Reason for Missing Email in Quarantine | Microsoft 365 Security Administration
Question
You are the IT administrator of a company with a Microsoft 365 subscription and Microsoft Defender Plan 1 licenses.
During your summer holiday you received a report of an email that was put in quarantine suspected of containing malware.
20 days later you are back in the office and open the quarantine page to investigate the message.
You discover that it is missing.
What could be the reason?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: C
The default retention period for messages that contain malware are 15 days.
In this scenario the message that was put in quarantine during the holiday, would now be deleted.Option A is incorrect.
This is a false statement.
Option B is incorrect.
Upgrading to Defender Plan 2 is not required.
Option D is incorrect.
Messages that contain malware are retained for 15 days.
To know more about enabling password reset, please refer to the link below:
Based on the scenario provided, the IT administrator of the company with a Microsoft 365 subscription and Microsoft Defender Plan 1 licenses received a report of an email that was put in quarantine suspected of containing malware while they were on summer holiday. When they returned to the office, they opened the quarantine page to investigate the message but found that it was missing.
The reason for the missing message could be one of the following:
A. Messages containing malware are automatically released to the user's email junk box after 10 days. This option is not likely to be the reason because the message was put in quarantine, not in the user's email inbox. Additionally, even if it was in the user's email inbox, the option states that messages containing malware are released to the junk box, not deleted.
B. You must upgrade to Defender Plan 2 to view the message. This option is also not likely to be the reason because the IT administrator has Microsoft Defender Plan 1 licenses. The Defender Plan 2 is not required to view messages in quarantine.
C. Messages that contain malware are retained for 15 days before being deleted. This option is a plausible reason for the missing message. Microsoft 365 automatically quarantines messages that are suspected of containing malware, and they are retained for 15 days before being deleted. It is possible that the 20-day delay in the IT administrator's investigation caused the message to be deleted from quarantine.
D. Messages that contain malware are deleted immediately. This option is not likely to be the reason because Microsoft 365 retains messages in quarantine for 15 days before deleting them.
In conclusion, based on the scenario provided, the most likely reason for the missing message is that it was automatically deleted from quarantine after 15 days because it contained suspected malware.
