Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 2 question 17 discussion

Actual exam question from Microsoft's MS-101

Question #: 17
Topic #: 2

You have a Microsoft 365 subscription.
All users have their email stored in Microsoft Exchange Online.
In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word ProjectX.
What should you do first?

A. From Microsoft Defender for Cloud Apps, create an access policy.
B. From the Security & Compliance admin center, create an eDiscovery case.
C. From Microsoft Defender for Cloud Apps, create an activity policy.
D. From the Security & Compliance admin center, create a data loss prevention (DLP) policy.

Show Suggested Answer

Suggested Answer: B 🗳️

by derSchweiger at Sept. 3, 2022, 4:34 p.m.

Comments

Submit Cancel

mackypatio

Highly Voted 2 years, 9 months ago

I do this a lot. It is B.

upvoted 15 times

...

Moderator

Highly Voted 2 years, 9 months ago

Selected Answer: B

B is correct. Microsoft Purview --> Create a Case --> Hold --> Create new Hold

upvoted 7 times

Fala_Fel

2 years, 5 months ago

Yep Jan2023 eDiscovery is in Purview. Who knows where it will be next month ;) Purview > Solutions > eDiscovery > Standard > Create a Case ........

upvoted 3 times

...

athadd

Most Recent 2 years, 5 months ago

Selected Answer: B

https://docs.microsoft.com/en-us/microsoft-365/compliance/create-ediscovery-holds?source=recommendations&view=o365-worldwide

upvoted 1 times

...

sajlen1414

2 years, 6 months ago

Selected Answer: B

DLP prevents leaks (like send date of birth via e-mail) eDiscovery finds and preserves content for a court (or otherwise) case. User can delete message, but it will be still available to admin.

upvoted 6 times

...

Krystian

2 years, 7 months ago

Selected Answer: B

IMO answer is B

upvoted 1 times

...

Fefe_ES

2 years, 9 months ago

Selected Answer: B

B answer

upvoted 3 times

...

FumerLaMoquette

2 years, 9 months ago

Selected Answer: B

Lol b.

upvoted 4 times

...

gmKK

2 years, 9 months ago

Selected Answer: B

https://docs.microsoft.com/en-us/microsoft-365/compliance/create-ediscovery-holds?source=recommendations&view=o365-worldwide

upvoted 5 times

RenegadeOrange

2 years, 9 months ago

Agree it is B, query-based hold in e-discovery. There are no retention or hold options for DLP.

upvoted 3 times

...

ahmadalh

2 years, 9 months ago

i think the answer is b

upvoted 2 times

...

derSchweiger

2 years, 10 months ago

Shouldn't be it B?

upvoted 3 times

A_Blameless_Child

2 years, 10 months ago

Yes, I believe so. Can't find anything about retention for items https://docs.microsoft.com/en-us/microsoft-365/compliance/dlp-conditions-and-exceptions?view=o365-worldwide#actions-for-dlp-policies

upvoted 2 times

...