MS-900 Describe Microsoft 365 apps and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Create retention policies for EU users.

  Why it's wrong here

  Retention policies in Microsoft Purview govern how long content is kept and when it is permanently deleted, based on compliance or legal requirements. They do not control the physical storage location of data; data residency is determined by the tenant's configured geography, not by retention settings. Therefore, creating retention policies for EU users would only ensure data is kept for a specified duration, but would not guarantee that the data resides in the EU.

• ✗

  Set conditional access policies to restrict access from outside EU.

  Why it's wrong here

  Conditional Access policies in Microsoft Entra ID evaluate real-time signals such as the user's IP address, device state, and risk level to allow or block sign-in and session access. While they can restrict access from geographic locations outside the EU, they have no effect on where the underlying data is stored at rest; data residency is a property of the tenant's provisioning or Multi-Geo configuration. Thus, restricting access does not change the physical storage location and cannot satisfy an EU data residency requirement.

• ✗

  Use data loss prevention policies to block data movement.

  Why it's wrong here

  Data Loss Prevention (DLP) policies in Microsoft Purview inspect content for sensitive information and enforce actions such as blocking sharing via email or cloud applications. These policies prevent unauthorized exfiltration or leakage of data, but they do not relocate, provision, or define where tenant data is stored at rest. DLP is a data governance and security control, not a data residency mechanism, so it does not ensure EU users' data is stored within the EU.

• ✓

  Configure multi-geo capabilities in SharePoint Online and OneDrive.

  Why this is correct

  Multi-Geo capabilities in SharePoint Online and OneDrive for Business let an organization maintain a single Microsoft 365 tenant while provisioning data at rest in specific satellite geographic locations. By assigning EU users to a European Geo location, the administrator ensures their SharePoint sites and OneDrive libraries are stored in EU datacenters, meeting data residency requirements. This is the correct answer because it directly controls the physical storage location for the relevant workloads, unlike policy-based controls that only affect data lifecycle, access, or movement.

Go deeper

Related to this question