MS-900 Describe Microsoft 365 apps and services Practice Question
A global enterprise uses Microsoft 365 E5 and has users in Europe, Asia, and North America. They need to ensure that user data in Exchange Online and SharePoint Online remains within the European Union for EU users. They also want to apply a retention policy to keep all data for at least 7 years. Which combination of Microsoft 365 features should an administrator use?
⚠ Common exam trap
Many candidates confuse data residency enforcement (which requires Multi-Geo) with access control (Conditional Access) or compliance scoring (Compliance Manager), leading candidates to pick options that address only part of the requirement or use the wrong tool entirely.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enforce data residency using Multi-Geo capabilities in Exchange Online and SharePoint Online, and apply a retention policy via Microsoft Purview Data Lifecycle Management.
Multi-Geo capabilities in Exchange Online and SharePoint Online allow the administrator to pin user data at the tenant level to a specific geographic location (e.g., the EU), ensuring data residency. A retention policy configured via Microsoft Purview Data Lifecycle Management can then be applied to retain all data for a minimum of 7 years, meeting both compliance requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enforce data residency using Multi-Geo capabilities in Exchange Online and SharePoint Online, and apply a retention policy via Microsoft Purview Data Lifecycle Management.
Why this is correct
Multi-Geo in Microsoft 365 lets you designate satellite geographies for data-at-rest while keeping a single tenant; Exchange Online and SharePoint Online (including OneDrive) honor the user’s PreferredDataLocation to store content in the assigned EU region. Purview Data Lifecycle Management then applies a seven-year retention policy to that content, ensuring regulatory compliance without altering access controls. This is the direct, correct way to meet both residency and retention requirements in an E5 tenant.
- ✗
Use Microsoft Purview Compliance Manager to configure data residency and retention settings.
Why it's wrong here
Compliance Manager is a risk-assessment and compliance-score dashboard, not a configuration engine. It provides control mappings and improvement actions based on standards, but it cannot move data between geographies, set mailbox or site locations, or create retention policies. Using it to enforce data residency and retention settings is a fundamental misuse of the tool.
- ✗
Use Data Location for Exchange Online and a SharePoint multi-geo tenant, then create a retention policy in Purview for 7 years.
Why it's wrong here
This answer is only partially correct because it splits Multi-Geo into separate pieces: 'Data Location for Exchange Online' and a 'SharePoint multi-geo tenant' are not independent features—they are both facets of the same Multi-Geo configuration. A tenant is either multi-geo or not; you assign a user’s geolocation and that covers Exchange, SharePoint, and OneDrive. Also, the retention policy is correctly placed in Purview, but the imprecise phrasing makes this a weaker choice than explicitly naming Multi-Geo as the unified enforcer of residency.
- ✗
Configure Microsoft Entra ID Conditional Access policies to restrict data access based on location.
Why it's wrong here
Conditional Access policies control authentication and session context—they can block sign-in from untrusted countries or require compliant devices, but they never move nor restrict where content is stored. Data residency is a physical-storage property, not an access-time condition, so this policy type has no effect on the location of Exchange or SharePoint data at rest. Retention policies also live in Purview, not in Entra ID conditional access.
Go deeper
Related to this question
Learn chapter
Data Governance and Retention
Key term
SharePoint Online
SharePoint Online is a cloud-based collaboration platform from Microsoft that lets teams create, store, organize, and share content securely from anywhere.
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.