MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A compliance administrator needs to retain mailbox content for legal investigation. Which Microsoft 365 capability is the best fit?
⚠ Common exam trap
It's easy for candidates to confuse general data storage or communication tools (like OneDrive or Teams) with compliance-specific features, overlooking that only Purview provides the legal hold and search capabilities required for retaining mailbox content in investigations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
eDiscovery and retention capabilities in Microsoft Purview
eDiscovery and retention capabilities in Microsoft Purview are designed specifically for legal investigations, allowing compliance administrators to preserve mailbox content via legal holds, search across mailboxes, and export data for litigation. This directly meets the requirement to retain mailbox content for legal investigation, unlike the other options which serve unrelated business functions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Teams live events
Why it's wrong here
Teams live events broadcast one-to-many video presentations to attendees; they generate no mailbox retention policy and cannot place holds on Exchange content. Live events would be correct for streaming a town hall or webinar, whereas retaining mailbox content for legal investigation requires an in-place hold on Exchange mailboxes.
- ✗
Microsoft Bookings
Why it's wrong here
Microsoft Bookings schedules appointments and manages staff availability; it stores no mailbox content and offers no retention or eDiscovery hold capability. It would be the right choice for publishing bookable customer appointments, not for preserving correspondence for legal investigation, which requires an in-place hold on Exchange mailboxes.
- ✗
OneDrive sync client
Why it's wrong here
The OneDrive sync client replicates files between a device and OneDrive storage; it neither captures Exchange mailbox items nor applies retention or legal hold. It would be correct for keeping local file copies in sync, but mailbox retention for investigation demands an in-place hold applied to Exchange mailboxes.
- ✓
eDiscovery and retention capabilities in Microsoft Purview
Why this is correct
Microsoft Purview eDiscovery and retention preserve mailbox content in place for legal investigation, satisfying the compliance requirement. Retention policies and holds prevent deletion, while eDiscovery search and legal hold capabilities support case review without altering user mailboxes.
Go deeper
Related to this question
Learn chapter
Data Loss Prevention (DLP) in Microsoft 365
Key term
eDiscovery
eDiscovery is the process of identifying, collecting, and producing electronic information for legal cases or investigations.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.