MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A compliance administrator needs to block sharing of documents containing credit card numbers. Which Microsoft 365 capability is the best fit?
⚠ Common exam trap
Many exam-takers confuse the OneDrive sync client with the OneDrive cloud service, thinking the sync client can enforce DLP policies locally, when in fact DLP policies are applied at the cloud service layer and the sync client simply replicates cloud-side restrictions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention policies
Data Loss Prevention (DLP) policies in Microsoft 365 are specifically designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. By configuring a DLP policy with a built-in sensitive info type for credit card numbers, the administrator can block users from sharing documents containing that data, either by preventing the action or triggering a notification. This directly addresses the compliance requirement to block sharing of documents with credit card numbers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Data Loss Prevention policies
Why this is correct
Data Loss Prevention policies inspect content for sensitive information types such as credit card numbers and block or restrict sharing when detected. This directly satisfies the requirement to prevent documents containing card numbers from being shared, unlike retention or sensitivity labelling alone.
- ✗
Microsoft Teams live events
Why it's wrong here
Teams live events broadcast video to large audiences and apply no content inspection to files, so they cannot detect credit card numbers in documents. Live events would be correct for town-hall streaming, whereas data-loss prevention policies in Microsoft Purview are what scan and block sensitive content.
- ✗
Microsoft Bookings
Why it's wrong here
Microsoft Bookings schedules appointments and manages calendars; it inspects no document content and enforces no sharing restriction. It is tempting as a familiar Microsoft 365 service, and would be right for customer appointment scheduling, but blocking credit-card-number sharing requires data loss prevention policies in Microsoft Purview.
- ✗
OneDrive sync client
Why it's wrong here
OneDrive sync client only replicates files between endpoints and the cloud; it cannot inspect document contents, so credit card numbers pass through untouched. It is tempting because sync clients do control where files land, but that is file placement, not data classification. Purview Data Loss Prevention is the capability that scans content and blocks sharing.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Compliance Certifications (ISO, SOC)
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
Key term
Data Loss Prevention
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.