Design security operations, identity, and compliance capabilities →easyMultiple ChoiceObjective-mapped

SC-100 Practice Question: Design security operations, identity, and compliance capabilities

Your organization is required to retain all Microsoft Teams chat messages for 7 years due to regulatory compliance. You need to design a solution that automatically retains and, if needed, e-discovery searches these messages. What should you configure?

⚠ Common exam trap

Watch out — candidates often confuse Data Loss Prevention (DLP) policies with retention policies, thinking DLP can also retain data, but DLP only monitors and blocks data exfiltration, not retention or search.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Microsoft Purview retention policies and eDiscovery

Microsoft Purview retention policies are designed to retain data for a specified period (e.g., 7 years) and can be applied to Microsoft Teams chat messages. eDiscovery (now part of Microsoft Purview eDiscovery) allows authorized users to search, hold, and export retained content for legal or compliance purposes. Together, they meet the regulatory requirement for retention and searchability.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Microsoft Purview retention policies and eDiscovery
Why this is correct
Microsoft Purview retention policies can be assigned to Teams channel and chat messages to preserve data for a defined period such as seven years, protecting it from permanent deletion. eDiscovery tools in the same compliance portal provide search, legal hold, and export capabilities, enabling the organization to locate and produce retained Teams communications when required. Together they satisfy the retention mandate because retention preserves the data and eDiscovery operationalizes access to it.
✗
Microsoft Purview Data Loss Prevention policies
Why it's wrong here
Microsoft Purview Data Loss Prevention policies inspect Teams messages for sensitive information types and enforce protective actions such as blocking external sharing, but they do not place data on a retention timeline. DLP is a preventive control for data exfiltration and policy violations, not a preservation mechanism; it lacks the ability to hold or archive content after it is deleted or modified. Consequently, DLP would not satisfy a requirement to retain Teams data for a specified period.
✗
Azure Policy
Why it's wrong here
Azure Policy is an Azure governance service that evaluates and enforces compliance rules against Azure Resource Manager resources such as VMs, storage accounts, and subscriptions. Microsoft Teams chat and channel messages are not Azure resources; they exist within Microsoft 365 services such as Exchange Online and SharePoint Online, which Azure Policy cannot reach. Therefore, Azure Policy cannot impose a retention period on Teams data and is outside the correct compliance toolset for this requirement.
✗
Sensitivity labels auto-labeling
Why it's wrong here
Sensitivity labels auto-labeling assigns classification, encryption, and visual marking to Teams files and messages based on matched content, but a sensitivity label is not a retention label and does not control deletion or preservation. Auto-labeling policies drive classification only; extending that classification to retention behavior would require a separate retention label and policy. Thus, while sensitivity labels are useful for data governance, they do not by themselves meet a seven-year retention obligation for Teams data.

Go deeper

SC-100 Practice Question: Design security operations, identity, and compliance capabilities

Why each option matters

Option-by-option breakdown

Related to this question