MS-900 Describe Microsoft 365 apps and services Practice Question
Which THREE Microsoft 365 services are part of Microsoft Purview compliance suite?
⚠ Common exam trap
It's easy for candidates to confuse Microsoft Defender for Cloud Apps (a security tool) with a compliance service, but Purview focuses on data governance, audit, and communication monitoring, not threat detection or identity management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Lifecycle Management
Data Lifecycle Management (C) is part of Microsoft Purview because it provides automated retention and deletion policies for sensitive data across Exchange, SharePoint, OneDrive, and Teams. It helps organizations comply with regulatory requirements by governing data from creation to disposal, directly supporting the Purview compliance portal's governance capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID is Microsoft's cloud identity and access management service, enabling single sign-on, multi-factor authentication, and Conditional Access across applications. It is fundamentally an identity layer, not a compliance-center feature; while its sign-in logs can integrate with Purview Audit, Entra ID itself is not a Microsoft Purview service for data governance or risk management.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that discovers shadow IT, controls access to cloud apps, and detects threats across those apps using behavioral analytics. Although it can apply data-control policies that overlap with compliance, it belongs to Microsoft 365 Defender, the security suite, rather than being a Microsoft Purview compliance solution like Audit or Data Lifecycle Management.
- ✓
Data Lifecycle Management
Why this is correct
Data Lifecycle Management is a core Microsoft Purview compliance solution for automating retention, preservation, and deletion of Microsoft 365 content using labels and policies. It helps organizations meet regulatory obligations and reduce legal risk by ensuring data is kept exactly as long as needed and then permanently removed. This extends across Exchange, SharePoint, OneDrive, and Teams, making it a key part of Purview's governance toolkit.
- ✓
Communication Compliance
Why this is correct
Communication Compliance is a Microsoft Purview solution that detects policy violations such as offensive language, harassment, sharing confidential data, or financial fraud across email, Microsoft Teams, and third-party communications. It applies customizable machine-learning classifiers, triggers alerts, and enables remediation workflows for designated reviewers. This capability directly manages insider risk and workplace culture, distinct from retention or auditing functions.
- ✓
Audit
Why this is correct
Audit in Microsoft Purview provides a unified audit log of user and admin activities across Microsoft 365 services, allowing organizations to investigate incidents, perform security forensics, and prove compliance with regulatory recordkeeping requirements. It records actions such as accessing files, modifying permissions, and administrative changes, with configurable retention and search/export capabilities. This solution offers the historical accountability that complements other Purview data-governance features.
Go deeper
Related to this question
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.