Courseiva

SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions

Exhibit

{
  "SearchResults": [
    {
      "ItemId": "msg001",
      "Subject": "Re: ProjectX",
      "Sender": "jane.doe@contoso.com",
      "ReceivedDate": "2025-01-15T10:30:00Z",
      "Size": 24576,
      "HasAttachment": false,
      "Source": "ExchangeOnline"
    },
    {
      "ItemId": "doc123",
      "Name": "ProjectX_Plan.pptx",
      "Author": "john.smith@contoso.com",
      "ModifiedDate": "2025-01-20T14:00:00Z",
      "Size": 1048576,
      "Source": "SharePointOnline"
    }
  ]
}

Refer to the exhibit. You are reviewing the results of a Microsoft Purview eDiscovery search. Which statement is correct about the search results?

⚠ Common exam trap

Many candidates assume all results are emails because eDiscovery is often associated with Exchange, but the exhibit clearly shows a document from SharePoint, testing the understanding that eDiscovery searches can span multiple Microsoft 365 workloads.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The search returned results from both Exchange Online and SharePoint Online

The search results show items from both Exchange Online (email messages) and SharePoint Online (documents), as indicated by the 'Location' column listing both 'Exchange Online' and 'SharePoint Online' sources. This confirms that the eDiscovery search was configured to search across multiple workloads, returning results from both platforms.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The search returned results from both Exchange Online and SharePoint Online

    Why this is correct

    The exhibit clearly shows two distinct result types returned by the search. One result is an email message, which originates from an Exchange Online mailbox, as indicated by its typical content and format. The other result is a PowerPoint presentation (.pptx file), which is characteristically stored and retrieved from a document repository like SharePoint Online or OneDrive for Business within a Microsoft 365 environment. This demonstrates that the eDiscovery search successfully queried and retrieved relevant content from both Exchange Online and SharePoint Online.

  • The search only returned results from Exchange Online

    Why it's wrong here

    This statement is incorrect because the search results explicitly include a file identified with a .pptx extension. PowerPoint files are primarily stored in collaborative document repositories such as SharePoint Online or OneDrive for Business, not directly within Exchange Online mailboxes. The presence of this specific document type unequivocally confirms that content from a source other than solely Exchange Online was returned, invalidating the claim that only Exchange Online results were found.

  • The document is an email message

    Why it's wrong here

    This option is incorrect because the exhibit identifies one of the returned items as a file with a .pptx extension. A .pptx file denotes a Microsoft PowerPoint presentation, which is a document type used for slides, not an email message. Email messages are distinct communication records typically characterized by sender, recipient, subject, and body fields, and are fundamentally different from presentation files.

  • The email has an attachment

    Why it's wrong here

    The exhibit provides specific metadata for the email result, and the "HasAttachment" property is explicitly listed as "False." This metadata directly indicates that the email message returned by the search does not contain any attached files. Therefore, the assertion that the email has an attachment is factually contradicted by the detailed properties provided within the search results.

Go deeper

Related to this question

About these practice questions

One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.