SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
A company needs to retain all customer emails for 7 years for regulatory compliance. After 7 years, they must be permanently deleted. They also need a legal hold for an ongoing investigation. Which Microsoft Purview solution should they use for the retention and deletion requirement?
⚠ Common exam trap
A common mix-up: candidates confuse Records Management with Data Lifecycle Management, thinking that 'records' implies retention and deletion, but Records Management is specifically for declaring items as records with immutable preservation, not for automated lifecycle-based retention and deletion.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Lifecycle Management
Data Lifecycle Management (DLM) in Microsoft Purview is the correct solution because it allows you to define retention policies that automatically retain customer emails for a specified period (7 years) and then permanently delete them. This directly addresses the regulatory compliance requirement for retention and deletion without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data Lifecycle Management
Why this is correct
Data Lifecycle Management (DLM), specifically through Microsoft 365 retention policies, is designed to automatically manage content throughout its lifecycle. These policies can be configured to retain emails for a specified duration, such as seven years, to meet regulatory compliance requirements. After the retention period expires, DLM policies can then automatically initiate the deletion of that content, ensuring compliance with both retention and disposal obligations without manual intervention. This directly addresses the need for automatic retention and subsequent deletion of customer emails.
- ✗
Records Management
Why it's wrong here
Records Management in Microsoft 365 is specifically tailored for declaring and managing high-value, business-critical items as official records, often for long-term preservation as legal evidence. Unlike simple retention, records management typically involves a more stringent lifecycle, including explicit record declaration, immutability, and a multi-stage disposal review process. It does not facilitate automatic deletion after a standard retention period without human review, making it unsuitable for the automatic disposal of all customer emails.
- ✗
Compliance Manager
Why it's wrong here
Microsoft Purview Compliance Manager is a workflow-based solution that helps organizations assess, monitor, and improve their compliance posture against various regulations and industry standards. It provides actionable recommendations and a compliance score, allowing users to manage compliance tasks and documentation. However, Compliance Manager is an assessment and management tool; it does not directly enforce data retention or deletion policies on content within Microsoft 365 services, nor does it automatically process content lifecycle.
- ✗
eDiscovery
Why it's wrong here
eDiscovery tools, such as Microsoft Purview eDiscovery (Standard and Premium), are primarily used for identifying, preserving, collecting, and reviewing electronically stored information (ESI) for legal cases or investigations. While eDiscovery can place legal holds to prevent content from being deleted, thereby overriding retention policies, its core function is not to automatically enforce retention periods or initiate the deletion of content once a period expires. It is a reactive tool for litigation support, not a proactive content lifecycle manager.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Data lifecycle management
Data lifecycle management is the process of managing data from its creation to its deletion, ensuring it is stored, used, and disposed of in a way that meets security, compliance, and business needs.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.