MS-102 Manage compliance by using Microsoft Purview Practice Question
A compliance officer needs to automatically retain emails that contain personally identifiable information (PII) for 10 years and then permanently delete them. Which Microsoft Purview feature should be configured?
⚠ Common exam trap
Candidates often confuse Data Lifecycle Management retention policies (which apply broadly to all content in a location) with auto-apply retention labels (which apply only to content matching specific sensitive information types), leading them to incorrectly select option B.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Auto-apply retention labels based on sensitive information types
Auto-apply retention labels based on sensitive information types allow you to automatically classify and retain emails containing PII for a specified period (10 years) and then permanently delete them. This feature uses sensitive information types (e.g., Social Security Number, Credit Card Number) to detect PII and applies a retention label that enforces the retention and deletion actions at the item level, which is required for targeted compliance scenarios.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Auto-apply retention labels based on sensitive information types
Why this is correct
Auto-apply retention labels are content-aware and can be configured to trigger whenever a sensitive information type—such as a credit card number, passport number, or other PII—is detected in an email. Once the label is applied, its retention settings enforce the 10-year retention period and, at the end of that period, automatically dispose of the item. This satisfies the requirement to selectively retain emails based on content, not just location or folder.
- ✗
Data Lifecycle Management retention policy
Why it's wrong here
Data Lifecycle Management retention policies are designed to apply at the container level—for example, to an entire mailbox, folder, or Teams channel—and cannot evaluate the content of individual emails. They lack the ability to detect sensitive information types or other content patterns, so you cannot use one to target only emails containing PII. As a result, such a policy would either over-retain emails without PII or fail to capture the specific emails that need retention, making it incorrect for this content-based scenario.
- ✗
Data classification
Why it's wrong here
Data classification, such as the Content Explorer and activity explorer in Microsoft Purview, identifies and categorizes content based on sensitive information types and trainable classifiers, but it does not itself apply retention or deletion actions. Its purpose is visibility and governance; while it can inform the creation of a policy, the classification tool has no automated lifecycle enforcement capabilities. Therefore, using it alone will not cause qualifying emails to be retained for ten years and then deleted.
- ✗
eDiscovery
Why it's wrong here
eDiscovery is a search-and-hold tool built for legal, regulatory, and investigative scenarios; it can preserve content with a hold or export results, but it is not designed to automatically delete emails after a retention period. Placing an eDiscovery hold actually prevents deletion, which directly conflicts with the stated requirement to retain for ten years and then delete. It also does not continuously scan inboxes for sensitive information types to decide which messages to manage, so it is the wrong mechanism here.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Retention label
A retention label is a tag applied to emails, documents, or files in Microsoft 365 that tells the system how long to keep the item and what to do with it when the time is up.
About these practice questions
One of 241 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.