MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
Which THREE of the following are security features included in Microsoft 365 Business Premium? (Choose three.)
⚠ Common exam trap
Test-takers frequently assume all Microsoft security products with 'Defender' or 'Security' in the name are bundled in Business Premium, but Microsoft Sentinel and Microsoft Defender for Cloud Apps require higher-tier licenses (E5 or standalone) and are not part of the Business Premium suite.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID Plan 1
Microsoft Entra ID Plan 1 is included in Microsoft 365 Business Premium. It provides identity and access management capabilities such as single sign-on (SSO), multi-factor authentication (MFA), and conditional access policies. These features help secure user identities and control access to cloud resources, which is a core security requirement for business environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID Plan 1
Why this is correct
Microsoft Entra ID Plan 1 provides identity and access management with features such as single sign-on, multi-factor authentication, conditional access, and self-service password reset. This license is a core component of Microsoft 365 Business Premium and is essential for enforcing identity-driven security policies. It is therefore correctly listed as an included security feature.
- ✗
Microsoft Sentinel
Why it's wrong here
Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution that is sold as a separate, premium service. It is not bundled with Microsoft 365 Business Premium, which instead relies on integrated Defender for Business and Purview tools for security and compliance. Since Sentinel requires its own licensing and deployment, it is not an included feature.
- ✓
Microsoft Purview Data Loss Prevention
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) is included in Microsoft 365 Business Premium and helps detect, monitor, and block sensitive information from being shared across Exchange, SharePoint, OneDrive, and Teams. It uses built-in policy templates for regulatory data such as PII and credit card numbers, and can enforce actions like blocking access or sending alerts. This core compliance and security capability is a correct answer.
- ✓
Microsoft Defender for Business
Why this is correct
Microsoft Defender for Business is the endpoint security solution included in Microsoft 365 Business Premium, offering next-generation antivirus, firewall, and endpoint detection and response (EDR). It is designed for small and medium organizations with simplified deployment and management, and it protects Windows, iOS, Android, and macOS devices. This makes it a legitimate security feature in the subscription.
- ✗
Microsoft Defender for Cloud Apps
Why it's wrong here
Microsoft Defender for Cloud Apps provides full cloud access security broker (CASB) capabilities, including cloud app discovery, session controls, and advanced app governance, which are not fully included in Microsoft 365 Business Premium. Only limited conditional access or auditing functions may be available via other included services, but the full Defender for Cloud Apps product requires a separate license. Therefore, it is incorrectly listed as an included feature.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Governance Policies and Controls
Key term
SSO
Single Sign-On (SSO) is an authentication process that allows a user to access multiple applications or systems with one set of login credentials.
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.