Identify Retention Label Changes in Microsoft Purview
You have a Microsoft 365 subscription that uses retention label policies. You need to identify all the changes made to retention labels during the last 30 days. What should you use in the Microsoft Purview portal?
Community Insight
The question tests knowledge of auditing tools for retention labels. The common trap is confusing 'Reports' or 'Content Search' with the real-time activity log provided by Activity Explorer.
To identify all changes made to retention labels within a specific timeframe, use the Activity Explorer in the Microsoft Purview portal. This tool provides a historical view of label-related activities.
Many candidates incorrectly choose 'Reports', assuming it covers detailed label change history. However, Reports typically provide aggregate statistics rather than a chronological list of specific label modification events.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The correct answer is B, Activity Explorer. According to Microsoft documentation, Activity Explorer in the Microsoft Purview compliance portal provides a historical view of activities related to labeled content. It specifically tracks events such as when a retention label was applied, changed, or removed. The tool allows administrators to filter and view these activities over a specified period, such as the last 30 days mentioned in the scenario.Why the Other Options Are Wrong
Option A (Reports) generally offers summary data and trends rather than a granular list of individual label change events. Option C (Content Search) is used to search for and preserve content based on criteria, not to audit policy or label configuration changes. Option D (Data Search) is primarily for finding sensitive data across locations, not for tracking administrative actions like label modifications.Community Comment Notes
The community consensus strongly supports Activity Explorer. One user noted, "Activity explorer in Microsoft Purview provides a historical view of activities related to labeled content." Another highlighted that it includes events like "Retention label changed," which directly addresses the requirement to identify changes.Official Reference
Exam Strategy
When questions ask about tracking specific user or admin activities (like label changes) over a recent period, look for 'Activity Explorer' or 'Audit Log'. Reserve 'Content Search' for finding actual data items.
Frequently Asked Questions
Can Content Search show who changed a retention label?
No, Content Search finds content items. It does not provide an audit trail of administrative actions like label policy changes.
How far back does Activity Explorer retain data?
Activity Explorer typically retains data for up to 90 days, but the question specifies looking at the last 30 days, which is well within this window.