Describe security, compliance, privacy, and trust in Microsoft 365 →mediumMultiple SelectObjective-mapped
MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
An organization wants to investigate emails that may be part of a phishing campaign. Which two statements are accurate about the Microsoft 365 capability involved?
⚠ Common exam trap
Watch out — candidates often confuse Threat Explorer with a general security solution that replaces IAM, or assume it requires public document access, when in fact it is a specialized email threat investigation tool that operates within the existing security boundaries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Threat Explorer in Microsoft Defender for Office 365
Threat Explorer in Microsoft Defender for Office 365 is a powerful tool for investigating phishing campaigns. It allows security analysts to view and filter email threat data, including malware, phishing, and spam, in near real-time. This enables the organization to identify, analyze, and remediate malicious emails that are part of a phishing campaign, making option A correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Threat Explorer in Microsoft Defender for Office 365
Why this is correct
Threat Explorer supports investigation of email threats, campaigns, and delivery actions.
- ✗
It replaces the need for identity and access management
Why it's wrong here
Compliance controls complement identity controls rather than replacing them.
- ✗
It requires every document to be made public
Why it's wrong here
Security and compliance controls do not require public access.
- ✓
The policy should be tested with a limited group before broad rollout
Why this is correct
Testing reduces the risk of blocking legitimate work or applying unintended restrictions.
Go deeper
Related to this question
Learn chapter
Benefits of Microsoft Cloud
Key term
Defender for Office 365
Microsoft Defender for Office 365 is a cloud-based email security service that protects organizations against advanced threats like phishing, malware, and business email compromise by scanning emails, attachments, and links in real time.
Key term
Microsoft Defender for Office 365
Microsoft Defender for Office 365 is a cloud-based email and collaboration security service that protects organizations against malicious threats like phishing, malware, and spam in email messages and Office 365 apps.
About these practice questions
This MS-900 question is part of Courseiva's 217-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.