How to Use Microsoft Purview Records Management for Retention and Permanent Deletion
A law firm uses Microsoft 365. They must retain all client communication records for 10 years due to regulatory requirements. After 10 years, the records must be permanently deleted. Additionally, they need to ensure that users cannot permanently delete these records before the retention period ends. Which Microsoft Purview solution should they configure?
Quick Answer
The answer is Microsoft Purview Records Management. This solution is correct because it enables the law firm to apply retention labels that designate content as a regulatory record, which locks the records against user deletion and editing for the mandated 10-year period, while also supporting disposition review and permanent deletion once that period expires. On the SC-900 exam, this scenario tests your understanding of how Records Management differs from standard retention policies—specifically, the regulatory record label imposes stricter controls that override user permissions, a common trap where candidates might mistakenly choose a simpler retention policy. A key memory tip is to associate “regulatory record” with “regulatory requirement”: if the scenario demands that users cannot delete or alter records before a set time, think Records Management, not just retention.
⚠ Common exam trap
Many exam-takers confuse Data Lifecycle Management (which handles general retention and deletion) with Records Management (which adds the critical 'regulatory record' lock to prevent user deletion), so they incorrectly choose Option A.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Records Management
Microsoft Purview Records Management is the correct solution because it allows the law firm to apply retention labels that mark content as a regulatory record, which prevents users from permanently deleting the records before the retention period ends. It also supports disposition review and permanent deletion after the specified 10-year retention period, meeting both the retention and deletion requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview Data Lifecycle Management
Why it's wrong here
Data Lifecycle Management can retain and delete content, but it does not prevent users from deleting content unless retention labels are configured as records. The scenario requires records protection.
- ✓
Microsoft Purview Records Management
Why this is correct
Correct. Records Management allows you to declare items as records, which locks them against deletion and editing, and then apply retention and disposition settings.
- ✗
Microsoft Purview eDiscovery
Why it's wrong here
eDiscovery is for searching, holding, and exporting content for legal or investigative purposes, not for retention management and deletion prevention.
- ✗
Microsoft Purview Audit
Why it's wrong here
Audit logs user and admin activities but does not manage retention or prevent deletion of records.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on SC-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A law firm, Wingtip Toys, uses Microsoft Purview to manage client data. They need to: (1) retain all documents related to client cases for 10 years after case closure; (2) automatically apply a 'Case' retention label to documents in specific SharePoint sites based on metadata; (3) allow case managers to manually label documents; (4) ensure that after 10 years, documents are deleted; (5) preserve data for legal hold purposes when litigation occurs. The firm has Microsoft 365 E5 licenses. The compliance team wants to minimize manual effort. What should they configure?
medium- ✓ A.Create auto-apply retention labels for 'Case' documents with a retention period of 10 years and delete action, and enable litigation hold on relevant sites.
- B.Create sensitivity labels with auto-labeling for case documents, and configure records management.
- C.Create a default retention policy for all SharePoint sites with a 10-year retention period and delete action.
- D.Create a Data Loss Prevention (DLP) policy to block sharing of case documents, and enable eDiscovery holds.
Why A: Auto-apply retention labels based on metadata automate retention, and litigation hold preserves data during litigation. Option B is wrong because sensitivity labels are primarily used for data protection (e.g., encryption, access control) and do not directly manage retention periods or deletion actions. Option C is wrong because retention policies apply to all content in a location, not selectively. Option D is wrong because Data Loss Prevention (DLP) policies are designed to prevent unauthorized sharing or transfer of sensitive data, not to manage data retention lifecycles or ensure deletion after a specific period.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.