Exam MS-100 topic 1 question 36 discussion

B is correct. In reality, I'd tackle this with an smtp transport rule actually. It does not specify the user is external, so the email wouldn't necessarily even pass through spam filtering. I did this before as a O365 arch for a security incident where we had to find any additional compromised accounts attempting to send out emails with certain keywords/subjects etc.

The solution of creating a spam filter policy via the Security & Compliance admin center does not meet the goal of keeping a duplicate of all email messages from a specified user that includes a specific word. B. No. A spam filter policy is used to manage and filter unwanted or malicious emails, typically based on specific criteria such as sender, subject, or content. It is not designed to keep a duplicate of all email messages or perform content-based filtering for specific words. To achieve the goal of keeping a duplicate of all email messages from a specified user that includes a specific word, an alternative solution would be required. One possible solution could involve using features such as eDiscovery or journaling in Microsoft Exchange Online to capture and store the desired email messages based on the specified criteria.

B. No The solution described in the statement does not meet the goal of keeping a duplicate of all email messages from a specified user that includes a specific word. A spam filter policy is used to identify and block unwanted email messages, it is not the right solution to keep a duplicate of all email messages from a specified user that includes a specific word. A possible solution to meet the goal would be to create an In-Place eDiscovery & Hold in Exchange Online

It''s A ofcourse we can create policy for specific words.

The answer is right