Question 230
Security wants activity timelines for label changes, sensitivity detections, and DLP rule matches. What should the administrator configure?
Explanation
Correct Answer
Activity explorer tracks classified-content activities over time. This directly addresses action-centered sensitive-data event history.
Incorrect Answers
Insider Risk cases include relevant configured behavioral risk signals. This helps with employee behavioral risk investigation instead of the required action-centered sensitive-data event history.
eDiscovery search targets responsive content for legal review. The action is relevant to search and collect case-specific email evidence rather than action-centered sensitive-data event history.
Content explorer summarizes classified content across supported locations. This helps with inventory of content matching a sensitive type instead of the required action-centered sensitive-data event history.





Microsoft 365 Copilot and Agent Administration Fundamentals (AB-900) Practice Tests