Planning and Configuring a Messaging Platform (legacy) — Question 2

You have a Microsoft Exchange Server 2019 organization.
A user reports that several email messages were not received. You suspect that the messages were filtered by the Exchange servers.
You need to review the filter that removed the messages.
Which cmdlet should you run?

Answer options

• A. Get-MpThreatDetection
• B. Search-UnifiedAuditLog
• C. Get-AuditLogSearch
• D. Get-AgentLog
• E. Export-MailboxDiagnosticLogs

Correct answer: D

Explanation

The correct answer is D, Get-AgentLog, as it allows you to review the logs related to message filtering performed by the Exchange servers. The other options, such as Get-MpThreatDetection and Search-UnifiedAuditLog, focus on different aspects of security and audit logging and do not specifically provide insights into message filtering.