SC-900 Practice Question: Describe the capabilities of Microsoft compliance solutions
Your organization uses Microsoft Purview Records Management to manage high-value contracts. You need to ensure that once a contract is declared as a record, it cannot be modified or deleted by any user, including administrators. Which type of record should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Regulatory record
Regulatory records provide the highest level of protection and cannot be modified or deleted by any user, including administrators. Option A is wrong because disposition review is a process for reviewing content before deletion, not a record type that locks content. Option B is wrong because event-based retention policies apply retention based on a trigger event, but they do not prevent modification or deletion once declared a record. Option C is wrong because a retention label with default settings does not lock the record; it only applies retention settings without regulatory protections.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disposition review
Why it's wrong here
Disposition review is a crucial stage within the records management lifecycle, occurring at the end of a retention period. Its purpose is to allow designated reviewers to manually assess content before its final deletion or transfer, ensuring compliance and business value. However, disposition review is a procedural step for managing content after its retention, not a type of record declaration or a mechanism that prevents content modification or deletion during its active retention period.
- ✗
Event-based retention policy
Why it's wrong here
An event-based retention policy initiates the retention period for content only when a specific event occurs, such as a contract expiration or employee departure. While it ensures content is retained for a defined duration after that trigger, it does not automatically apply an immutable lock to the content itself. Therefore, content under such a policy can still be modified or deleted by users with appropriate permissions before the retention period ends or if no specific record lock is applied via a separate mechanism.
- ✗
Retention label with default settings
Why it's wrong here
A retention label applied with default settings ensures that content is retained for a specified period according to the label's policy. While it prevents permanent deletion before the retention period expires, it does not inherently make the content immutable. Users with edit permissions can still modify the content, and it can be deleted by authorized users who bypass soft deletion, unless the label is specifically configured to declare the item a "record" or "regulatory record" with a content lock.
- ✓
Regulatory record
Why this is correct
A regulatory record in Microsoft Purview is specifically designed to meet stringent regulatory compliance requirements for absolute immutability. Once an item is declared a regulatory record, it becomes permanently locked, preventing any modification or deletion by any user, including global administrators. This level of unalterable preservation ensures the content's integrity and authenticity throughout its lifecycle, making it suitable for the most demanding legal and regulatory obligations.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Event
An event is any identifiable occurrence or action in a computer system, network, or application that can be logged, monitored, or analyzed for security or operational purposes.
Key term
Retention label
A retention label is a tag applied to emails, documents, or files in Microsoft 365 that tells the system how long to keep the item and what to do with it when the time is up.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.