SC-100 Certification Practice Question #250

Question

You have a Microsoft 365 E5 subscription.

You need to mitigate ransomware attacks against messages posted to Microsoft Teams channels and files stored in Teams channels.

What should you include in the solution for each type of content? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Teams channel messages live in Exchange Online mailboxes and Teams channel files live in SharePoint Online. The Microsoft "Ransomware protection in Microsoft 365" article explicitly maps the Exchange recovery control to **Single Item Recovery** (recover inadvertently or maliciously deleted/altered mailbox items) and the SharePoint recovery control to **Files Restore** (roll a document library back to any point in the last 30 days — explicitly called out for recovering from ransomware). The top-voted community answer (5 👍) matches this exact pairing. Some commenters propose the Preservation Hold library; it does retain copies but is a retention/compliance mechanism, whereas the doc names Single Item Recovery and Files Restore as the recovery features, so confidence is set at 85% rather than higher due to that documented community split.

More SC-100 practice questions