MS-900 Describe Microsoft 365 apps and services Practice Question
A hospital uses Microsoft 365 and wants to enable secure messaging between doctors and nurses that supports compliance with health data regulations. Which Microsoft 365 service provides encrypted, compliant messaging?
⚠ Common exam trap
Many candidates confuse Microsoft Teams with Yammer as both are communication tools, but Yammer lacks the compliance and encryption features required for regulated health data messaging.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Teams
Microsoft Teams supports encrypted messaging and compliance with health data regulations like HIPAA through features such as data encryption at rest and in transit, Data Loss Prevention (DLP) policies, and eDiscovery. It provides secure communication channels for healthcare professionals while meeting regulatory requirements for protected health information (PHI).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Yammer
Why it's wrong here
Yammer is an enterprise social network designed to foster open communication among large groups, rather than secure, closed-loop messaging. Although it uses encryption in transit and at rest, it does not provide end-to-end encryption for conversations and lacks the granular compliance controls (like retention policies applied to specific chat threads) that healthcare communication for patient data demands. Its content is stored in Azure SQL and is discoverable via eDiscovery, but it is not a substitute for a purpose-built secure messaging tool like Teams.
- ✓
Microsoft Teams
Why this is correct
Microsoft Teams is the correct choice because it provides secure, persistent chat in both one-on-one and channel contexts, with all messages encrypted in transit (TLS) and at rest (AES-256). Its conversation history is stored in Exchange Online mailboxes and SharePoint, enabling compliance features like retention, legal hold, eDiscovery, and communication compliance through Microsoft Purview. For healthcare scenarios, Teams can be configured with DLP policies and sensitivity labels to help meet HIPAA requirements, making it a robust secure messaging solution that Yammer, Viva, and Bookings cannot match.
- ✗
Microsoft Viva
Why it's wrong here
Microsoft Viva is an employee experience platform that consolidates insights, learning, wellbeing, and company communications into a single dashboard, but it is not a messaging or chat product. It does not provide a channel for peer-to-peer or group conversations, nor does it have its own message storage, encryption, or compliance features for secure messaging. Viva Connections may display news and resources but cannot send protected health information securely between staff, so it is inappropriate for this requirement.
- ✗
Microsoft Bookings
Why it's wrong here
Microsoft Bookings is a scheduling and appointment management application that allows clients to reserve time with staff and integrates with Teams meetings, but it has no built-in messaging capability for ongoing secure conversations. It stores customer and booking data in Exchange Online, yet it is not designed to transmit private chat messages between hospital employees. Using Bookings for secure messaging would be a clear mismatch because its core functionality is calendar availability, reminders, and appointments, not exchange of confidential information.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Frontline Worker Features
Key term
Microsoft Teams
Microsoft Teams is a collaboration platform that integrates chat, video meetings, file storage, and application integration into a single workspace, primarily used within the Microsoft 365 ecosystem.
Key term
Data Loss Prevention
Data Loss Prevention (DLP) is a set of tools and processes that help organizations stop sensitive information from being shared, leaked, or stolen, whether accidentally or on purpose.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.