Munson's Pickles and Preserves has two retention requirements for Exchange email: (1) ALL Exchange email must be retained for a minimum of 7 years for regulatory compliance, and (2) individual employees must be able to mark specific customer complaint emails to be retained for 10 years. Which combination should the compliance administrator deploy?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Think of retention policies as the blanket rule that covers everyone — all email gets the 7-year treatment automatically. Retention labels are sticky notes employees can attach to individual emails they know need extra care, bumping that specific message to 10 years. You need both tools working together here, not one or the other.
Full explanation below image
Full Explanation
The correct answer is B. This scenario requires two different tools working together. A retention POLICY is the right tool for broad, sweeping requirements — applying a 7-year retain-then-delete action to all Exchange email automatically, without user action. A retention LABEL is the right tool for granular, user-driven requirements — employees can manually apply a '10-Year Customer Complaints' label to specific emails they identify. Because Microsoft Purview follows the principle of preservation (the longer retention period wins when multiple settings apply), an email with the 10-year label in a mailbox covered by a 7-year policy will be retained for 10 years. This is exactly the correct design pattern.
Option A is incorrect. While applying two retention policies to Exchange is technically possible, it does NOT give employees the ability to mark specific emails for 10-year retention — policies are automatic and organization-wide, not selectable by end users. Additionally, creating a separate 10-year policy that covers all Exchange would force ALL email to be retained 10 years, which exceeds the stated business requirement and may create unnecessary storage costs and legal risk.
Option C is incorrect. A single 10-year default label would retain ALL email for 10 years regardless of content, which violates the specific business requirement that only customer complaint emails need 10 years. The requirement is that most email should be deleted after 7 years — keeping everything for 10 years is overcompliant and potentially creates legal discovery burdens.
Option D is incorrect. DLP policies cannot apply retention settings. DLP is designed for protecting sensitive data in transit or at rest — detecting and blocking, quarantining, or alerting — but tagging content for retention is handled through retention policies and labels in the Records Management and Data Lifecycle Management areas of Microsoft Purview. DLP and retention are separate policy engines.
Exam tip: The AB-650 exam tests this policy vs. label distinction frequently. Remember: retention POLICIES are automatic and broad (top-down); retention LABELS give users control at the item level (bottom-up). When a scenario mentions 'employees can mark' or 'users can tag' specific items, a retention label is almost always the answer for that part of the requirement.