SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Exhibit
{
"PolicyName": "HR Retention Policy",
"Locations": ["Exchange", "SharePoint", "OneDrive"],
"RetentionAction": "Delete",
"RetentionDuration": 365,
"RetentionType": "ModificationAge",
"ContentQuery": "Department eq 'HR'"
}Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. An HR manager wants to ensure that employee records are kept for at least 1 year after last modification. The policy is applied to Exchange, SharePoint, and OneDrive. What is the outcome?
⚠ Common exam trap
Many candidates confuse 'retention' with 'retain and delete' and assume a retention policy automatically preserves content indefinitely, when in fact a 'Delete only' policy will delete content after the specified period without any retention grace period.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy will not retain content; it will delete matching content after 365 days, which may not be intended
The policy is configured as 'Delete only' with a retention period of 365 days. This means that after 365 days from the last modification, the content will be permanently deleted. It does not retain content for any minimum period; it simply deletes it after the specified duration. The HR manager wants to keep records for at least 1 year, but this policy will delete them exactly at the 1-year mark, which may not be intended if the manager expects retention beyond that point or if the policy should also preserve content until deletion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The policy will not retain content; it will delete matching content after 365 days, which may not be intended
Why this is correct
This policy is configured with a "delete" action after 365 days, meaning it will permanently remove content that matches its criteria once the retention period expires. It does not include a "retain" action to preserve content for a specified duration, only to dispose of it. If the intent was to ensure content availability or prevent early deletion, this configuration is counterproductive, as it solely focuses on content disposition.
- ✗
Employee records in Exchange are retained for 365 days after last modification, then deleted
Why it's wrong here
This statement is incorrect because the policy's action is explicitly "delete" after 365 days, not "retain." A retention policy configured for deletion does not actively "retain" content in the sense of preserving it from deletion or modification during the specified period. Instead, it marks content for permanent removal once the 365-day period, calculated from the last modification date, has elapsed.
- ✗
Employee records in SharePoint are deleted after 365 days from last modification if they have Department=HR
Why it's wrong here
While SharePoint is a target location, the query Department=HR is problematic. SharePoint items do not possess a default "Department" property that can be universally queried in this manner. For this query to function, a custom site column named "Department" would need to be specifically created and consistently applied to relevant documents and list items, making the policy's scope highly dependent on custom metadata implementation.
- ✗
The policy retains content for 365 days and then automatically moves to archive
Why it's wrong here
This option is incorrect because Microsoft Purview retention policies, as configured here, do not have an inherent "move to archive" action. The policy's explicit instruction is to delete content after the 365-day period, not to transition it to an archive location or a different storage tier. Archiving typically involves separate processes or different policy types, distinct from the simple delete action specified.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.