MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Which THREE are core pillars of the Microsoft Trust Center?
⚠ Common exam trap
MS-900 often tests whether candidates confuse the three pillars (security, privacy, compliance) with related concepts like transparency or reliability, which are important but not pillars.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Compliance
The Microsoft Trust Center is built on three core pillars: Security, Privacy, and Compliance. Option D (Security) is correct because Microsoft's trust framework centers on protecting customer data through encryption, identity controls, and threat protection across its cloud services. Option E (Privacy) is correct because Microsoft commits to being transparent about data collection and giving customers control over their data through privacy statements and data subject rights. Option A (Compliance) is correct because the Trust Center provides compliance offerings, audit reports, and certifications (such as ISO 27001, SOC, and GDPR resources) that demonstrate adherence to regulatory standards. Option B (Reliability) is not one of the three pillars; while reliability is an important service quality, it is not part of the Trust Center's core trust pillars. Option C (Transparency) is also not one of the three pillars; transparency is a principle Microsoft emphasizes within its privacy and security practices, but it is not listed as a standalone core pillar of the Trust Center.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Compliance
Why this is correct
Compliance is one of the three core pillars of the Microsoft Trust Center, alongside privacy and security. It satisfies the stem's requirement by covering Microsoft's adherence to regulatory standards, certifications and audit reports, giving organisations verifiable assurance that services meet legal and industry obligations.
- ✗
Reliability
Why it's wrong here
Reliability describes service uptime commitments, not a Trust Center pillar; the pillars are security, privacy and compliance. It is tempting because reliability appears throughout Microsoft documentation, but it belongs to the Service Trust Portal's operational assurances rather than the trust framework itself.
- ✗
Transparency
Why it's wrong here
Transparency is a genuine Microsoft principle, but the Trust Center's core pillars are security, privacy and compliance. It is tempting because transparency underpins trust messaging, yet the exam expects the three named pillars rather than supporting principles.
- ✓
Security
Why this is correct
Security is a core pillar of the Microsoft Trust Center, satisfying the requirement to identify its foundational principles. The Trust Center organises its guidance around security, privacy and compliance, so security qualifies directly. It covers how Microsoft protects data and infrastructure, including encryption, threat detection and access controls across Microsoft Entra ID and cloud services.
- ✓
Privacy
Why this is correct
Privacy is a core pillar of the Microsoft Trust Center, satisfying the requirement to identify its foundational commitments. It covers how Microsoft handles customer data, including transparency, data subject rights and compliance with regulations such as GDPR, alongside security, compliance and reliability.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.