Courseiva

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

{
  "PolicyName": "HR Retention Policy",
  "Locations": ["Exchange", "SharePoint", "OneDrive"],
  "RetentionAction": "Delete",
  "RetentionDuration": 365,
  "RetentionType": "ModificationAge",
  "ContentQuery": "Department eq 'HR'"
}

Refer to the exhibit. A Microsoft Purview retention policy is configured as shown. An HR manager wants to ensure that employee records are kept for at least 1 year after last modification. The policy is applied to Exchange, SharePoint, and OneDrive. What is the outcome?

⚠ Common exam trap

Many candidates confuse 'retention' with 'retain and delete' and assume a retention policy automatically preserves content indefinitely, when in fact a 'Delete only' policy will delete content after the specified period without any retention grace period.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The policy will not retain content; it will delete matching content after 365 days, which may not be intended

The policy is configured as 'Delete only' with a retention period of 365 days. This means that after 365 days from the last modification, the content will be permanently deleted. It does not retain content for any minimum period; it simply deletes it after the specified duration. The HR manager wants to keep records for at least 1 year, but this policy will delete them exactly at the 1-year mark, which may not be intended if the manager expects retention beyond that point or if the policy should also preserve content until deletion.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The policy will not retain content; it will delete matching content after 365 days, which may not be intended

    Why this is correct

    This policy is configured with a "delete" action after 365 days, meaning it will permanently remove content that matches its criteria once the retention period expires. It does not include a "retain" action to preserve content for a specified duration, only to dispose of it. If the intent was to ensure content availability or prevent early deletion, this configuration is counterproductive, as it solely focuses on content disposition.

  • Employee records in Exchange are retained for 365 days after last modification, then deleted

    Why it's wrong here

    This statement is incorrect because the policy's action is explicitly "delete" after 365 days, not "retain." A retention policy configured for deletion does not actively "retain" content in the sense of preserving it from deletion or modification during the specified period. Instead, it marks content for permanent removal once the 365-day period, calculated from the last modification date, has elapsed.

  • Employee records in SharePoint are deleted after 365 days from last modification if they have Department=HR

    Why it's wrong here

    While SharePoint is a target location, the query Department=HR is problematic. SharePoint items do not possess a default "Department" property that can be universally queried in this manner. For this query to function, a custom site column named "Department" would need to be specifically created and consistently applied to relevant documents and list items, making the policy's scope highly dependent on custom metadata implementation.

  • The policy retains content for 365 days and then automatically moves to archive

    Why it's wrong here

    This option is incorrect because Microsoft Purview retention policies, as configured here, do not have an inherent "move to archive" action. The policy's explicit instruction is to delete content after the 365-day period, not to transition it to an archive location or a different storage tier. Archiving typically involves separate processes or different policy types, distinct from the simple delete action specified.

About these practice questions

Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.