MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
While preparing a Microsoft 365 adoption plan, a consultant is asked to protect corporate data inside mobile apps without enrolling the whole personal device. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
It's easy for candidates to confuse Mobile Device Management (MDM)—which requires full device enrollment—with Mobile Application Management (MAM), which protects data at the app level without enrolling the device, and they may incorrectly select a non-security tool like Planner or Forms because they see 'mobile' or 'app' in the question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
App protection policies / Mobile Application Management (MAM)
App protection policies (APP), also known as Mobile Application Management (MAM), allow administrators to protect corporate data within mobile apps—such as enforcing encryption, preventing copy/paste, or requiring PIN—without enrolling the entire personal device into management. This is the correct capability because it separates data-level controls from device-level management, meeting the requirement to protect corporate data without full device enrollment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a task management tool for organizing work into boards and buckets, assigning tasks, and tracking due dates. It does not provide security or compliance controls such as conditional access, data loss prevention, or app-level protection, and it cannot enforce policies on managed or unmanaged devices. Therefore, Planner is not a valid solution for the stated security/compliance requirement.
- ✓
App protection policies / Mobile Application Management (MAM)
Why this is correct
App protection policies (APP) under Mobile Application Management (MAM) are the correct solution because they apply security controls directly to supported Microsoft 365 mobile apps, like Outlook and Teams, without requiring full device enrollment (MDM). These policies can enforce PIN, encryption, copy/paste restrictions, and prevent data leakage to unmanaged apps, aligning with the need to protect corporate data on personal devices. This approach satisfies the requirement by putting the data protection boundary around the app itself, rather than the device.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is designed to create surveys, quizzes, and polls, collecting user responses in an online form. It does not offer mobile application management, data loss prevention, or conditional access policy enforcement for Office 365 apps. The security features available, such as anti-phishing settings, are unrelated to the app-level data protection required by this scenario.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is a video hosting and sharing service within Microsoft 365, focused on uploading, storing, and playing video content across an organization. It does not provide mobile application management or app-level security policies such as PIN or managed app restrictions. Its built-in governance and access controls apply to the video library itself, not to managing or protecting corporate data on mobile apps, making it irrelevant to this adoption plan requirement.
Go deeper
Related to this question
Learn chapter
Records Management in Microsoft 365
Key term
App protection policy
An app protection policy is a set of rules that controls how data is handled and secured within mobile applications, ensuring corporate information stays safe even on personal devices.
Key term
Mobile application management
Mobile application management (MAM) is the practice of controlling and securing corporate apps and their data on employee-owned or company-provided mobile devices without managing the entire device.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.