Explanation/Reference:
Explanation:
First requirement is "Members of the legal team must be able to conduct eDiscovery searches." Second requirement employees must be notified when they send email messages that contain confidential information"
B: The Discovery Management role group allows administrators or USERS to perform searches of mailboxes in the Exchange Online organization.
C: Data Loss Prevention Policies can be configured with a Policy Tip to notify the sender when they are sending confidential information.
Existing or custom DLP policy templates can be used to detect the presence of confidential information.
Incorrect Answers:
A: Journaling doesn't address either of these because at its core it's recording communications based on rules and creating reports. This cannot be configured to notify employees nor does it provide the legal team the ability to conduct eDiscovery searches.
D: Placing the executive mailboxes on In-Place Hold for 365 doesn't meet either requirement. It doesn't grant access to members of the legal team to perform searches nor does it prevent/notify users when they are sending confidential information. It does allow you to perform both search and holds using the same interface, but that wasn't a requirement.
E: Enabling archiving will store emails outside the environment, but this will not help meet either requirement.
F: Placing the executive mailboxes on Retention Hold for 365 doesn't meet either requirement. It doesn't grant access to members of the legal team to perform searches nor does it prevent/notify users when they are sending confidential information.
References:
https://technet.microsoft.com/en-us/library/jj200692(v=exchg.150).aspx
https://technet.microsoft.com/en-US/library/jj898487(v=exchg.150)#report
http://blogs.msdn.com/b/microsoft_press/archive/2013/04/29/from-the-mvps-data-loss-preventionwith- office-365-and-exchange-online.aspx
http://blogs.technet.com/b/exchange/archive/2012/09/28/in-place-ediscovery-and-in-place-holdin-the-new- exchange-part-ii.aspx