SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Which TWO Microsoft Purview compliance solutions are used to manage data retention and deletion?
⚠ Common exam trap
A common mix-up: candidates confuse Data Loss Prevention (DLP) with data retention because both involve data lifecycle concepts, but DLP is solely about preventing data breaches through policy enforcement, not about scheduling retention or deletion.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Lifecycle Management
Data Lifecycle Management (A) is correct because it enables organizations to apply retention and deletion policies to content based on its age or classification, automatically managing data across SharePoint, OneDrive, Exchange, and Teams. Records Management (C) is correct because it provides a solution for declaring records, applying retention labels that lock content to prevent modification or deletion, and managing disposition reviews for permanent deletion. Both solutions are part of Microsoft Purview's information governance capabilities, specifically designed to control data retention and deletion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data Lifecycle Management
Why this is correct
Microsoft Purview Data Lifecycle Management (DLM) is a compliance solution designed to govern information throughout its entire lifecycle. It enables organizations to define and apply retention labels and policies to content across Microsoft 365 services, ensuring that data is kept for necessary periods and then defensibly deleted when no longer required, aligning with regulatory and business obligations.
- ✗
Data Loss Prevention
Why it's wrong here
Microsoft Purview Data Loss Prevention (DLP) policies are designed to identify, monitor, and automatically protect sensitive information from unauthorized sharing or transfer. While critical for data security, DLP focuses on preventing data exfiltration and inappropriate access rather than managing the long-term retention or disposition of content throughout its lifecycle.
- ✓
Records Management
Why this is correct
Microsoft Purview Records Management is a specialized compliance solution that helps organizations manage their legal, business, and regulatory record-keeping obligations. It allows for the declaration of content as a record, ensuring its immutability and preventing modification or deletion, and then applies specific retention and disposition policies to these high-value items, which is a core aspect of managing their lifecycle.
- ✗
Communication Compliance
Why it's wrong here
Microsoft Purview Communication Compliance helps organizations detect, investigate, and act on inappropriate messages within their internal and external communications. This solution focuses on identifying potential code of conduct violations, regulatory compliance issues, or harassment, by scanning content for specific keywords or patterns, which is distinct from managing data retention or deletion.
- ✗
Audit
Why it's wrong here
Microsoft Purview Audit provides a unified logging solution that captures user and administrator activities across various Microsoft 365 services. Its primary purpose is to support forensic investigations, compliance requirements, and security monitoring by providing an immutable record of actions, rather than directly managing the retention, deletion, or overall lifecycle of the content itself.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Governance
Governance is the framework of policies, processes, and controls that ensures IT activities align with business goals and comply with regulations.
Key term
Data retention
Data retention is the practice of keeping data for a specific period to meet legal, business, or compliance needs, and then securely disposing of it.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.