🔥 3-day streak
Microsoft Security Operations Analyst119 / 190
Question 119 of 190
During an insider-threat investigation, you create an eDiscovery (Premium) case and add a search scoped to a departing employee's mailbox and OneDrive. The initial keyword query returns over 240,000 items, far too many to review efficiently. Before you commit the collection to a review set, you need to understand which specific keywords are contributing the most hits so you can narrow the query. Which action should you take?
Reviewed for accuracy · Report an issueNext question