MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
During requirements gathering, an IT manager says the organization must discover where sensitive information is stored across Microsoft 365. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
A common mix-up: candidates confuse productivity tools (Planner, Stream, Forms) with compliance capabilities, assuming any Microsoft 365 app can discover sensitive data, when only Purview features like Data classification and Content explorer are designed for this purpose.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data classification / Content explorer
Data classification and Content explorer in Microsoft 365 Purview allow organizations to discover, classify, and monitor sensitive information across Exchange, SharePoint, OneDrive, and Teams. This capability uses trainable classifiers and sensitive information types to identify data like credit card numbers or PII, providing a unified view in Content explorer for compliance administrators. It directly meets the requirement to discover where sensitive information is stored.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a task management and teamwork tool used to create plans, assign tasks, and track project progress within Microsoft 365. It is designed for project coordination, not for inspecting or classifying content for sensitive data. Planner cannot scan SharePoint, OneDrive, or Exchange for sensitive information, nor does it provide a Content Explorer view of classified items, so it fails to meet this compliance requirement.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is a video hosting and sharing service in Microsoft 365, enabling employees to upload, stream, and organize video content and live events. Its focus is on media processing and playback, not on data governance or detection of sensitive information across the tenant. Stream lacks the indexing and Content Explorer capabilities needed to identify documents or emails containing sensitive data, so it is not the correct tool for this requirement.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is an app for creating custom surveys, quizzes, and forms with responses collected in an Excel workbook. It facilitates data collection but provides no administrative features to classify, label, or explore existing content across the organization for sensitive information. Forms does not integrate with Content Explorer or support sensitivity labels directly at the item level, so it cannot fulfill the IT manager's requirement.
- ✓
Data classification / Content explorer
Why this is correct
Data classification and Content Explorer are built into Microsoft Purview and give administrators a centralized, filterable view of all items that contain sensitive information, have sensitivity labels, or have retention labels applied. Content Explorer lets you search across Exchange, SharePoint, OneDrive, and Teams to verify that data is properly classified and to pinpoint at-risk content. This directly supports the IT manager's goal of identifying sensitive information during requirements gathering, making it the correct answer.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.