Microsoft 365 Mobility and Security (legacy) — Question 8

You have a Microsoft 365 subscription.
All users have their email stored in Microsoft Exchange Online.
In the mailbox of a user named User1, you need to preserve a copy of all the email messages that contain the word ProjectX.
What should you do?

Answer options

• A. From the Security & Compliance admin center, create an eDiscovery case.
• B. From the Exchange admin center, create a mail flow rule.
• C. From the Security & Compliance admin center, start a message trace.
• D. From Microsoft Defender for Cloud Apps, create an access policy.

Correct answer: A

Explanation

Creating an eDiscovery case from the Security & Compliance admin center allows you to preserve specific emails based on search criteria, such as containing the word ProjectX. The other options either do not provide a means to preserve emails (B and D) or are used for tracking email delivery rather than preservation (C).