ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam
Go to Exam

Exam MS-500 topic 4 question 69 discussion

Actual exam question from Microsoft's MS-500
Question #: 69
Topic #: 4
[All MS-500 Questions]

HOTSPOT -
You have a Microsoft 365 E5 subscription that contains two users named User1 and User2.
You create the audit retention policies shown in the following table.

The users perform the following actions:
✑ User1 renames a Microsoft SharePoint Online site.
✑ User2 sends an email message.
How long will the audit log records be retained for each action? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/audit-log-retention-policies?view=o365-worldwide
by MaRid at Sept. 10, 2022, 11:04 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
MaRid
Highly Voted 2 years, 8 months ago
Given answer is correct User1 renames SharePoint is 6 month, because "all custom audit log retention policies (created by your organization) take priority over the default retention policy." and policy AuditRetention3 has highest priority and matches first; activites = none „If you don't choose specific activities, the policy will apply to all activities of the selected record type.“ User2 sends email is 1 year, because no policy is matching and 1 year is default for users with Microsoft 365 E5 subscription
upvoted 9 times
yoton
2 years, 7 months ago
Killer answer and explanation, thank you.
upvoted 2 times
...
ariania
2 years, 7 months ago
But retention are longest time wins, so why is it not 9 months here? it seems to hit user1
upvoted 7 times
cld475
2 years, 5 months ago
I was also questioning that and found something: https://learn.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide it mentions: "It's possible for a retention period of 5 years in a retention policy or label wins over a retention period of 7 years in a retention policy or label, because the 5-year period is configured to start based on when the file is last modified, and the 7-year period is configured to start from when the file is created." My guess is now that the policy with 9-months is based on the edit/renaming and the 5-months on "all actions" and that means that 5-months is the correct answer, because it depends on multiple actions instead of only one specific but I can't find anything else about that.
upvoted 1 times
cld475
2 years, 5 months ago
Typo: Ofc it is 6-months not five ;)
upvoted 1 times
...
...
c95
2 years, 5 months ago
Yes I know also that longest retention wins - idk if priority makes any sense here.
upvoted 1 times
...
...
AWpkl
2 years, 3 months ago
This is well-explained except for one factor. These are policies and not labels. If they were lables, only one could be applied, and priority would matter. Because they are policies, multiple can apply and the principles of resolving conflicts are considered. Retention is preferred over deletion, and longest retention period wins, so I think the records would be kept for 9 months in this case.
upvoted 3 times
...
abrub
2 years, 1 month ago
Wouldn't it default to the longest available audit duration if multiple policies are hit? I'm still thinking 9 month is the answer for the first part.
upvoted 1 times
...
Load full discussion...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago