Microsoft Exam MS-101 Topic 1 Question 22 Discussion

You can inspect email attachments in your Exchange Online organization by setting up mail flow rules. Exchange Online offers mail flow rules that provide the ability to examine email attachments as a part of your messaging security and compliance needs. When you inspect attachments, you can then take action on the messages that were inspected based on the content or characteristics of those attachments.

Incorrect answers:

A: A spam filter policy includes selecting the action to take on messages that are identified as spam. Spam filter policy settings are applied to inbound messages.

B: A data governance event commences when an administrator creates it, following which background processes look for content relating to the event and take the retention action defined in the label. The retention action can be to keep or remove items, or to mark them for manual disposition.

References:

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/configure-anti-malware-policies

https://www.petri.com/office-365-event-based-retention