Exam MS-101 topic 3 question 137 discussion

Actual exam question from Microsoft's MS-101

Question #: 137
Topic #: 3

HOTSPOT
-

You have a Microsoft 365 E5 subscription that has auditing turned on. The subscription contains the users shown in the following table.

You create an audit retention policy named Policy1 as shown in the following exhibit.

You plan to create a new user named User1.

How long will the user creation audit event be available if Admin1 or Admin2 creates User1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by emanresu at Jan. 9, 2023, 12:21 p.m.

Comments

Submit Cancel

emanresu

Highly Voted 2 years, 5 months ago

Correct me if I am wrong but default should be 365 days so one year Answer 1 6 months Answer 2 1 year Similar Exam Question 210: https://pupuweb.com/microsoft-365-mobility-security-ms101-actual-exam-question-answer-dumps-3/

upvoted 6 times

Arlecchino

2 years, 5 months ago

I believe you are correct, E5 is 365 days while E3 is 90 days.

upvoted 2 times

Arlecchino

2 years, 5 months ago

But should not your answers be exchanged? - Admin is assigned E5 so it should be 365 days for answer 1 - The other as per policy should be 180 days for answer 2

upvoted 2 times

emanresu

2 years, 5 months ago

Ok, double checked now and answer here should be correct because admin2 doesn't have E5 license. Answer1 6 months Answer 2 90 days The default audit log retention policy only applies to audit records for activity performed by users who are assigned an Office 365 or Microsoft 365 E5 license or have a Microsoft 365 E5 Compliance or E5 eDiscovery and Audit add-on license. If you have non-E5 users or guest users in your organization, their corresponding audit records are retained for 90 days. https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-retention-policies?view=o365-worldwide

upvoted 8 times

Arlecchino

2 years, 5 months ago

Okay, in this case, it's 180 and 90 days. thanks for sharing.

upvoted 1 times

...

Petrucci914

2 years, 4 months ago

"To retain an audit log for longer than 90 days (and up to 1 year), the user who generates the audit log (by performing an audited activity) must be assigned an Office 365 E5 or Microsoft 365 E5 license or have a Microsoft 365 E5 Compliance or E5 eDiscovery and Audit add-on license. To retain audit logs for 10 years, the user who generates the audit log must also be assigned a 10-year audit log retention add-on license in addition to an E5 license." https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-log-retention-policies?view=o365-worldwide#before-you-create-an-audit-log-retention-policy

upvoted 3 times

...

hufflepuff

Most Recent 2 years, 4 months ago

Answer is correct. User 1 would normally be 365 due to E5 license, however policy reduces to 6 months. User 2 does not have E5 license, so is limited to 90 days.

upvoted 4 times

...