MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  OneDrive sync client

  Why it's wrong here

  The OneDrive sync client is a file-synchronization desktop component that replicates cloud files to local devices and pushes local edits to SharePoint or OneDrive for Business. While your organization's security policies for DLP or encryption may apply to synchronized files, the sync client itself performs no compliance assessments, generates no control mappings, and cannot evaluate whether your environment meets regulatory or organizational compliance obligations. Thus it is not the tool a compliance administrator would use to assess compliance posture.

• ✗

  Microsoft Teams live events

  Why it's wrong here

  Microsoft Teams live events is a broadcast feature designed for delivering real-time video and presentations to large audiences. It provides event-specific settings for recording, transcriptions, captions, and attendee permissions, but these are functional communication controls, not compliance assessment capabilities. Live events do not generate compliance scores, track improvement actions against regulatory requirements, or map your organization's posture to accepted standards, so it cannot serve as the compliance administration tool in this scenario.

• ✓

  Microsoft Purview Compliance Manager

  Why this is correct

  Microsoft Purview Compliance Manager is the intended Microsoft 365 solution for assessing compliance posture. It provides data-driven risk assessments across the tenant, uses a compliance score to illustrate overall standing, and maps evaluated controls to industry standards and regulations such as ISO 27001, NIST, GDPR, and Microsoft's data protection baseline. Compliance Manager also generates prioritized improvement actions, includes automated control testing, and allows you to track implementation of required controls, making it the correct choice for a compliance administrator measuring and managing the organization's compliance posture.

• ✗

  Microsoft Bookings

  Why it's wrong here

  Microsoft Bookings is a scheduling application that lets customers or internal users reserve appointments with staff and manage calendar availability. It is isolated from compliance and security posture features: it does not run risk assessments, map controls, or report on compliance stance against regulatory frameworks. Although an administrator can adjust round-robin and approval settings, Bookings is purely an operational business tool and has nothing to do with evaluating whether the organization complies with laws, policies, or standards.

Go deeper

Related to this question