Describe security, compliance, privacy, and trust in Microsoft 365 →mediumMultiple ChoiceObjective-mapped
MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Your company is deploying Microsoft Purview to manage data subject requests (DSRs) under GDPR. Users need to submit requests to access or delete their personal data. Which Microsoft Purview solution should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Subject Requests
Microsoft Purview Data Subject Requests is the dedicated solution for managing data subject requests (DSRs) under GDPR. It provides a centralized interface for users to submit requests to access or delete their personal data, and for administrators to track and fulfill those requests. The other options are incorrect: Records Management handles retention and disposition of records, Audit (Premium) provides logging and investigation capabilities, and Data Loss Prevention (DLP) protects against data leaks. Therefore, option A is the correct answer.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Purview Data Subject Requests
Why this is correct
Microsoft Purview Data Subject Requests is the definitive solution for managing DSRs under GDPR, providing a centralized portal to profile personal data, find matches, and orchestrate the review and export of data. Unlike other Purview modules, it includes built-in workflows to handle subjects' rights to access, rectify, and erase personal data across Microsoft 365 services, and it generates auditable trails for compliance. This makes it the correct choice whenever the requirement is specifically about responding to DSRs.
- ✗
Microsoft Purview Records Management
Why it's wrong here
Records Management in Microsoft Purview applies retention labels and disposition reviews to govern information lifecycle, ensuring that data is kept only as long as needed and defensibly destroyed when appropriate. It does not, however, include any DSR-specific capabilities such as locating all personal data belonging to an individual or generating a subject's data copy. While retention policies must be respected during a DSR, the solution itself is not designed to process or fulfill DSRs.
- ✗
Microsoft Purview Audit (Premium)
Why it's wrong here
Audit (Premium) in Microsoft Purview provides a deep, tamper-proof log of user and admin activities, including items like mailbox access, file views, and configuration changes, enabling forensic investigations and internal investigations. It does not contain any mechanism to extract an individual's personal data from various repositories, apply rights-specific workflows, or produce a DSR export package. Audit logs can serve as evidence that a DSR was handled, but DSR management requires a different Purview solution.
- ✗
Microsoft Purview Data Loss Prevention (DLP)
Why it's wrong here
Data Loss Prevention (DLP) in Microsoft Purview protects sensitive information by scanning content for predefined patterns, then applying actions such as blocking, notifying, or encrypting data flow through endpoints, Exchange, SharePoint, OneDrive, and Teams. Its purpose is to prevent accidental or malicious leakage of sensitive data, not to manage individual rights requests, and it lacks tools for data subject search, data inventory, or export reporting. DLP might accidentally block a DSR export, but it cannot fulfill a DSR itself.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MS-900 question from scratch — 217 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.