Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsEasy
A healthcare organization needs to ensure that all patient records are retained for a minimum of 7 years as mandated by HIPAA, and then securely disposed of. They also need to ensure that some specific financial records are retained permanently. Which Microsoft Purview capability primarily supports these requirements?
- AMicrosoft Purview eDiscovery
- BMicrosoft Purview Data Loss Prevention
- CMicrosoft Purview Records Management
- DMicrosoft Purview Communication Compliance
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Purview Records Management
Microsoft Purview Records Management allows organizations to manage the lifecycle of their data, including defining retention and deletion policies for regulatory compliance and business needs.
Why the other options are wrong
- A. eDiscovery is for legal holds and investigations, not for general data retention and disposal policies.
- B. DLP prevents sensitive data from leaving the organization, not managing its retention and deletion lifecycle.
- D. Communication Compliance monitors internal communications for policy violations, not for managing data retention periods.
Records Management
A Microsoft Purview capability that helps organizations manage their data throughout its lifecycle, from creation to disposition, to meet legal, regulatory, and business-critical record-keeping requirements.
- Manages retention and deletion policies
- Supports regulatory compliance (e.g., HIPAA)
- Ensures secure disposition of data
Memory trick: Keep what you need, delete what you don't, by the rules.