Microsoft Security Operations Analyst Associate SC-200 Practice Question

Selecting Purge with the Soft delete option starts a purge action (New-ComplianceSearchAction -Purge -PurgeType SoftDelete) that moves each message to the Deletions sub-folder of the Recoverable Items folder. Users cannot access the item, but administrators can restore it by using eDiscovery or mailbox-restore tools if further investigation is required. Exporting results or reports only produces copies of the data and leaves the originals in the mailboxes. Creating a retention policy does not retroactively delete already-sent messages and therefore will not remove the malicious email identified by the Content search.