Retention Policy for Exchange Mailbox with Auto-Delete
A compliance officer needs to retain all email messages in a user's Exchange Online mailbox for 7 years after the message is sent or received, and then automatically delete them. The retention must be enforced regardless of user actions. Which Microsoft Purview solution should be used?
Quick Answer
The answer is a Microsoft Purview retention policy with the Exchange location. This is correct because a retention policy at the service level enforces the specified 7-year period from when a message is sent or received, and then automatically deletes it, regardless of any user actions like manual deletion or folder moves. For the MS-102 exam, this scenario tests your understanding that Purview retention policies are mandatory and immutable, unlike litigation holds or eDiscovery cases which are user-dependent or manual. A common trap is confusing retention policies with retention labels—labels require user or admin application, while policies apply automatically to the entire mailbox. Remember the key distinction: policies are “set and forget” for an entire location, whereas labels are granular and user-applied. Memory tip: think “Policy = Platform enforced, Label = User applied.”
⚠ Common exam trap
Watch out — candidates often confuse Litigation hold (which preserves indefinitely) with a retention policy (which can both preserve and delete after a set time), leading them to select Litigation hold for time-based deletion scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Retention policy with Exchange location
A retention policy with the Exchange location in Microsoft Purview allows you to define a retention period (e.g., 7 years) and then automatically delete messages after that period. It enforces the retention regardless of user actions because it operates at the service level, not relying on user cooperation. This meets the compliance officer's requirement for mandatory, time-based retention and deletion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Litigation hold
Why it's wrong here
Litigation hold preserves mailbox content indefinitely until an administrator removes it, so it cannot delete messages seven years after they are sent or received. It is tempting because it enforces retention regardless of user actions, and it would be correct when the requirement is indefinite preservation for legal proceedings rather than a fixed retention-then-delete period.
- ✓
Retention policy with Exchange location
Why this is correct
A retention policy applied to the Exchange location enforces retention at the mailbox level, independent of user deletion or edits. Setting a seven-year retention period then deletion meets the requirement that messages be kept for seven years and removed automatically.
- ✗
Classification policy
Why it's wrong here
Classification policies apply sensitivity labels to content for protection and governance; they neither retain nor delete mailbox items on a schedule. They are tempting because they govern email data, but they would be correct when the requirement is automatic labelling of messages by sensitive information type, not seven-year retention with deletion.
- ✗
In-place eDiscovery hold
Why it's wrong here
In-place eDiscovery holds preserve mailbox content indefinitely but provide no automatic deletion after a fixed period, and a user with mailbox management rights can remove them. They are tempting because holds are the correct choice when litigation requires indefinite preservation; a retention policy or label is needed for enforced seven-year retention then deletion.
Go deeper
Related to this question
Learn chapter
Communication Compliance Policies
Key term
Retention policy
A retention policy is a set of rules that determines how long an organization keeps its data and what happens to it when the retention period expires.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A compliance officer needs to ensure that all emails sent to a specific distribution group are automatically retained for 3 years and then deleted. Which Microsoft Purview feature should be used?
easy- ✓ A.A: Data Lifecycle Management (retention policy)
- B.B: Information Protection (sensitivity labels)
- C.C: Data Loss Prevention (DLP policy)
- D.D: eDiscovery (content search)
Why A: Data Lifecycle Management (retention policies) in Microsoft Purview can be applied to Exchange Online mailboxes. For a distribution group, you can create a retention policy that applies to the mailboxes of the group's members. The policy can be configured to retain items for 3 years and then delete them using the 'Retain for 3 years, then delete' action. This ensures messages sent to the group are retained as part of the members' mailbox content.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.