discussion

Correct anwser is A and B. Get-MessageTrace only returns mails from last 10 days. "To search for message data that is greater than 10 days old, use the Start-HistoricalSearch and Get-HistoricalSearch cmdlets."

Answer, run a message trace from security and compliance center https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/message-trace-scc?view=o365-worldwide Run a message trace from EAC https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/run-a-message-trace-and-view-results#view-message-trace-results-for-messages-more-than-7-days-old

A and B is correct answer

Correct anwser is A and B.

A: Since we have an option in S&C Admin Center to run a message trace (Normally a redirection to ECP). B: Regular Message Trace.

Message trace these days is in M365D portal...but really only as a link to Exchange admin center...still, if past is prologue the legacy answers would apply

Correct anwser is A and B.

A and B are correct.

on exam 11-27-21

I do this a lot. A and B. get-messagetrace cannot show more than 10days. If you run this command and you put a start date that is more than 10days ago, there will be an error and will return no results. The correct command to trace emails that are more that 10 days ago is Start-HistoricalSearch and Get-HistoricalSearch. else, use the admin portal either S&C or Exchange admin center.

A&B are the good answers I think

I select Security & Compliance admin center and Exchange admin center. Get-MessageTrace is limited to 7 days. Start-HistoricalSearch will allow you to search the full 90 days. https://social.technet.microsoft.com/Forums/en-US/ce0252af-fec7-40e5-8935-1dbe70ee4fe1/getmessagetrace-look-back-period?forum=onlineservicesexchange

this is what appears in the MS-203 official book: For example, to perform the same search for messages sent by [email protected] in a specific time interval, you would run the following cmdlet: Get-MessageTrace -SenderAddress “[email protected]” ‘ -StartDate “01/08/2019 10:00:00” ‘ -EndDate “01/09/2019 11:00:00” Note: There is often a delay of 5 to 30 minutes before message trace information is available after a message is sent. This applies to both the EAC and Windows PowerShell.

Correct answer should be A and B since you need to search for 30 days trace. You can use Get-MessagetraceDetail and Get-MessageTrace to search message data for the last 10 days. If you enter a time period that's older than 10 days, you will receive an error and the command will return no results.

Answer:- A,B

https://docs.microsoft.com/en-us/powershell/module/exchange/get-messagetrace?view=exchange-ps. This is a URL that works the one on the Question doesn't

The answer A is also wrong as you can't export failed messages from the Security & Compliance admin center