Describe Insider Risk, eDiscovery, and Audit Capabilities in Microsoft Purview SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A legal hold has been placed on a former employee's mailbox and OneDrive account as part of an ongoing lawsuit. The legal team needs to review all communications and documents related to a specific product launch. They also need to be able to place a hold on additional mailboxes if the investigation expands. What should the compliance team do in Microsoft Purview?

   • ACreate an insider risk policy for the former employee to monitor their activity.
   • BUse Content Search to find all product launch content and then export the results to a PST file.
   • CCreate an eDiscovery (Standard) case, add the former employee as a custodian, place holds on the mailbox and OneDrive, and search for product launch content.
   • DEnable Audit Log Search and review all activities performed by the former employee.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A legal team is preparing for a lawsuit and needs to collect all emails and documents related to a specific project. They must preserve the data to prevent deletion and then review it for relevance. What should they do in Microsoft Purview?

   • ACreate a retention policy for the project site and wait for the policy to take effect.
   • BEnable Audit Log Search and then search the audit logs for the project name.
   • CRun a Content Search and export the results to a local folder for the legal team to review.
   • DCreate an eDiscovery case, perform a Content Search for the project name, add the results to a review set, and place a hold on the relevant data sources.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In Microsoft Purview, what must be enabled to start recording user and admin activities?

   • AInsider risk management
   • BAudit logging
   • CeDiscovery cases
   • DData loss prevention
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of audit logging in Microsoft Purview?

   • ATo record user and admin activities across Microsoft 365 services
   • BTo automatically delete sensitive data
   • CTo prevent unauthorized access to Microsoft 365
   • DTo encrypt data at rest
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A legal team is preparing for a lawsuit and needs to collect all communications and documents related to a specific contract. They need to place a hold on the mailboxes of three employees and their OneDrive accounts to prevent deletion. They also need to search for the contract name across all these locations. What is the most efficient way to accomplish this in Microsoft Purview?

   • AEnable Audit Log Search to track all activities related to the contract and then place holds on the mailboxes.
   • BUse Content Search to find the contract name and then manually place holds on each mailbox and OneDrive account.
   • CCreate an insider risk policy for the three employees to monitor their activities related to the contract.
   • DCreate an eDiscovery (Standard) case, add the three employees as custodians, place holds on their mailboxes and OneDrive accounts, and search for the contract name within the case.
   Reveal Solution Discussion Select an answer first