easyMultiple Choice
Microsoft 365 E5 Compliance Add-On — Adding Advanced eDiscovery and 7-Year Retention to E3
A company currently has Microsoft 365 E3 licenses for all users. They need to retain all Exchange Online mailbox data for 10 years and place legal holds for litigation. Which add-on license provides these retention and eDiscovery capabilities?
⚠ Common exam trap
Many exam-takers confuse the full Microsoft 365 E5 suite (which includes compliance) with the add-on license, or mistakenly think E5 Security provides retention and eDiscovery, when in fact only the Compliance add-on specifically unlocks those capabilities for existing E3 tenants.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft 365 E5 Compliance
Microsoft 365 E5 Compliance is the correct add-on because it includes advanced eDiscovery (e.g., eDiscovery Premium) and retention capabilities such as Preservation Lock and 10-year retention policies via Microsoft Purview. The base E3 license only provides basic retention and eDiscovery, lacking the extended 10-year retention and litigation hold features required for this scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft 365 E5 Compliance
Why this is correct
Microsoft 365 E5 Compliance is the precise add-on for a company already on Microsoft 365 E3 that needs advanced legal and regulatory requirements. It unlocks the full compliance suite—including advanced data lifecycle management, retention policies, legal hold, and eDiscovery—without forcing an upgrade to full E5. Because the company only needs compliance capabilities, this add-on provides the required features in the most cost-efficient manner.
- ✗
Microsoft 365 E5 Security
Why it's wrong here
Microsoft 365 E5 Security is not the right choice because it is purpose-built for threat protection, not data governance. It adds capabilities like Defender for Office 365, identity and access management enhancements, and threat intelligence, which do not address retention, legal hold, or eDiscovery requirements. Selecting it would leave the compliance gap unchanged and would not satisfy the legal or regulatory obligations.
- ✗
Microsoft 365 E5
Why it's wrong here
Upgrading to full Microsoft 365 E5 would technically include the compliance features, but it is an all-in-one SKU that also bundles advanced security, analytics, and other workload capabilities the company does not need. Since the organization already holds E3 licenses, purchasing the standalone E5 Compliance add-on is far more cost-effective than paying for the entire full-E5 suite, making the full upgrade an inefficient use of budget.
- ✗
Office 365 E5
Why it's wrong here
Office 365 E5 also contains many of the same compliance tools, but it is a separate, standalone subscription rather than an add-on to Microsoft 365 E3. For a company already on Microsoft 365 E3, adding a full Office 365 E5 license would create redundancy with existing messaging and collaboration services and incur unnecessary cost. The correct path is the Microsoft 365 E5 Compliance add-on, which is designed to layer onto the existing E3 tenant and deliver the specific compliance features needed.
Go deeper
Related to this question
Learn chapter
Data Governance and Retention
Key term
eDiscovery
eDiscovery is the process of identifying, collecting, and producing electronic information for legal cases or investigations.
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.