SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your legal team needs to search for all emails from a specific executive that mention a project name 'ProjectX' for a litigation hold. Which Microsoft Purview tool should they use?
⚠ Common exam trap
A common mix-up: candidates confuse Audit (which logs metadata about who did what) with eDiscovery (which searches the actual content of messages and documents), leading them to choose Audit when they need to search email body content for specific terms.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview eDiscovery
Microsoft Purview eDiscovery (specifically Content Search or eDiscovery (Premium)) is the correct tool because it is designed to search across Exchange Online mailboxes, SharePoint sites, and other data sources for specific content like emails containing 'ProjectX' from a specific executive. This capability directly supports litigation holds by allowing you to identify, preserve, and export relevant data. Communication Compliance focuses on policy-based detection of inappropriate communications, not ad-hoc searches for litigation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview Communication Compliance
Why it's wrong here
Microsoft Purview Communication Compliance is designed to help organizations detect and remediate inappropriate messages, such as harassment, regulatory violations, or conflicts of interest, by applying policies to scan communications. It focuses on identifying risky or non-compliant patterns within messages, rather than providing a general search interface for legal teams to retrieve specific emails based on sender or content for litigation purposes.
- ✗
Microsoft Purview Data Loss Prevention
Why it's wrong here
Microsoft Purview Data Loss Prevention (DLP) is engineered to identify, monitor, and protect sensitive information across various locations within Microsoft 365, preventing its unauthorized sharing or exfiltration. Its primary function is to enforce data protection policies and block or audit actions that could lead to data loss, not to serve as a content search tool for legal discovery requests.
- ✗
Microsoft Purview Audit
Why it's wrong here
Microsoft Purview Audit records user and administrator activities across Microsoft 365 services, providing a detailed log of *who* performed *what* action and *when*. While crucial for forensic analysis and understanding operational events, it does not store the actual content of emails or allow for content-based searches, which is a fundamental requirement for legal teams seeking specific communications.
- ✓
Microsoft Purview eDiscovery
Why this is correct
Microsoft Purview eDiscovery provides a comprehensive set of tools specifically designed to search for, preserve, collect, analyze, and export electronic content from Microsoft 365 for legal and investigative purposes. It enables legal teams to perform targeted searches across mailboxes, SharePoint sites, and Teams messages using keywords, date ranges, and sender/recipient criteria, making it the ideal solution for retrieving specific emails relevant to litigation.
Go deeper
Related to this question
Learn chapter
Compliance Concepts
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
Key term
Microsoft Purview
Microsoft Purview is a unified data governance and compliance service that helps organizations discover, manage, and protect their data across on-premises, cloud, and hybrid environments.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.