SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A company uses Microsoft Purview to manage data lifecycle. They configure a retention label that marks content as a regulatory record and apply it to sensitive documents. A user with edit permissions attempts to modify a document that has this label applied. What will be the outcome?
⚠ Common exam trap
Watch out — candidates often confuse 'regulatory record' with a standard retention label or a legal hold, assuming that edit permissions or audit logging still allow changes, when in fact regulatory records enforce complete immutability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The user cannot edit or delete the document.
When a retention label is configured as a regulatory record, it enforces the strictest retention and disposition controls. Regulatory records are immutable by design; once applied, no user—regardless of permissions—can edit or delete the content. This is because the label locks the document to prevent any modification or deletion until the retention period expires and a disposition review is completed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The user can edit the document but cannot delete it.
Why it's wrong here
This behavior describes a 'standard record' label in Microsoft Purview, not a 'regulatory record.' A standard record prevents deletion but still allows users with appropriate permissions to edit the document, with changes typically versioned and audited. A regulatory record, however, enforces a complete lockdown, preventing both editing and deletion to meet the most stringent compliance requirements for immutable records.
When this WOULD be correct
If the label were a standard retention label (not a regulatory record) with a retention action that only prevents deletion but allows edits, then users with edit permissions could modify the document but not delete it.
- ✓
The user cannot edit or delete the document.
Why this is correct
When a document is marked with a regulatory record label in Microsoft Purview, it becomes immutable to meet stringent compliance requirements. This means the content is locked down, preventing any user from editing or deleting it, regardless of their assigned permissions. This highest level of restriction ensures the integrity and non-repudiation of the record throughout its defined retention period.
- ✗
The user can edit the document if they have edit permissions, and any changes are recorded in the audit log.
Why it's wrong here
While standard retention labels or general SharePoint/OneDrive permissions might allow editing with changes recorded in the audit log, a regulatory record label imposes a much stricter control. This specific label type explicitly prevents any modifications to the document, regardless of a user's assigned edit permissions. The immutability of a regulatory record takes precedence over all other permissions, making editing impossible to ensure the content's integrity.
When this WOULD be correct
This option would be correct if the question described a standard retention label (not a regulatory record) that only blocks deletion but allows edits, with audit logging enabled for changes.
- ✗
The user can edit the document only after obtaining a legal hold.
Why it's wrong here
A legal hold, also known as an eDiscovery hold, is designed to preserve content from deletion or modification for legal discovery purposes. However, it does not grant permission to edit a document that has been designated as a regulatory record. The inherent immutability enforced by a regulatory record label takes precedence, meaning a legal hold adds a layer of preservation without altering the content's record status or allowing any modifications.
When this WOULD be correct
In a scenario where a document is under a legal hold (e.g., via eDiscovery hold) but not labeled as a regulatory record, a user with edit permissions might be able to edit the document only after the legal hold is removed, as the hold prevents deletion but not necessarily editing.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓The user cannot edit or delete the document.Correct answer▾
Why this is correct
When a document is marked with a regulatory record label in Microsoft Purview, it becomes immutable to meet stringent compliance requirements. This means the content is locked down, preventing any user from editing or deleting it, regardless of their assigned permissions. This highest level of restriction ensures the integrity and non-repudiation of the record throughout its defined retention period.
✗The user can edit the document but cannot delete it.Wrong answer — click to see why▾
Why this is wrong here
Regulatory records are immutable; once applied, users cannot edit or delete the content, regardless of permissions. Option A incorrectly suggests editing is allowed.
★ When this WOULD be the correct answer
If the label were a standard retention label (not a regulatory record) with a retention action that only prevents deletion but allows edits, then users with edit permissions could modify the document but not delete it.
Why candidates choose this
Candidates may confuse regulatory records with standard retention labels, assuming that edit permissions override retention settings, or they may think deletion is the only restricted action.
✗The user can edit the document if they have edit permissions, and any changes are recorded in the audit log.Wrong answer — click to see why▾
Why this is wrong here
A regulatory record label in Microsoft Purview locks content, preventing any edits or deletions by users, even those with edit permissions. Option C incorrectly suggests edits are allowed and only logged.
★ When this WOULD be the correct answer
This option would be correct if the question described a standard retention label (not a regulatory record) that only blocks deletion but allows edits, with audit logging enabled for changes.
Why candidates choose this
Candidates may confuse regulatory records with standard retention labels, assuming that edit permissions override retention policies and that audit logging is the primary control mechanism.
✗The user can edit the document only after obtaining a legal hold.Wrong answer — click to see why▾
Why this is wrong here
A regulatory record label in Microsoft Purview imposes strict immutability: content cannot be edited or deleted by any user, regardless of permissions. Legal hold is a separate mechanism for preserving content during litigation, not a prerequisite for editing regulatory records.
★ When this WOULD be the correct answer
In a scenario where a document is under a legal hold (e.g., via eDiscovery hold) but not labeled as a regulatory record, a user with edit permissions might be able to edit the document only after the legal hold is removed, as the hold prevents deletion but not necessarily editing.
Why candidates choose this
Candidates may confuse legal hold with retention labels, assuming that legal hold imposes similar restrictions on editing, or they may think that regulatory records require additional steps like legal hold before modification is allowed.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Retention label
A retention label is a tag applied to emails, documents, or files in Microsoft 365 that tells the system how long to keep the item and what to do with it when the time is up.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.