This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Understand data protection and governance tasks for Microsoft 365 and Copilot (35–40%)
--> Understand Microsoft Purview
--> Understand retention
Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.
Introduction
Data is one of an organization’s most valuable assets. However, organizations must not only protect data but also manage how long it is kept and when it should be deleted. Regulatory requirements, legal obligations, business needs, and security concerns all influence data retention decisions.
Microsoft Purview provides comprehensive retention capabilities that help organizations retain, preserve, review, and dispose of information across Microsoft 365 services. Retention is a key component of information governance and records management.
For the AB-900 exam, it is important to understand the purpose of retention, the difference between retention policies and retention labels, and how Microsoft Purview helps organizations meet compliance and governance requirements.
What Is Retention?
Retention refers to the process of determining:
- How long information should be kept
- Whether information must be preserved
- When information should be deleted
- How organizations comply with legal, regulatory, and business requirements
Retention ensures that important information remains available when needed while reducing risks associated with keeping unnecessary data indefinitely.
Examples include:
- Retaining financial records for seven years
- Preserving employee communications during legal investigations
- Automatically deleting outdated project documents
- Maintaining business records for compliance purposes
Why Retention Matters
Organizations use retention solutions to achieve several goals:
Regulatory Compliance
Many industries have laws requiring data to be retained for specific periods.
Examples include:
- Financial records
- Healthcare records
- Tax documentation
- Legal contracts
Legal Protection
Organizations may need to preserve information for:
- Litigation
- Audits
- Investigations
- Regulatory reviews
Information Governance
Retention helps organizations:
- Reduce data sprawl
- Improve information quality
- Eliminate outdated content
- Manage storage costs
Security Improvement
Keeping unnecessary data increases risk.
Proper retention practices help:
- Minimize exposure to breaches
- Reduce attack surfaces
- Remove outdated sensitive information
Retention in Microsoft Purview
Microsoft Purview provides retention solutions that work across Microsoft 365 services such as:
- Exchange Online
- SharePoint Online
- OneDrive
- Microsoft Teams
- Microsoft 365 Groups
- Viva Engage
- Copilot-related content stored in Microsoft 365
Purview allows organizations to automatically:
- Retain content
- Delete content
- Retain and then delete content
Retention Policies
A retention policy automatically applies retention settings to locations across Microsoft 365.
Administrators create policies that specify:
- Where the policy applies
- How long content is retained
- What happens after the retention period ends
Example
A policy might:
- Retain all Teams chat messages for 5 years
- Automatically delete them afterward
Advantages
Retention policies:
- Apply automatically
- Require little user involvement
- Work at scale
- Provide consistent compliance
Retention Labels
Retention labels provide more granular control than retention policies.
A retention label can be assigned to individual items such as:
- Documents
- Emails
- Files
- Records
Labels can be applied:
- Manually by users
- Automatically by policies
- Through sensitive information detection
- Through trainable classifiers
Example
A document labeled “Financial Record” could:
- Be retained for 7 years
- Be declared a record
- Be deleted after the retention period expires
Retention Policies vs. Retention Labels
| Feature | Retention Policy | Retention Label |
|---|---|---|
| Scope | Broad locations | Individual items |
| User involvement | Usually none | May require user action |
| Granularity | Location level | Item level |
| Flexibility | Moderate | High |
| Records management | Limited | Strong |
A useful exam tip is:
Retention policies manage locations, while retention labels manage individual content items.
Retain, Delete, or Retain and Delete
Microsoft Purview supports three primary retention actions.
Retain Only
Content remains available throughout the retention period.
Example:
- Retain employee records for seven years.
Delete Only
Content is automatically removed after a specified period.
Example:
- Delete temporary files after one year.
Retain and Then Delete
Content is preserved for a retention period and then automatically removed.
Example:
- Retain project documents for five years and delete afterward.
Records Management
Records management builds on retention by treating important information as official records.
Organizations can:
- Declare content as records
- Restrict modifications
- Track lifecycle events
- Preserve compliance evidence
Examples of records:
- Legal contracts
- Corporate policies
- Regulatory filings
- Financial statements
Retention labels are commonly used to manage records.
Retention and Microsoft Teams
Organizations increasingly need to manage communication data.
Purview retention can manage:
- Teams chat messages
- Channel messages
- Meeting content
- Shared files
Example:
An organization may retain all Teams conversations for three years to satisfy compliance requirements.
Retention and Exchange Online
Retention can be applied to:
- Emails
- Mailboxes
- Calendar items
- Contacts
Example:
All employee email messages are retained for seven years and deleted afterward.
Retention and SharePoint/OneDrive
Retention supports:
- Documents
- Libraries
- Files
- Collaboration content
Example:
Project documentation is retained for five years after project completion.
Retention and Microsoft 365 Copilot
Microsoft 365 Copilot uses organizational data stored in Microsoft 365.
Because Copilot accesses existing organizational content:
- Retention policies continue to govern underlying data.
- Retention labels remain effective.
- Information governance policies still apply.
