MS-900 Describe cloud concepts Practice Question
During a Microsoft 365 planning workshop, understand which security tasks Microsoft handles and which remain with the customer. Cloud concept or benefit best matches this requirement?
⚠ Common exam trap
A common mix-up: candidates confuse specific security features (like DLP or sensitivity labels) with the overarching shared responsibility model, which is the foundational cloud concept that defines who owns each security task.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Shared responsibility model
The shared responsibility model defines which security tasks are managed by Microsoft (e.g., physical security, hypervisor patching) and which remain with the customer (e.g., user access, data classification). This directly matches the requirement to understand task ownership during a planning workshop. Options like Microsoft Planner, DLP, and sensitivity labels are specific features, not the overarching cloud concept that clarifies responsibility boundaries.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a task and project management application within Microsoft 365 that enables teams to create plans, assign tasks, set due dates, and track progress on Kanban-style boards. It is a productivity and collaboration tool, entirely unrelated to the architectural principle that governs security and compliance duties in cloud computing. As a result, it cannot be the correct answer to a question about the fundamental cloud responsibility framework.
- ✗
Data Loss Prevention (DLP)
Why it's wrong here
Data Loss Prevention (DLP) is a security feature that uses policies to identify, monitor, and automatically block the unauthorized sharing of sensitive information such as credit card numbers or Social Security numbers. It works by applying content analysis and rules to data in transit and at rest, but it does not describe the division of security and compliance duties between a cloud provider and a customer. Therefore, DLP is an operational control within a cloud deployment, not the cloud concept being discussed.
- ✗
Sensitivity labels
Why it's wrong here
Sensitivity labels are metadata-based tags assigned to documents and emails to define classification levels such as Confidential or Highly Confidential. They enforce protection actions like encryption, visual watermarks, and access restrictions, but they are part of a customer's data-classification strategy, not a framework for understanding responsibilities. Thus, they address how to protect content, not the shared responsibility division.
- ✓
Shared responsibility model
Why this is correct
The shared responsibility model is the foundational cloud computing principle that describes how the service provider is responsible for the security of the cloud, while the customer is responsible for security in the cloud. For Microsoft 365 as a SaaS offering, Microsoft handles infrastructure, platform, and most application security, but the customer remains accountable for identity management, user access, data classification, and compliance decisions. This model directly delineates the division of duties that organizations must understand when planning a Microsoft 365 deployment, making it the correct answer.
Go deeper
Related to this question
Learn chapter
Zero Trust Security Principles in Microsoft 365
Key term
Planner
Planner is a Microsoft 365 tool for teams to create, assign, track, and manage tasks visually using boards and charts.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.