AB-900 Certification Practice Question #35

Question

Your organization has a Microsoft 365 subscription.
The HR department at your company asks for a copy of all the recent files that were modified by a user named User1.
What should you use in the Microsoft Purview portal? To answer, select the appropriate solutions in the answer area.

Accepted Answer

The deliverable HR wants is **a copy of the files** — and only **eDiscovery** can search content scoped to User1 and **export/collect copies** of the items. Purview **Audit** would tell you *which* files User1 modified (the events), but it cannot produce copies of the files themselves, which is why the "get a copy" requirement points to eDiscovery. Because a sizable part of the community answered Audit (it identifies the modified files), confidence is held at 73%.

More AB-900 practice questions