Data Retention and Compliance Flashcards
Microsoft Security Operations Analyst Associate SC-200 Flashcards

| Front | Back |
| Default retention period in Microsoft 365 | None by default unless configured by the organization |
| Difference between a retention label and a retention policy | Labels target specific items like documents, while policies apply broadly to groups or locations |
| How does encryption support data compliance | Protects sensitive data from unauthorized access in storage and transit |
| How does Microsoft Purview prevent data deletion during retention | By enforcing retention rules that protect items until the retention period ends |
| Impact of retention policies on OneDrive files | Ensures files are retained or deleted based on configured rules |
| Key benefit of using sensitivity labels | Helps classify and protect data based on its level of sensitivity |
| Key compliance regulations Microsoft solutions help with | GDPR, HIPAA, CCPA, SOX, and other global standards |
| Key factors to consider in developing a retention policy | Regulatory requirements, organizational needs, and data security risks |
| Purpose of auditing in compliance | To track and monitor user activities for ensuring transparency and identifying violations |
| Purpose of retention policies for Teams | To control how long chat messages, channel messages, and attachments are stored |
| Retention policy priority in Microsoft solutions | The most restrictive policy takes precedence over others |
| Role of eDiscovery in compliance | Allows organizations to find and export relevant data for legal or regulatory investigations |
| Role of Microsoft Purview in compliance | Helps organizations manage data retention policies and meet regulatory requirements |
| What are non-record documents | Items that can be edited or deleted within a retention compliance process |
| What are retention labels | Tags applied to data to enforce retention or deletion rules in Microsoft compliance solutions |
| What does "Immutable" mean in compliance scenarios | Data cannot be altered or deleted, ensuring its authenticity |
| What happens when a retention label is applied to a document | The document is retained or deleted based on the rules associated with the label |
| What is a 'disposition review' in compliance processes | A manual review to confirm the deletion of data after the retention period |
| What is a "record" in data governance | A document or item that is protected from edits and deletions for compliance reasons |
| What is a "Retention Lock | " Ensures the retention policy cannot be disabled or modified for regulatory compliance |
| What is data retention in compliance | The practice of storing and managing data for a specific period to meet legal and regulatory requirements |
| What is Regulatory Compliance Center in Microsoft 365 | A hub to manage, monitor, and improve compliance across an organization |
| What is the "Built-in retention" feature in Exchange Online | Automatically enforces retention periods for emails without user intervention |
| What is the purpose of a data retention policy | To define how long data is stored, protected, and disposed of to ensure compliance |
About the Flashcards
Flashcards for the Microsoft Security Operations Analyst Associate exam provide a targeted review of core data governance and retention concepts used in Microsoft 365. Cards explain data retention, the purpose and design of retention policies, differences between retention labels and policies, record versus non-record distinctions, retention priority, and retention lock/immutability protections.
The deck also reviews Microsoft compliance tools such as Microsoft Purview and the Regulatory Compliance Center, plus operational topics like eDiscovery, auditing, disposition reviews, sensitivity labels, and encryption. Practical cards cover built-in retention for Exchange Online and effects on Teams and OneDrive so students can quickly recall technical controls and exam key terms.
Topics covered in this flashcard deck:
- Data retention concepts
- Retention labels vs policies
- Records versus non-records
- Microsoft Purview tools
- eDiscovery and auditing
- Teams, Exchange, OneDrive retention