Microsoft Purview Records Management: Immutable Retention and Manual Disposal
A company has a SharePoint Online library containing legal contracts. They must satisfy a regulatory requirement that contracts cannot be modified or deleted after they are signed. Additionally, they need to retain the contracts for 10 years after the contract end date, after which they can be disposed of manually. Which Microsoft Purview solution should they implement?
Quick Answer
The answer is Records Management, because it is the Microsoft Purview solution specifically designed for immutable retention and manual disposal of regulated content. By declaring a signed contract as a record, you lock it against any modification or deletion, directly satisfying the requirement that contracts cannot be altered after signing. Records Management also supports event-based retention, which allows you to trigger a 10-year retention period starting from the contract end date, and then permits manual disposal once that period expires. On the SC-900 exam, this scenario tests your ability to distinguish Records Management from simpler retention policies or labels—a common trap is confusing it with a standard retention label, which does not enforce immutability. Remember the key distinction: a record is a document that is declared as such, making it legally locked and uneditable, whereas a regular retention label only prevents deletion but allows edits. A useful memory tip is "Record = Read-only + Retention," meaning once declared, it cannot be changed and must be kept for the required duration.
⚠ Common exam trap
It's easy for candidates to confuse Data Lifecycle Management (which handles retention and deletion) with Records Management (which adds immutability and legal hold capabilities), leading them to pick D when the question explicitly requires preventing modification and deletion, not just retention.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Records Management
Records Management in Microsoft Purview allows you to declare items as records, which locks them against modification or deletion (meeting the 'cannot be modified or deleted' requirement). It also supports event-based retention, enabling you to start a 10-year retention period from the contract end date and then allow manual disposal after that period expires.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Sensitivity labels
Why it's wrong here
Sensitivity labels classify and protect content through encryption and visual markings, but they do not impose retention periods or block deletion after a contract ends. They would be the right choice for classifying contract confidentiality, not for the ten-year retention and immutability this regulation requires.
- ✓
Records Management
Why this is correct
Records Management applies retention and disposition labels that declare items as records, blocking modification or deletion once signed. It also supports a 10-year retention period after the contract end date, followed by manual disposal review.
- ✗
Data Loss Prevention (DLP) policy
Why it's wrong here
DLP detects and blocks sharing of sensitive content in transit, but it neither locks records nor governs retention and disposal. It is tempting because contracts are sensitive data. Retention labels with record locking and a 10-year retention period followed by manual disposition are the correct solution.
- ✗
Data Lifecycle Management
Why it's wrong here
Data Lifecycle Management applies retention labels and policies but cannot enforce immutability; it governs how long content is kept, not whether it can be altered. It would suit retention-only scenarios, yet the regulatory requirement to prevent modification or deletion after signing demands the preservation locks found in records management.
Go deeper
Related to this question
Learn chapter
Defender Vulnerability Management Basics
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
Records Management
Records management is the systematic control of an organization's records, from creation or receipt through processing, distribution, maintenance, storage, retrieval, and disposal, ensuring integrity, compliance, and availability.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,279 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company must retain all vendor contracts for 10 years to meet regulatory requirements. After 10 years, the contracts must be permanently destroyed with no possibility of recovery. The compliance team wants to automate this lifecycle and ensure that during the retention period, the contracts cannot be edited or deleted by users. Which Microsoft Purview solution should they use?
medium- A.Data Lifecycle Management (DLM)
- ✓ B.Records Management
- C.eDiscovery (Premium)
- D.Sensitivity Labels
Why B: Records Management in Microsoft Purview is designed to declare records (regulatory or legal) that must be retained for a specific period and then disposed of in a compliant manner. It enforces immutability during the retention period—users cannot edit or delete records—and supports a disposition review or automatic permanent deletion after the retention period ends, exactly matching the requirement for 10-year retention followed by destruction with no recovery.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.