none
被删除邮件的恢复 RRS feed

  • 问题

  • 请教以下场景,哪个答案为正确?

     You have an Exchange Server 2013 organization that contains five servers. The organization
    contains 5,000 mailboxes. One hundred users plan to leave your company during the next 48 hours to run a new company
    named Fabrikam, Inc. The mailboxes of the 100 users are in a mailbox database named DB5. The deleted item retention
    setting for DB5 is two days. You need to implement a solution to meet the following security requirements:
    The 100 users must be prevented from permanently deleting any email messages from their mailbox.
    In 48 hours, you must create a copy of only the email messages that contain the word "Fabrikam".
    The solution must be implemented as quickly as possible.
    What should you do?
    A. Modify the deleted item retention period for DB5, and then run the New-MailboxSearch cmdlet in
    48 hours.
    B. Enable In-Place Hold for the 100 mailboxes, and then run the Search-Mailbox cmdlet in 48 hours.
    C. Enable Single Item Recovery for the 100 mailboxes, and then run the New-MailboxSearch cmdlet
    in 48 hours.
    D. Modify the deleted item retention period for the 100 mailboxes, and then run the New-
    MailboxSearch cmdlet in 48 hours.


    • 已编辑 pjj1112 2018年8月21日 12:30
    2018年8月21日 7:55

答案

  • 你好,

    应该选B,就地保留(In-Place hold)会保留所有邮箱内容,包括已删除的项目和已修改的项目的原始版本,可以防止用户永久删除邮箱中的邮件。具体参考:邮件策略和遵从性 -- 就地保留

    就地保留

    当存在诉讼的合理预期时,需要组织保留与事实相关的以电子方式存储的信息 (ESI),包括电子邮件。就地保留使您可以搜索并保留与查询参数匹配的邮件。可保护邮件不被删除、修改和篡改,并且可以无限期地保留邮件或保留一段指定时间。

    就地保留和诉讼保留


    Best Regards,
    Niko Cheng


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    • 已标记为答案 pjj1112 2018年8月24日 4:30
    2018年8月22日 1:46
    版主