Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Purview complianceMedium
A company is conducting an internal investigation into potential fraud. The legal team has identified several key custodians and needs to preserve all their Exchange mailbox content, OneDrive files, and SharePoint site documents, ensuring that this content cannot be altered or deleted by users. The preserved content must be easily searchable for review. Which Microsoft Purview feature should be used?
- AAdaptive Scope Retention
- BCommunication Compliance
- CeDiscovery (Standard) Case Holds
- DData Loss Prevention (DLP)
Show answer & explanationAnswer & explanation
Correct answer: C. eDiscovery (Standard) Case Holds
eDiscovery (Standard) cases allow legal teams to place holds on specific custodians' content across various Microsoft 365 services (Exchange, OneDrive, SharePoint), ensuring preservation, immutability, and searchability for legal investigations.
Why the other options are wrong
- A. Adaptive Scope Retention is for dynamic application of retention policies, not for specific legal holds related to an investigation.
- B. Communication Compliance is for monitoring internal messages for policy violations, not for legal holds.
- D. DLP prevents data exfiltration, it's not designed for legal holds on existing content.
eDiscovery (Standard) Case Holds
eDiscovery (Standard) allows legal teams to create cases, identify, preserve, collect, and review content across Microsoft 365 for legal investigations or regulatory requests.
- Places legal holds on specific custodians/locations.
- Preserves content immutably.
- Facilitates searching and exporting of relevant data.
Memory trick: eDiscovery: Find the evidence, lock it down, and review!