MS-100 Research & Evidence-Based Practice 4

Question 1

A compliance officer asks for evidence that Microsoft 365 data is stored only in US datacenters for their tenant. Which tool provides this data residency evidence?

Accepted Answer

The 'Data location' section in the Microsoft 365 admin center under Settings > Org settings

Answer

The Microsoft 365 admin center Settings > Org settings > Data location section displays the actual datacenter regions where each service's data is stored.

Question 2

When researching whether Microsoft has received government requests for your tenant's data in the past year, where is this information published?

Accepted Answer

Microsoft's Law Enforcement Requests Report published on the Microsoft Trust Center

Answer

Microsoft publishes an annual Law Enforcement Requests Report on the Trust Center disclosing the volume and types of government data requests received.

Question 3

An admin needs evidence on the exact retention period for Microsoft's deletion of customer data after a Microsoft 365 subscription expires. Which document is authoritative?

Accepted Answer

Microsoft Online Services Terms (OST) or Data Protection Addendum (DPA)

Answer

The Microsoft Online Services Terms (OST) and Data Protection Addendum (DPA) contractually specify that Microsoft retains data for 90 days after subscription termination before deletion.

Question 4

A team is researching whether enabling Microsoft 365 Customer Lockbox is available on their current plan. What is the most evidence-based way to verify plan eligibility?

Accepted Answer

Check the Microsoft 365 licensing documentation and compare against their current subscription in the admin center

Answer

Comparing official licensing documentation against the tenant's actual subscription in the admin center is the most reliable evidence-based method for verifying feature eligibility.

Question 5

When evaluating Azure AD Identity Protection risk detections in your tenant, which report provides real evidence of compromised credentials being used?

Accepted Answer

Risky sign-ins report in Azure AD Identity Protection

Answer

The Risky sign-ins report in Azure AD Identity Protection surfaces sign-in attempts flagged by Microsoft's threat intelligence as potentially compromised.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Research & Evidence-Based Practice 4