SC-400 eDiscovery 2 — Questions and Answers
Question 1: A compliance administrator needs to place a legal hold on a specific user's mailbox and OneDrive account simultaneously. What is the most efficient approach in Microsoft Purview?
- Create separate holds for each location
- Create a single eDiscovery hold with both mailbox and OneDrive as content locations (Correct answer)
- Use a retention policy instead of an eDiscovery hold
- Export the data first, then apply the hold
Correct answer: Create a single eDiscovery hold with both mailbox and OneDrive as content locations
A single eDiscovery hold can include multiple content locations, including both Exchange mailboxes and OneDrive accounts, making it the most efficient approach.
Question 2: During an eDiscovery search in Microsoft Purview, a search returns 50,000 items. The legal team wants to review only emails containing the phrase 'project alpha' that were sent between two specific employees. Which feature should be used to refine results?
- Re-run the search with additional keywords and sender/recipient conditions (Correct answer)
- Export all 50,000 items and filter manually in Excel
- Use content search with a KQL query limiting by topic only
- Apply an auto-labeling policy to the results
Correct answer: Re-run the search with additional keywords and sender/recipient conditions
Adding keyword conditions (exact phrase) combined with sender/recipient filters in the search query refines results without needing to export everything.
Question 3: What is the purpose of the 'Review Set' feature in Microsoft Purview eDiscovery (Premium)?
- To automatically delete irrelevant documents from a case
- To provide a static, curated collection of documents for attorney review and analysis (Correct answer)
- To publish search results to SharePoint for collaboration
- To automatically classify documents using sensitivity labels
Correct answer: To provide a static, curated collection of documents for attorney review and analysis
A review set in eDiscovery Premium is a static snapshot of collected content that attorneys can annotate, tag, and analyze without affecting original data.
Question 4: A legal hold has been applied to a user's mailbox. The user permanently deletes an email. What happens to the deleted email?
- It is permanently deleted immediately
- It is moved to the Recoverable Items folder and retained for the duration of the hold (Correct answer)
- It is archived to Azure Blob Storage automatically
- It is moved to the Litigation Hold folder visible to the user
Correct answer: It is moved to the Recoverable Items folder and retained for the duration of the hold
When a legal hold is active, permanently deleted items are preserved in the Recoverable Items folder and cannot be purged until the hold is released.
Question 5: In Microsoft Purview eDiscovery, which role is required to create and manage eDiscovery cases but NOT to access the content within those cases?
- eDiscovery Manager (Correct answer)
- eDiscovery Administrator
- Compliance Administrator
- Global Administrator
Correct answer: eDiscovery Manager
The eDiscovery Manager role allows creating and managing cases and can only access cases they own, while the eDiscovery Administrator can access all cases.
Question 6: A company wants to use eDiscovery Premium to identify near-duplicate documents within a review set. Which built-in analytics feature provides this capability?
- Communication threading
- Near-duplicate detection (Correct answer)
- Relevance scoring
- Optical character recognition
Correct answer: Near-duplicate detection
Near-duplicate detection in eDiscovery Premium analyzes document similarity and groups near-identical documents to reduce review volume.
Question 7: When exporting content from a Microsoft Purview eDiscovery case, what does the 'PST per mailbox' export option provide?
- A single PST file containing all results from all mailboxes
- Individual PST files for each mailbox included in the search results (Correct answer)
- PST files organized by document type rather than mailbox
- Encrypted PST files requiring a decryption key provided separately
Correct answer: Individual PST files for each mailbox included in the search results
The 'PST per mailbox' option creates separate PST files for each source mailbox, making it easier to identify the origin of each message.
SC-400 eDiscovery 2
A compliance administrator needs to place a legal hold on a specific user's mailbox and OneDrive account simultaneously.
What is the most efficient approach in Microsoft Purview?