MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A compliance administrator needs to assess compliance posture against standards and improvement actions. Which Microsoft 365 capability is the best fit?
⚠ Common exam trap
Watch out — candidates often confuse general security or productivity tools (like OneDrive or Teams) with compliance-specific capabilities, overlooking that Compliance Manager is the dedicated solution for assessing and improving compliance posture against standards.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Compliance Manager
Microsoft Purview Compliance Manager is the correct choice because it provides a comprehensive dashboard for assessing an organization's compliance posture against standards like ISO 27001, NIST, and GDPR, and it offers actionable improvement actions with step-by-step guidance. It automatically tracks controls, assigns scores, and integrates with Microsoft Secure Score to help administrators prioritize remediation efforts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
OneDrive sync client
Why it's wrong here
The OneDrive sync client replicates files between a device and cloud storage; it performs no assessment of compliance posture against standards or improvement actions. It is tempting because it touches documents that compliance covers, but it would be correct only for keeping file copies synchronised across endpoints.
- ✗
Microsoft Teams live events
Why it's wrong here
Microsoft Teams live events broadcast one-to-many video to large audiences; they contain no assessment engine for measuring compliance posture against standards. It is tempting as a Microsoft 365 workload, but it would be correct only for streaming a town hall or webinar, not for compliance evaluation.
- ✓
Microsoft Purview Compliance Manager
Why this is correct
Microsoft Purview Compliance Manager provides a compliance score, tracks improvement actions, and maps controls to standards such as ISO 27001 and GDPR. This directly satisfies the administrator's need to assess posture against standards and prioritise remediation, unlike tools offering only alerts or configuration drift.
- ✗
Microsoft Bookings
Why it's wrong here
Microsoft Bookings schedules appointments and manages customer calendars; it holds no compliance assessment engine, so it cannot evaluate posture against standards or surface improvement actions. It is tempting because it is a Microsoft 365 service, but it would be correct only for booking-based service scheduling, not compliance scoring.
Go deeper
Related to this question
Learn chapter
Communication Compliance in Microsoft 365
Key term
Secure Score
Secure Score is a measurement tool in Microsoft 365 that shows how secure your organization is based on the security features you have enabled and configured.
Key term
Compliance Manager
A Compliance Manager is a tool or service that helps organizations assess, monitor, and improve their adherence to regulatory standards, industry frameworks, and internal policies.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.