Which two actions should you perform?

You have a Microsoft 365 E3 subscription that uses Microsoft Exchange Online. You need to retain audit log entries for users in the legal department for up to one year.

Which two actions should you perform? Each Correct answer presents part of the solution. Note: Each Correct Selection is worth one point.

A. For the default audit log retention policy, set Duration to 1 Year.

B. Assign a Microsoft Office 365 E5 license to each legal department user.

C. Create a retention policy that has a one-year retention tag and apply the policy to the user mailboxes in the legal department.

D. Create a new audit log retention policy and assign the policy to the legal department.

E. Assign a Microsoft Office 365 E5 license to each user in the tenant.

View Answer

Answer: A,C

Explanation:

A. For the default audit log retention policy, set Duration to 1 Year.

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-in-the-security-compliance-center?view=o365-worldwide#create-or-edit-a-retention-policy Explanation:

You can set the default audit log retention policy to retain log entries for up to one year by changing the "Duration" setting to "1 Year."

C. Create a retention policy that has a one-year retention tag and apply the policy to the user mailboxes in the legal department.

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention-policies-in-the-security-compliance-center?view=o365-worldwide#create-or-edit-a-retention-policy

You can create a retention policy with a one-year retention tag, and then apply the policy to the user mailboxes in the legal department. This will ensure that the audit log entries for those users are retained for up to one year as per the retention tag.