MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A legal team at a company needs to preserve all data belonging to a user who is involved in litigation. The preservation must cover Exchange Online email, SharePoint sites, OneDrive for Business files, and Teams chat messages. They also need to be able to search the preserved content and export it. Which Microsoft Purview solution should they use?
⚠ Common exam trap
It's easy for candidates to confuse Litigation Hold with eDiscovery holds, assuming Litigation Hold covers all data sources, when in reality it only applies to Exchange mailboxes and lacks the search and export features needed for comprehensive eDiscovery.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
eDiscovery (Standard) case hold
eDiscovery (Standard) allows you to create a case, place a hold on user mailboxes, SharePoint sites, OneDrive accounts, and Teams chat messages to preserve content relevant to litigation. It also provides built-in search and export capabilities, making it the correct solution for the legal team's requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
eDiscovery (Standard) case hold
Why this is correct
An eDiscovery (Standard) case hold is the correct solution because it applies a preservation hold across all Microsoft 365 data sources associated with a user, including Exchange mailboxes, SharePoint and OneDrive sites, and Microsoft Teams content. This hold is managed within an eDiscovery case, which also provides integrated search and export capabilities for legal review, ensuring that data is both preserved and accessible for litigation.
- ✗
Litigation Hold
Why it's wrong here
Litigation Hold is insufficient for this scenario because it only preserves data in a user's Exchange Online mailbox, including archived mailboxes, but does not extend to SharePoint, OneDrive, or Microsoft Teams content. While it is a valid preservation mechanism for email, it lacks the comprehensive coverage and built-in search/export functionality required for a broad legal hold across all Microsoft 365 workloads.
- ✗
Auto-apply retention labels
Why it's wrong here
Auto-apply retention labels are designed for policy-driven retention and classification, not for ad-hoc legal holds that require immediate, case-specific preservation of all user data. These labels do not provide the ability to search or export content for litigation purposes, and they would need to be individually configured with specific retention rules, making them impractical for preserving everything belonging to a user in a legal context.
- ✗
Data Loss Prevention (DLP) policy
Why it's wrong here
A Data Loss Prevention (DLP) policy is unrelated to data preservation for legal matters; it enforces rules to prevent unauthorized sharing or leakage of sensitive information by scanning content and applying actions like blocking or alerting. DLP does not place any holds on data, nor does it offer search or export capabilities, so it cannot meet the requirement to preserve all data belonging to a user for legal proceedings.
Go deeper
Related to this question
Learn chapter
Microsoft Purview Information Protection
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
Key term
OneDrive for Business
OneDrive for Business is a cloud-based file storage and synchronization service from Microsoft, part of Microsoft 365, that lets users store, access, and share work files securely from anywhere.
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.