Immutable Retention Policy
Question
You are a global admin in a company with a Microsoft 365 subscription and Microsoft 365 E5 licenses assigned to your users.
You have set up several retention policies and labels.
Due to rules defined by regulatory bodies you need to make sure one specific policy cannot be turned off, deleted or made less restrictive.
What should you configure?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: D
You should configure a preservation lock on the policy that must be protected.
This will ensure that it cannot be changed, deleted or turned off.
Set-RetentionCompliancePolicy -Identity "<Name of Policy>" -RestrictiveRetention $true.
Option A is incorrect.
This feature prevents deletion of resource groups.
Option B is incorrect.
This service places a mailbox on hold for a specified timeframe.
Option C is incorrect.
Azure DevOps release pipelines are used for releasing a built artifact to for instance Azure.
To know more about preservation locks, please refer to the link below:
The correct answer to the question is D. Preservation Locks.
Explanation:
Preservation Locks is a feature within the Compliance Center of Microsoft 365 that can be used to lock down specific retention policies and prevent them from being deleted or modified. By enabling Preservation Locks, you can ensure that a particular retention policy remains in effect and cannot be changed in any way that might violate regulatory requirements or other legal obligations.
Azure Resource Group - Locks are used to lock down Azure resources to prevent accidental deletion or modification. While this might be useful in some scenarios, it is not the appropriate solution for preventing the deletion or modification of retention policies.
Litigation Hold is a feature in Microsoft 365 that can be used to preserve user data in the event of a legal hold. While it can be used to retain specific user data, it does not prevent the deletion or modification of retention policies.
Azure DevOps release pipeline is a continuous delivery tool that can be used to automate software deployment. It is not relevant to this scenario.
Therefore, Preservation Locks is the correct answer to ensure that one specific policy cannot be turned off, deleted or made less restrictive in Microsoft 365.
