MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
An organization must comply with GDPR and needs to respond to a data subject access request (DSAR) within 30 days. Which Microsoft Purview solution helps search for personal data across Microsoft 365?
⚠ Common exam trap
MS-900 often tests the confusion between Audit (Premium), which logs activity, and eDiscovery (Premium), which actually searches and collects content — candidates pick Audit because 'search' sounds like log search.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
eDiscovery (Premium)
eDiscovery (Premium) in Microsoft Purview is purpose-built for identifying, collecting, and reviewing content across Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams) in response to legal and regulatory requests like GDPR DSARs. It supports keyword searches, custodian-based holds, and case management workflows that map directly to the DSAR process. Its search capabilities span mailboxes, sites, and chats, which is exactly what a DSAR requires to locate all personal data tied to a data subject.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Loss Prevention (DLP)
Why it's wrong here
DLP detects and blocks sensitive information in motion using policy rules; it does not compile the content matching one individual across workloads. It tempts because DLP identifies personal data types, and would be correct when the requirement is preventing exfiltration rather than gathering a subject's data for disclosure.
- ✗
Records Management
Why it's wrong here
Records Management applies retention and disposition labels to declared records; it does not search mailbox, SharePoint and Teams content for a subject's personal data. It tempts because GDPR retention obligations overlap with DSAR work, and would be correct when the requirement is governing record lifecycles rather than locating content.
- ✗
Audit (Premium)
Why it's wrong here
Audit (Premium) surfaces user and admin activity events, not personal data content, so it cannot locate the information a DSAR demands. It tempts because audit records support investigations, and would be the right choice when the requirement is retaining and searching activity events rather than content.
- ✓
eDiscovery (Premium)
Why this is correct
eDiscovery (Premium) supports searching Microsoft 365 content for personal data, satisfying the GDPR 30-day DSAR constraint. Its case-based workflow, custodian management and review sets let compliance teams locate, hold and export responsive items across Exchange, SharePoint, OneDrive and Teams, unlike audit or retention tooling that cannot perform targeted content search.
Go deeper
Related to this question
Learn chapter
Cross-Tenant Access Policies in Entra ID
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
eDiscovery
eDiscovery is the process of identifying, collecting, and producing electronic information for legal cases or investigations.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A multinational corporation uses Microsoft 365 and must comply with the General Data Protection Regulation (GDPR). They need to respond to a data subject access request (DSAR) within the mandated timeframe. Which Microsoft Purview tool should they use to search for personal data across Exchange Online, SharePoint Online, and OneDrive for Business?
hard- A.eDiscovery (Standard)
- ✓ B.Content Search
- C.Audit log search
- D.Data Lifecycle Management
Why B: Content Search in Microsoft Purview allows you to search for personal data across Exchange Online, SharePoint Online, and OneDrive for Business. It is the appropriate tool for locating data in response to a DSAR.
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.