MS-900 Describe Microsoft 365 apps and services Practice Question
Your organization uses Microsoft 365 E5 licenses and wants to implement a data loss prevention (DLP) policy that blocks sharing of credit card numbers in email. Which Microsoft 365 admin center should you use to create and manage this DLP policy?
⚠ Common exam trap
Test-takers frequently confuse the Microsoft 365 admin center (general admin tasks) with the Purview compliance portal (compliance-specific tasks), leading them to select the wrong portal for DLP policy management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview compliance portal
The Microsoft Purview compliance portal is the correct admin center for creating and managing Data Loss Prevention (DLP) policies because it provides the unified compliance management interface for data protection, including DLP for Exchange Online email. DLP policies that block sharing of sensitive information like credit card numbers are configured under the 'Data loss prevention' section within the Purview portal, which leverages built-in sensitive information types and rules to enforce actions such as blocking email transmission.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Security Center
Why it's wrong here
Microsoft Security Center, now part of Microsoft Defender for Cloud, is focused on securing cloud infrastructure through threat detection, vulnerability assessment, and security posture management. It does not handle data loss prevention, which is a compliance and information-protection feature, not a threat-detection or remediation capability. DLP policies are therefore not managed within this portal.
- ✗
Microsoft Entra admin center
Why it's wrong here
Microsoft Entra admin center (formerly Azure Active Directory) is the identity and access management plane across Microsoft 365, handling user identities, MFA, conditional access, and app permissions. It does not provide capabilities for scanning content or enforcing data-loss-prevention rules on sensitive data, as DLP policies operate on content flows in services like Exchange and SharePoint. Consequently, it is not the correct place for DLP administration.
- ✓
Microsoft Purview compliance portal
Why this is correct
The Microsoft Purview compliance portal is the centralized hub for managing compliance and information-protection solutions, including Data Loss Prevention (DLP). In this portal, you can create and manage DLP policies that identify, monitor, and automatically protect sensitive data across Exchange, SharePoint, OneDrive, Teams, and endpoints. It provides unified policy management, integration with sensitivity labels, and detailed activity reports, making it the correct location for this task.
- ✗
Microsoft 365 admin center
Why it's wrong here
The Microsoft 365 admin center is designed for general tenant administration, such as assigning licenses, managing users, monitoring service health, and configuring organization-level settings. It does not host the policy engines needed for DLP, which require the compliance-specific interfaces and information-protection controls that live in Purview. Therefore, DLP policy creation and management are out of scope for this portal.
Go deeper
Related to this question
Learn chapter
Azure Information Protection (AIP) Labels
Key term
Exchange Online
Exchange Online is Microsoft's cloud-based email, calendar, and contact hosting service that is part of the Microsoft 365 suite, allowing organizations to manage corporate messaging without maintaining their own mail servers.
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.