Objective 3.029% of exam

Describe security, compliance, privacy, and trust in Microsoft 365

MS-900 Practice Questions

This domain covers Microsoft 365 security, compliance, privacy, and trust concepts, including Defender, Purview, and Entra. The exam tests your ability to identify which service addresses specific risks, understand shared responsibility, and recognize compliance offerings like Service Trust Portal and audit logs, without deep configuration tasks.

Full Practice Test →All Objectives

What this objective tests

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Key Topics

Map each risk to the right tool: Defender for threat protection, Purview for compliance and data governance, Entra for identity. Most critical: know shared responsibility and that Microsoft secures the cloud, you secure your data.

Identify Microsoft Defender for Office 365 protections against phishing, malware, and zero-day threats.
Describe Microsoft Purview solutions for data classification, DLP, eDiscovery, and insider risk management.
Explain Microsoft Entra ID capabilities: conditional access, MFA, identity protection, and privileged identity management.
Recognize compliance offerings: Service Trust Portal, compliance manager, audit logs, and data residency options.

Common exam traps

Where candidates lose marks on Describe security, compliance, privacy, and trust in Microsoft 365

⚠Confusing Microsoft Defender for Office 365 with Defender for Endpoint, or assuming Defender for Identity is included in all plans.
⚠Mixing up Microsoft Purview compliance features like DLP and retention labels, or thinking they apply to all workloads by default.
⚠Believing Microsoft Entra ID Premium features like conditional access are available in free or basic Microsoft 365 plans.

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Practice Questions

30 questions from this objective · 29% of your MS-900 exam

Question 2easymultiple choice

Describe security, compliance, privacy, and trust in Microsoft 365

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Key Topics

Where candidates lose marks on Describe security, compliance, privacy, and trust in Microsoft 365

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Practice Questions

A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?

A compliance officer wants to ensure that all data in Microsoft 365 is encrypted using a key that the organization manages and stores in their own Azure Key Vault. Microsoft will not have access to the key. Which solution should they implement?

A company wants to ensure that all administrative actions in Microsoft 365 are logged and that any changes to roles and permissions are reviewed on a monthly basis. Which Microsoft Purview solution should the compliance team use?

A tenant administrator is advising a department that wants to investigate incidents across identities, email, endpoints, and cloud apps in one experience. Microsoft security, identity, or compliance capability should it use?

A company wants to ensure that sensitive documents stored in SharePoint Online are automatically classified and protected if they contain credit card numbers or social security numbers. Which Microsoft Purview feature should they implement?

An organization wants to retain mailbox content for legal investigation. Which two statements are accurate about the Microsoft 365 capability involved?

An organization wants to investigate emails that may be part of a phishing campaign. Which two statements are accurate about the Microsoft 365 capability involved?

Your organization is deploying Microsoft 365 and needs to ensure that data stored in SharePoint Online and OneDrive for Business is protected against accidental deletion by end users. The compliance team requires that deleted files be recoverable for at least 90 days. What should you implement?

Exhibit

Exhibit

Which TWO of the following are requirements for implementing Microsoft Purview Customer Key? (Choose two.)

Refer to the exhibit. A security analyst runs this KQL query in Microsoft Sentinel to investigate a user's deleted files. The query returns no results even though the user has deleted files. Which of the following is the most likely reason?

Exhibit

Your organization is required to retain all communications related to a legal case for 5 years. Emails and Teams messages must be preserved immutably. Which Microsoft 365 feature should you use?

An organization uses Microsoft 365 Copilot for Microsoft 365. The security team wants to ensure that Copilot responses are based only on data that users already have permission to access. Which principle does this enforce?

Which THREE of the following are included in Microsoft 365 E5 compliance features?

A multinational company uses Microsoft 365 E5 and needs to meet data residency requirements in the EU and Asia. They plan to use Microsoft Purview Data Loss Prevention (DLP) to prevent sensitive data from leaving approved geographic boundaries. Which action should they take to enforce this policy?

