🔥 3-day streak
Microsoft Security Operations Analyst116 / 190
Question 116 of 190
During an incident involving suspected data theft by an employee who has submitted their resignation, legal counsel instructs the SOC to preserve all of the user's Exchange mailbox and OneDrive content, including items the user might attempt to delete, before any further investigation actions are taken. You have been granted the eDiscovery Manager role. Which action ensures the content is preserved immutably even if the user permanently deletes items?
Reviewed for accuracy · Report an issueNext question