MS-900 · topic practice

Describe security, compliance, privacy, and trust in Microsoft 365 practice questions

Q: How should I use these Describe security, compliance, privacy, and trust in Microsoft 365 practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Q: Can I practise just Describe security, compliance, privacy, and trust in Microsoft 365 questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Describe security, compliance, privacy, and trust in Microsoft 365 domain.

Use this page to practise Describe security, compliance, privacy, and trust in Microsoft 365 questions for this certification. Focus on how the exam tests describe security, compliance, privacy, and trust in microsoft 365 in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Describe security, compliance, privacy, and trust in Microsoft 365

Practice 10 questions Browse domain →

What the exam tests

What to know about Describe security, compliance, privacy, and trust in Microsoft 365

Describe security, compliance, privacy, and trust in Microsoft 365 questions on this certification test your ability to deploy and manage describe security, compliance, privacy, and trust in microsoft 365 concepts in scenario-based situations.

Core Describe security, compliance, privacy, and trust in Microsoft 365 concepts and how they apply in real-world cloud scenarios.

How to deploy describe security, compliance, privacy, and trust in microsoft 365 correctly and verify the outcome.

Troubleshooting describe security, compliance, privacy, and trust in microsoft 365 issues by interpreting error output and system state.

Cloud best practices and Describe security, compliance, privacy, and trust in Microsoft 365 design trade-offs tested by this certification.

Watch out for

Common Describe security, compliance, privacy, and trust in Microsoft 365 exam traps

▸Selecting the most expensive service when a simpler managed option meets the requirement.
▸Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
▸Choosing a global service fix when the issue is region-specific.
▸Overlooking cost implications of cross-region data transfer in architecture questions.

Practice set

Describe security, compliance, privacy, and trust in Microsoft 365 questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice

Read the full Describe security, compliance, privacy, and trust in Microsoft 365 explanation →

An organization is concerned about data leakage from sensitive emails. They want to enforce encryption on emails containing financial information automatically. Which Microsoft 365 solution should they configure?

Trap 1: Data Loss Prevention (DLP) policies

DLP prevents unauthorized sharing but does not automatically encrypt emails; it can integrate with encryption.

Trap 2: Microsoft Purview Information Protection (Microsoft Purview…

Microsoft Purview Information Protection classifies and labels documents and emails, but encryption is a separate action triggered by Microsoft Purview Information Protection policies.

Trap 3: Exchange Online Protection (EOP)

EOP provides anti-malware and anti-spam, not encryption.

Study all Describe security, compliance, privacy, and trust in Microsoft 365 common traps →

A
Data Loss Prevention (DLP) policies
Why wrong: DLP prevents unauthorized sharing but does not automatically encrypt emails; it can integrate with encryption.
B
Microsoft Purview Message Encryption
Message Encryption uses rules to encrypt emails based on conditions like sensitive content.
C
Microsoft Purview Information Protection (Microsoft Purview Information Protection)
Why wrong: Microsoft Purview Information Protection classifies and labels documents and emails, but encryption is a separate action triggered by Microsoft Purview Information Protection policies.
D
Exchange Online Protection (EOP)
Why wrong: EOP provides anti-malware and anti-spam, not encryption.

Describe security, compliance, privacy, and trust in Microsoft 365 practice questions

What to know about Describe security, compliance, privacy, and trust in Microsoft 365

Common Describe security, compliance, privacy, and trust in Microsoft 365 exam traps

Describe security, compliance, privacy, and trust in Microsoft 365 questions

An organization is concerned about data leakage from sensitive emails. They want to enforce encryption on emails containing financial information automatically. Which Microsoft 365 solution should they configure?

A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?

A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?

A healthcare organization stores patient records in SharePoint Online. They need to ensure that the data is encrypted at rest and in transit. Which statement is true regarding Microsoft 365 encryption?

A company uses Microsoft Purview to monitor for potential data security incidents. They want to automatically detect and remediate activities like downloading large amounts of data to a personal device. Which solution should they configure?

A company wants to ensure that only IT administrators can install browser extensions in Microsoft Edge. Which Microsoft 365 security feature should be used?

An administrator needs to monitor and investigate potential data breaches by reviewing detailed records of file access and sharing activities across Microsoft 365. They require a centralized report showing who accessed what, from where, and any unusual patterns. Which tool should they use?

A compliance officer wants to ensure that all data in Microsoft 365 is encrypted using a key that the organization manages and stores in their own Azure Key Vault. Microsoft will not have access to the key. Which solution should they implement?

A security administrator needs to ensure that all users accessing Microsoft 365 resources from unmanaged devices are prompted to sign in using multi-factor authentication (MFA) and are blocked from downloading sensitive files. Which conditional access policy should be configured?

A security administrator needs to ensure that all guest users who access Microsoft Teams are required to accept a terms of use agreement before accessing any company resources. Which Microsoft 365 identity protection feature should they configure?

A company wants to ensure that all administrative actions in Microsoft 365 are logged and that any changes to roles and permissions are reviewed on a monthly basis. Which Microsoft Purview solution should the compliance team use?

A company uses Microsoft 365 (a SaaS offering). A security incident occurs where an employee's account is compromised because the employee reused their corporate password on a personal website. According to the shared responsibility model, who is primarily responsible for this security failure?

A security administrator needs to review all sign-in attempts and identify suspicious login patterns for the past 30 days. Which Microsoft 365 portal should they use to access this information?

A legal firm needs to send a confidential document to a client via email. The firm requires that the client cannot forward or print the email and that the email expires after seven days. Which Microsoft Purview solution should they use?

Track your progress over time

Start a Describe security, compliance, privacy, and trust in Microsoft 365 only practice session

Related MS-900 topic practice pages

Describe Microsoft 365 apps and services practice questions

Describe Microsoft 365 pricing, licensing, and support practice questions

Describe cloud concepts practice questions

Describe security, compliance, privacy, and trust in Microsoft 365 practice questions

Describe Microsoft 365 pricing and support practice questions

MS-900 fundamentals practice questions

MS-900 scenario practice questions

MS-900 troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid