SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which THREE of the following are retention actions in Microsoft Purview Data Lifecycle Management? (Select THREE.)
⚠ Common exam trap
Many exam-takers confuse 'retention actions' with other compliance actions like archiving or sensitivity labeling, which are separate features in Microsoft Purview, leading them to select options that are not part of Data Lifecycle Management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Delete the content after a specified period
In Microsoft Purview Data Lifecycle Management, retention settings define what happens to content when its retention period expires, and the three supported retention actions are: retain only (option E — keep the content for a specified period, with no deletion action), delete only (option A — delete the content after a specified period, applicable when content has no retention requirement), and retain then delete (option D — retain the content for a period and then delete it, the most common action that satisfies both preservation and disposition needs). These three actions map directly to the retention action choices presented when configuring a retention label or retention policy in Purview. Option B is incorrect because automatic archiving is not a retention action in Data Lifecycle Management; archiving is handled through Exchange Online archive mailboxes or third-party/records management features, not as a retention action. Option C is incorrect because applying a sensitivity label is an Information Protection (Microsoft Purview Information Protection) capability used for classification and encryption, not a retention action, even though retention labels can be applied to content.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Delete the content after a specified period
Why this is correct
This is a core retention action within Microsoft Purview, designed to ensure that content is permanently removed from an organization's systems after a predefined period. This action is critical for compliance with data privacy regulations like GDPR, which mandate the deletion of personal data once its purpose has been fulfilled. It helps prevent over-retention, reduces data sprawl, and minimizes legal and security risks associated with holding unnecessary data.
- ✗
Automatically archive the content
Why it's wrong here
Automatically archiving content is not considered a direct retention action in the context of Microsoft Purview's data lifecycle management. Archiving typically involves moving data to a different, often less expensive, storage tier for long-term storage or reduced access, but it does not inherently define when the content should be deleted or how long it must be preserved. Retention actions, conversely, explicitly dictate the preservation or disposal timeline for content.
- ✗
Apply a sensitivity label to the content
Why it's wrong here
Applying a sensitivity label is primarily a data classification and protection action, not a retention action itself. Sensitivity labels are used to identify and protect sensitive information, for example, by encrypting documents or marking them with headers/footers. While a sensitivity label can be configured to trigger the application of a retention label, the act of applying the sensitivity label is about classifying and protecting data, not directly defining its retention or deletion schedule.
- ✓
Retain the content for a period and then delete it
Why this is correct
This is a comprehensive retention action that combines both preservation and eventual disposal, often implemented through a retention label or policy in Microsoft Purview. It ensures that content is held for a specific duration to satisfy regulatory, legal, or business requirements, and then automatically deleted once that period expires. This combined approach is vital for managing the complete lifecycle of information, balancing compliance needs with data minimization principles.
- ✓
Retain the content for a specified period
Why this is correct
This retention action ensures that content remains immutable and cannot be deleted or modified for a specified period, regardless of user actions. It is fundamental for meeting legal hold requirements, regulatory compliance, and internal governance policies that demand data preservation. By applying this action, organizations guarantee the integrity and availability of critical information for audits, investigations, or other mandated timeframes, preventing premature data loss.
Go deeper
Related to this question
Learn chapter
Encryption Fundamentals for SC-900
Key term
Labels
Labels are descriptive text or tags attached to IT resources to organize, identify, and manage them based on attributes like purpose, environment, or owner.
Key term
Data lifecycle management
Data lifecycle management is the process of managing data from its creation to its deletion, ensuring it is stored, used, and disposed of in a way that meets security, compliance, and business needs.
About these practice questions
One of 1,279 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.