Courseiva

MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365

An organization wants to investigate emails that may be part of a phishing campaign. Which two statements are accurate about the Microsoft 365 capability involved?

⚠ Common exam trap

Watch out — candidates often confuse Threat Explorer with a general security solution that replaces IAM, or assume it requires public document access, when in fact it is a specialized email threat investigation tool that operates within the existing security boundaries.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Threat Explorer in Microsoft Defender for Office 365

Threat Explorer in Microsoft Defender for Office 365 is a powerful tool for investigating phishing campaigns. It allows security analysts to view and filter email threat data, including malware, phishing, and spam, in near real-time. This enables the organization to identify, analyze, and remediate malicious emails that are part of a phishing campaign, making option A correct.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Threat Explorer in Microsoft Defender for Office 365

    Why this is correct

    Threat Explorer supports investigation of email threats, campaigns, and delivery actions.

  • It replaces the need for identity and access management

    Why it's wrong here

    Compliance controls complement identity controls rather than replacing them.

  • It requires every document to be made public

    Why it's wrong here

    Security and compliance controls do not require public access.

  • The policy should be tested with a limited group before broad rollout

    Why this is correct

    Testing reduces the risk of blocking legitimate work or applying unintended restrictions.

Go deeper

Related to this question

About these practice questions

This MS-900 question is part of Courseiva's 217-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.