Microsoft 365 Fundamentals Microsoft 365 Security Solutions Flashcards
7 cards from real MS-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Fundamentals Microsoft 365 Security Solutions flashcards as text
Which Microsoft 365 feature uses machine learning to detect unusual sign-in patterns and automatically block suspicious access attempts?
Answer: Azure AD Identity Protection
Azure AD Identity Protection uses machine learning to detect risky sign-ins and can automatically block or require MFA for suspicious access.
A company wants to prevent users from forwarding sensitive emails outside the organization. Which Microsoft 365 security feature should they use?
Answer: Information Rights Management (IRM)
Information Rights Management (IRM) allows organizations to restrict email actions like forwarding, copying, or printing sensitive messages.
What does Microsoft Secure Score measure in a Microsoft 365 environment?
Answer: The organization's security posture based on implemented security controls
Microsoft Secure Score measures an organization's security posture by assigning points for implemented security controls and configurations.
Which type of attack does Microsoft Defender for Office 365 Safe Links protect against?
Answer: Malicious URLs embedded in emails and documents
Safe Links rewrites and checks URLs at the time of click to protect users from malicious links in emails and Office documents.
An administrator needs to enforce that all mobile devices accessing company email meet minimum security requirements. Which Microsoft 365 solution provides this capability?
Answer: Microsoft Intune
Microsoft Intune provides mobile device management (MDM) and mobile application management (MAM) to enforce compliance policies on devices.
What is the primary purpose of Conditional Access policies in Microsoft 365?
Answer: To grant or block access based on signals like user location, device health, and risk level
Conditional Access policies evaluate signals such as user identity, location, device compliance, and risk level to make real-time access decisions.
Which Microsoft 365 security feature provides a simulated phishing attack capability so administrators can train employees?
Answer: Attack Simulation Training in Microsoft Defender for Office 365
Attack Simulation Training lets administrators send simulated phishing emails to employees to measure susceptibility and deliver targeted security training.