- Deleted content generally becomes unavailable after retention requirements are fulfilled.
Organizations should ensure retention strategies are aligned with Copilot usage to maintain compliance and data governance.
Adaptive Scopes
Large organizations often need dynamic retention assignments.
Adaptive scopes allow administrators to target retention policies based on attributes such as:
- Department
- Geography
- User type
- Business unit
This reduces administrative effort and improves policy accuracy.
Retention and eDiscovery
Retention supports eDiscovery by ensuring content remains available during investigations.
Benefits include:
- Preserving evidence
- Supporting legal holds
- Maintaining compliance records
- Simplifying investigations
Retained content can remain available even if users attempt to delete it.
Retention Best Practices
Organizations should:
- Identify regulatory requirements.
- Define retention schedules.
- Use retention policies for broad coverage.
- Use retention labels for specific content.
- Regularly review retention settings.
- Apply least-privilege administration.
- Align retention with records management processes.
- Test policies before large-scale deployment.
Key Exam Takeaways
For the AB-900 exam, remember these important concepts:
- Retention determines how long data is kept and when it is deleted.
- Microsoft Purview provides retention policies and retention labels.
- Retention policies apply broadly to locations and workloads.
- Retention labels apply to individual content items.
- Organizations can retain content, delete content, or retain and then delete content.
- Retention supports compliance, governance, security, and legal requirements.
- Records management relies heavily on retention labels.
- Retention applies across Exchange Online, SharePoint, OneDrive, Teams, and other Microsoft 365 services.
- Copilot content governance relies on the retention controls applied to underlying Microsoft 365 data.
Practice Exam Questions
Question 1
An organization wants all Teams chat messages retained for five years and then automatically deleted. Which Microsoft Purview capability should be used?
A. Sensitivity labels
B. Retention policy
C. Conditional Access
D. Insider Risk Management
Answer: B
Explanation: Retention policies can apply retention settings broadly across Microsoft 365 workloads such as Teams chats and automatically delete content after the retention period expires.
Question 2
What is the primary purpose of retention in Microsoft Purview?
A. Encrypt all files in Microsoft 365
B. Prevent users from sharing documents externally
C. Control how long information is preserved and when it is deleted
D. Monitor user productivity
Answer: C
Explanation: Retention helps organizations manage the lifecycle of information by determining how long content is kept and when it should be removed.
Question 3
Which statement best describes a retention label?
A. It applies retention settings to individual items such as emails and documents.
B. It blocks external access to files.
C. It enforces multifactor authentication.
D. It manages network security rules.
Answer: A
Explanation: Retention labels provide item-level retention management and can be applied to specific documents, emails, and records.
Question 4
A company wants users to classify certain documents as official records that cannot be easily altered. Which solution is most appropriate?
A. Adaptive scopes
B. Conditional Access policies
C. Microsoft Defender XDR
D. Retention labels with records management capabilities
Answer: D
Explanation: Retention labels can declare documents as records and enforce records management requirements.
Question 5
Which retention action preserves content during a specified period and then removes it automatically?
A. Retain only
B. Delete only
C. Retain and then delete
D. Archive only
Answer: C
Explanation: Retain and then delete ensures content remains available during the retention period before automatic deletion occurs.
Question 6
What is a key difference between retention policies and retention labels?
A. Retention policies only work with Exchange Online.
B. Retention labels apply to individual content items.
C. Retention labels cannot be automated.
D. Retention policies require user assignment.
Answer: B
Explanation: Retention labels provide item-level control, while retention policies generally apply to locations or workloads.
Question 7
An administrator wants a retention policy to automatically target users based on department membership. Which feature should be used?
A. Data Loss Prevention
B. eDiscovery
C. Sensitivity labeling
D. Adaptive scopes
Answer: D
Explanation: Adaptive scopes dynamically assign retention policies using organizational attributes such as department or location.
Question 8
Why is retention important for eDiscovery investigations?
A. It automatically encrypts evidence.
B. It prevents users from signing in.
C. It helps ensure relevant information remains available for review.
D. It removes all old content immediately.
Answer: C
Explanation: Retention preserves information that may be required for legal or regulatory investigations.
Question 9
Which Microsoft 365 workload can be governed by Microsoft Purview retention policies?
A. Microsoft Teams only
B. SharePoint Online only
C. Exchange Online only
D. Exchange Online, SharePoint Online, OneDrive, and Teams
Answer: D
Explanation: Retention policies support multiple Microsoft 365 workloads, including Exchange, SharePoint, OneDrive, and Teams.
Question 10
How does Microsoft 365 Copilot relate to retention policies?
A. Copilot bypasses all retention settings.
B. Copilot replaces retention labels.
C. Copilot uses underlying Microsoft 365 content that remains governed by retention controls.
D. Copilot automatically creates retention policies.
Answer: C
Explanation: Copilot accesses organizational data stored in Microsoft 365, and existing retention policies and labels continue to govern that content.
Go to the AB-900 Exam Prep Hub main page
The Data Community 