HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
Suggested Answer:
Box 1: Yes - The MailItemsAccessed event is a mailbox auditing action and is triggered when mail data is accessed by mail protocols and mail clients.
Box 2: No - Basic Audit retains audit records for 90 days. Advanced Audit retains all Exchange, SharePoint, and Azure Active Directory audit records for one year. This is accomplished by a default audit log retention policy that retains any audit record that contains the value of Exchange, SharePoint, or AzureActiveDirectory for the Workload property (which indicates the service in which the activity occurred) for one year.
Box 3: yes - Advanced Audit in Microsoft 365 provides high-bandwidth access to the Office 365 Management Activity API. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/auditing-solutions-overview?view=o365-worldwide#licensing-requirements https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft-365-tenantlevel-services-licensing-guidance/ microsoft-365-security-compliance-licensing-guidance#advanced-audit
YNY
Audit (Premium) builds on the capabilities of Audit (Standard). Audit (Premium) provides audit log retention policies and LONGER RETENTION OF AUDIT RECORDS. IT PROVIDES AUDIT RECORDS FOR HIGH-VALUE CRUCIAL EVENTS that can help your organization investigate possible security or compliance breaches and determine the scope of compromise. AUDIT (PREMIUM) ALSO PROVIDES ORGANIZATIONS WITH MORE BANDWIDTH TO ACCESS AUDITING LOGS through the Office 365 Management Activity API.
https://learn.microsoft.com/en-us/training/modules/describe-ediscovery-capabilities-of-microsoft-365/3-describe-audit-solutions?ns-enrollment-type=learningpath&ns-enrollment-id=learn.wwl.describe-capabilities-of-microsoft-compliance-solutions
YNY is the answer.
https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-premium?view=o365-worldwide#mailitemsaccessed
The MailItemsAccessed event is a mailbox auditing action and is triggered when mail data is accessed by mail protocols and mail clients. This event can help investigators identify data breaches and determine the scope of messages that may have been compromised. If an attacker gained access to email messages, the MailItemsAccessed action will be triggered even if there's no explicit signal that messages were actually read (in other words, the type of access such as a bind or sync is recorded in the audit record).
https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-solutions-overview?view=o365-worldwide#comparison-of-key-capabilities
https://learn.microsoft.com/en-us/microsoft-365/compliance/audit-premium?view=o365-worldwide#high-bandwidth-access-to-the-office-365-management-activity-api
With the release of Audit (Premium), we're moving from a publisher-level limit to a tenant-level limit. The result is that each organization will get their own fully allocated bandwidth quota to access their auditing data. The bandwidth isn't a static, predefined limit but is modeled on a combination of factors including the number of seats in the organization and that E5/A5/G5 organizations will get more bandwidth than non-E5/A5/G5 organizations.
upvoted 1 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mavexamtops
Highly Voted 3 years, 3 months agoWimTS
Highly Voted 2 years, 2 months agoIngeborgAnne
2 years, 1 month agoLegendaryZA
Most Recent 2 months agoLorenz1974
1 year, 3 months agozellck
1 year, 7 months agozellck
1 year, 7 months ago