SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A multinational corporation must comply with the EU General Data Protection Regulation (GDPR). They need to respond to a data subject access request (DSAR) by searching for personal data across Exchange Online, SharePoint Online, and OneDrive for Business. Which Microsoft Purview solution should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
eDiscovery (Premium)
EDiscovery (Premium) provides powerful search capabilities across Exchange Online, SharePoint Online, and OneDrive for Business, making it suitable for DSARs. Option A is incorrect because Data Lifecycle Management focuses on retention and deletion policies, not content search. Option B is incorrect because Audit (Premium) logs user activities but does not search for specific content. Option D is incorrect because Data Loss Prevention (DLP) prevents data leakage but does not provide the content search needed for DSARs.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data Lifecycle Management
Why it's wrong here
Data Lifecycle Management manages retention and deletion, not content search.
- ✗
Audit (Premium)
Why it's wrong here
Audit logs track activities but do not search for content.
- ✓
eDiscovery (Premium)
Why this is correct
eDiscovery can search across mailboxes, sites, and OneDrive to find personal data for DSARs.
- ✗
Data Loss Prevention (DLP)
Why it's wrong here
DLP prevents data loss but is not designed for content search.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
Key term
Data lifecycle management
Data lifecycle management is the process of managing data from its creation to its deletion, ensuring it is stored, used, and disposed of in a way that meets security, compliance, and business needs.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.