exam questions

Exam SC-400 All Questions

View all questions & answers for the SC-400 exam

Exam SC-400 topic 5 question 26 discussion

Actual exam question from Microsoft's SC-400
Question #: 26
Topic #: 5
[All SC-400 Questions]

SIMULATION
-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Microsoft 365 Username: [email protected]
Microsoft 365 Password: **********

If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678
-

You are investigating a data breach.

You need to retain all Microsoft Exchange items in the mailbox of Alex Wilber that contain the word Falcon and were created in the year 2021.

To complete this task, sign in to the appropriate admin center.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Jideakin
1 month ago
falcon (c:c) ((Sent>2025-03-26) OR (Received>2025-03-26))
upvoted 1 times
...
Phil_79
2 months, 1 week ago
for email, it's not "created" but "sent". "Created" will fire a warning
upvoted 1 times
...
jakke91
5 months, 1 week ago
When I add the filters in my lab I always get the warning: You have used filters that will not apply to a specific workload you selected earlier. Condition Filters Dropped Created Exchange
upvoted 1 times
jakke91
4 months, 3 weeks ago
The condition should not be created but received.
upvoted 1 times
Jideakin
1 month ago
"received" only would be incomplete. what about emails sent by Alex that are in sent items folder that have the keyword "Falcon"? should they not be included? I think it should look like this: falcon (c:c) ((Sent>2020-12-31) OR (Received>2020-12-31))
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago