Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft compliance solutionsMedium
A healthcare provider is required by HIPAA regulations to maintain patient records for a minimum of 7 years and ensure they are immutably preserved during this period, even if users attempt to delete them. After 7 years, these records must be automatically disposed of. Which Microsoft Purview capability should be implemented to meet these specific requirements for both retention and disposal?
- ARecords Management
- BData Loss Prevention (DLP)
- CInformation Barriers
- DCommunication Compliance
Show answer & explanationAnswer & explanation
Correct answer: A. Records Management
Records Management in Microsoft Purview is specifically designed to manage the lifecycle of information, including immutable retention for a defined period and automated disposal, which aligns perfectly with regulatory requirements like HIPAA.
Why the other options are wrong
- B. DLP prevents unauthorized sharing of sensitive data, not managing its lifecycle for retention and disposal.
- C. Information Barriers prevent communication between specific user groups, unrelated to data retention and disposal.
- D. Communication Compliance monitors internal communications for policy violations, not data retention or disposal.
Records Management
A Microsoft Purview solution that helps organizations meet legal, regulatory, and business obligations for retaining and disposing of information.
- Manages retention labels and policies.
- Supports immutable retention (records cannot be deleted).
- Enables automated disposal after a set period or event.
Memory trick: Manage Records for their entire life.