You have a Microsoft 365 E3 subscription. You plan to audit all Microsoft Exchange Online user and admin activities. You need to ensure that all the Exchange audit log records are retained for one year. What should you do?
A.
Modify the retention period of the default audit retention policy.
B.
Create a custom audit retention policy.
C.
Assign Microsoft 365 Enterprise E5 licenses to all users.
D.
Modify the record type of the default audit retention policy.
Before you create an audit log retention policy
You have to be assigned the Organization Configuration role in the Security & Compliance Center to create or modify an audit retention policy.
You can have a maximum of 50 audit log retention policies in your organization.
To retain an audit log for longer than 90 days (and up to 1 year), the user who generates the audit log (by performing an audited activity) must be assigned an Office 365 E5 or Microsoft 365 E5 license or have a Microsoft 365 E5 Compliance or E5 eDiscovery and Audit add-on license. To retain audit logs for 10 years, the user who generates the audit log must also be assigned a 10-year audit log retention add-on license in addition to an E5 license.
All custom audit log retention policies (created by your organization) take priority over the default retention policy. For example, if you create an audit log retention policy for Exchange mailbox activity that has a retention period that's shorter than one year, audit records for Exchange mailbox activities will be retained for the shorter duration specified by the custom policy.
https://docs.microsoft.com/en-us/microsoft-365/compliance/audit-log-retention-policies?view=o365-worldwide
This section is not available anymore. Please use the main Exam Page.MS-500 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
BoxyBrown
2 years, 3 months agomkoprivnj
3 years, 4 months agoCarlo5
3 years, 6 months agoDavemarshal
3 years, 8 months agoSerhioG
4 years agoWMG
3 years, 8 months agokiketxu
4 years, 1 month ago