You are the Office 365 administrator for your compa
ny.
The company has established the following new requirements:
Members of the legal team must be able to conduct eDiscovery searches.
Employees must be notified when they send email messages that contain confidential information.
You need to configure
the environment.
Which two actions should you perform? Each correct answer presents part of the solution.
A. Configure journaling to a Microsoft Exchange Online mailbox for all mailboxes.
B. Add the members of the legal team to the Discovery Management
role group.
C. Create a Data Loss Prevention policy.
D. Place all executive mailboxes on In-Place Hold for 365 days and use In-Place eDiscovery for mailbox searches.
E. Enable Microsoft Exchange Online Archiving for the executive mailboxes.
F. Place all
executive mailboxes on Retention Hold.
Explanation:
First requirement is -Members of the legal team must be able to conduct eDiscovery searches.-
Second requirement employees must be notified when they send email messages that contain confide
ntial information-
B: The Discovery Management role group allows administrators or USERS to perform searches of mailboxes in the Exchange Online organization.
C: Data Loss Prevention Policies can be configured with a Policy Tip to notify the sender when
they are sending confidential information.
Existing or custom DLP policy templates can be used to detect the presence of confidential information.
Incorrect Answers:
A: Journaling doesnt address either of these because at its core its recording communic
ations based on rules and creating reports. This cannot be configured to notify employees nor does it provide the legal team the ability to conduct eDiscovery searches.
D: Placing the executive mailboxes on In-Place Hold for 365 doesnt meet either requir
ement. It doesnt grant access to members of the legal team to perform searches nor does it prevent/notify users when they are sending confidential information. It does allow you to perform both search and holds using the same interface, but that wasnt a
requirement.
E: Enabling archiving will store emails outside the environment, but this will not help meet either requirement.
F: Placing the executive mailboxes on Retention Hold for 365 doesnt meet either requirement. It doesnt grant access to members
of the legal team to perform searches nor does it prevent/notify users when they are sending confidential information.
References:
https://technet.microsoft.com/en-us/library/jj200692(v=exchg.150).aspx
https://technet.microsoft.com/en-US/library/jj898487
(v=exchg.150)#report
http://blogs.msdn.com/b/microsoft_press/archive/2013/04/29/from-the-mvps-data-loss-preventionwith-office-365-and-exchange-online.aspx
http://blogs.technet.com/b/exchange/archive/2012/09/28/in-place-ediscovery-and-in-place-holdin-the-ne
w-exchange-part-ii.aspx