Which TWO actions should you take to protect against ransomware attacks in Microsoft 365?

Your organization has a Microsoft 365 E5 subscription and wants to use Microsoft Purview to identify and protect sensitive data. Which feature should you use to automatically discover sensitive data across Exchange Online, SharePoint Online, and OneDrive?

Refer to the exhibit. The exhibit shows an auto-labeling policy configuration. What will happen when a document labeled 'EU PII' is shared externally via SharePoint?

Exhibit

Refer to the exhibit. The exhibit shows an anti-phishing policy in Microsoft Defender for Office 365. Which users receive the highest level of protection?

Exhibit

Which THREE statements about the Microsoft Service Trust Portal are true?

All MS-900 Objectives

Describe security, compliance, privacy, and trust in Microsoft 365

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Key Topics

Where candidates lose marks on Describe security, compliance, privacy, and trust in Microsoft 365

MS-900 Describe security, compliance, privacy, and trust in Microsoft 365 — Practice Questions

A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?

A compliance officer wants to ensure that all data in Microsoft 365 is encrypted using a key that the organization manages and stores in their own Azure Key Vault. Microsoft will not have access to the key. Which solution should they implement?

A company wants to ensure that all administrative actions in Microsoft 365 are logged and that any changes to roles and permissions are reviewed on a monthly basis. Which Microsoft Purview solution should the compliance team use?

A tenant administrator is advising a department that wants to investigate incidents across identities, email, endpoints, and cloud apps in one experience. Microsoft security, identity, or compliance capability should it use?

A company wants to ensure that sensitive documents stored in SharePoint Online are automatically classified and protected if they contain credit card numbers or social security numbers. Which Microsoft Purview feature should they implement?

An organization wants to retain mailbox content for legal investigation. Which two statements are accurate about the Microsoft 365 capability involved?

An organization wants to investigate emails that may be part of a phishing campaign. Which two statements are accurate about the Microsoft 365 capability involved?

Your organization is deploying Microsoft 365 and needs to ensure that data stored in SharePoint Online and OneDrive for Business is protected against accidental deletion by end users. The compliance team requires that deleted files be recoverable for at least 90 days. What should you implement?

Exhibit

Exhibit

Which TWO of the following are requirements for implementing Microsoft Purview Customer Key? (Choose two.)

Refer to the exhibit. A security analyst runs this KQL query in Microsoft Sentinel to investigate a user's deleted files. The query returns no results even though the user has deleted files. Which of the following is the most likely reason?

Exhibit

Your organization is required to retain all communications related to a legal case for 5 years. Emails and Teams messages must be preserved immutably. Which Microsoft 365 feature should you use?

An organization uses Microsoft 365 Copilot for Microsoft 365. The security team wants to ensure that Copilot responses are based only on data that users already have permission to access. Which principle does this enforce?

Which THREE of the following are included in Microsoft 365 E5 compliance features?

A multinational company uses Microsoft 365 E5 and needs to meet data residency requirements in the EU and Asia. They plan to use Microsoft Purview Data Loss Prevention (DLP) to prevent sensitive data from leaving approved geographic boundaries. Which action should they take to enforce this policy?

Which TWO actions should you take to protect against ransomware attacks in Microsoft 365?

Your organization has a Microsoft 365 E5 subscription and wants to use Microsoft Purview to identify and protect sensitive data. Which feature should you use to automatically discover sensitive data across Exchange Online, SharePoint Online, and OneDrive?

Refer to the exhibit. The exhibit shows an auto-labeling policy configuration. What will happen when a document labeled 'EU PII' is shared externally via SharePoint?

Exhibit

Refer to the exhibit. The exhibit shows an anti-phishing policy in Microsoft Defender for Office 365. Which users receive the highest level of protection?

Exhibit

Which THREE statements about the Microsoft Service Trust Portal are true?

All MS-900 Objectives