SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Which THREE are features of Microsoft Purview Data Lifecycle Management (formerly Records Management)? (Choose three.)
⚠ Common exam trap
Watch out — candidates often confuse the features of Microsoft Purview Data Lifecycle Management (retention policies, retention labels, disposition review) with those of Information Protection (sensitivity labels) or Data Loss Prevention, leading them to incorrectly select DLP or sensitivity labels as lifecycle management features.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Retention policies
Retention policies are a core feature of Microsoft Purview Data Lifecycle Management because they allow administrators to apply retention settings at the container level (e.g., entire SharePoint site, Exchange mailbox, or OneDrive account) to automatically retain or delete content based on a defined schedule. This ensures that organizational data is kept for the required period and then removed, supporting compliance and governance requirements without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Retention policies
Why this is correct
Microsoft Purview retention policies are a core feature of Data Lifecycle Management, enabling organizations to proactively manage content across various locations like Exchange mailboxes, SharePoint sites, OneDrive accounts, and Microsoft 365 Groups. These policies apply retention settings at a broad, container level, ensuring that all content within a specified location is either retained for a minimum period or deleted after a certain time, or both, to meet compliance and regulatory requirements. They are crucial for enforcing consistent data governance across the enterprise.
- ✗
Data loss prevention
Why it's wrong here
Data loss prevention (DLP) is a distinct solution within Microsoft Purview focused on identifying, monitoring, and protecting sensitive information from unauthorized sharing or transfer. While DLP is part of the broader Purview suite, its primary function is to prevent data exfiltration and misuse, rather than managing the lifecycle (retention, deletion, disposition) of data over time. Therefore, it is not considered a feature of Microsoft Purview Data Lifecycle Management, which specifically addresses retention and deletion.
- ✗
Sensitivity labels
Why it's wrong here
Sensitivity labels are a fundamental component of Microsoft Purview Information Protection, designed to classify and protect sensitive data by applying encryption, visual markings, and access restrictions. While they can trigger retention actions when published as part of a retention label, their primary role is data classification and protection, not the direct management of data retention or deletion throughout its lifecycle. Thus, sensitivity labels themselves are not a direct feature of Data Lifecycle Management.
- ✓
Retention labels
Why this is correct
Microsoft Purview retention labels are a key feature of Data Lifecycle Management, allowing for granular control over the retention and disposition of specific items, such as emails, documents, or files. Unlike retention policies that apply broadly to containers, labels can be applied manually by users or automatically based on content properties, ensuring that individual pieces of content adhere to specific retention schedules, including triggering a disposition review process. They are essential for managing content with varying regulatory or business requirements.
- ✓
Disposition review
Why this is correct
Disposition review is an integral feature of Microsoft Purview Data Lifecycle Management, specifically designed to ensure that content marked for deletion by a retention label undergoes a thorough human review process before permanent removal. This critical step allows designated reviewers to verify that the content no longer holds business or legal value, preventing accidental or premature deletion of important information. It provides an auditable workflow for the final stage of an item's lifecycle, ensuring compliance and mitigating risks.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.