You have a Microsoft 365 E5 subscription that contains two users named User1 and Admin1. Admin1 manages audit retention policies for the subscription.
You need to ensure that the audit logs of User1 will be retained for 10 years.
What should you do first?
To ensure that the audit logs of User1 will be retained for 10 years, you should assign a 10-year audit log retention add-on license to User1. This allows the audit logs for this specific user to be retained for the extended period as required by the audit retention policy.
Important: Retaining audit logs for 10 years requires an extra per-user add-on license. After this license is assigned to a user and an appropriate 10-year audit log retention policy is set for that user, audit logs covered by that policy will start to be retained for the 10-year period
Add-on license needs to be assigned to User1, not Admin1.
chatgpt: The correct option to ensure that the audit logs of User1 will be retained for 10 years is: D. Assign a 10-year audit log retention add-on license to User1. Assigning an audit log retention add-on license to the user for whom you want to retain the audit logs is the appropriate action. This allows you to set a specific retention period for that user's audit logs. In this case, you want to assign the 10-year audit log retention add-on license to User1 to meet the requirement of retaining User1's audit logs for 10 years.
The 10-year add-on licence needs to be added to the user: https://learn.microsoft.com/en-us/purview/audit-log-retention-policies?view=o365-worldwide&tabs=microsoft-purview-portal#create-an-audit-log-retention-policy