You have a Microsoft Exchange Server 2019 organization.
You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential.
What should you do?
You have a Microsoft Exchange Server 2019 organization.
You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential.
What should you do?
To ensure that a user can prevent mailbox content from being deleted based on specific keywords, the user needs to have both the Mailbox Search and Legal Hold management roles. The Mailbox Search role allows users to perform searches across mailboxes, while the Legal Hold role is required to place mailboxes on hold to ensure that their contents cannot be deleted. By assigning these roles, the user will be able to create a query-based In-Place Hold targeting emails that contain the specified keywords and prevent their deletion.
The Legal Hold management role is required to place a mailbox on Litigation Hold or In-Place Hold. But to create a query-based In-Place Hold, you must also be assigned the Mailbox Search role. Users that have been added to the Discovery Management role-based access control (RBAC) role group (or assigned the Legal Hold and Mailbox Search roles) can place users hold and create a query-based In-Place Hold. https://docs.microsoft.com/en-us/exchange/policy-and-compliance/holds/holds?view=exchserver-2019#placing-a-mailbox-on-hold
I am not sure why the user needs role group membership if we need to prevent user to delete the content based on keyword. We just need to run the search for the mailbox and put the mailbox under in place hold for specific keyword.
User1 need to run search and place in-place hold and that's why user1 is to be granted the permission.
You need to ensure that a user named User1 can prevent mailbox content from being deleted if the content contains the words Fabrikam and Confidential. If User1 is required to prevent deletion of emails from other mailboxes, then Answer D makes sense. The language of this question is confusing though.