SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization has a Microsoft Purview retention policy that retains SharePoint documents for 5 years. After 5 years, you want an administrator to review and approve deletion. Which configuration is required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a disposition review at the end of the retention period
A disposition review allows an administrator to manually review and approve or reject deletion at the end of the retention period, meeting the requirement for admin approval. Option B is incorrect: applying a retention label and enabling disposition review is not required; the configuration needed is to enable disposition review on the retention policy itself. Option C is incorrect: eDiscovery (Premium) is used for legal investigations and exports, not for managing disposition workflows. Option D is incorrect: automatic deletion would delete files without any admin review, which contradicts the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure a disposition review at the end of the retention period
Why this is correct
Configuring a disposition review directly within a Microsoft Purview retention policy ensures that content reaching the end of its defined retention period is not automatically deleted. Instead, designated reviewers, typically compliance officers or administrators, receive notifications and can examine the content. This allows them to make an informed decision to either approve the final deletion, extend the retention period, or apply a different retention label, thereby providing essential human oversight before permanent data removal.
- ✗
Apply a retention label and enable disposition review
Why it's wrong here
While retention labels can indeed be configured with disposition reviews and applied to content, this option introduces an unnecessary layer when the question refers to a "Microsoft Purview retention policy." A retention policy itself can be directly configured to include a disposition review at the end of its retention period, making the application of a separate retention label redundant for achieving the desired review outcome. Retention policies apply to locations, whereas labels apply to items within those locations.
- ✗
Use eDiscovery (Premium) to export and then delete
Why it's wrong here
eDiscovery (Premium) is a powerful tool designed for identifying, preserving, collecting, processing, and analyzing electronically stored information for legal and investigative purposes. Its primary function is to facilitate legal discovery and content export, not to manage the automated disposition lifecycle of content under a retention policy. Using eDiscovery to export and then manually delete content is a reactive, ad-hoc process that bypasses the structured, policy-driven disposition review mechanism.
- ✗
Set the retention policy to delete automatically after 5 years
Why it's wrong here
Setting a retention policy to automatically delete content after a specified period, such as 5 years, is a valid configuration for data lifecycle management. However, this action explicitly bypasses any form of human intervention or review before deletion. If the organizational requirement includes a review process before content is permanently removed, automatic deletion directly contradicts that need by immediately and irrevocably deleting the content once its retention period expires.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Retention policy
A retention policy is a set of rules that determines how long an organization keeps its data and what happens to it when the retention period expires.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.