MS-900 Knowledge 4 — Questions and Answers
Question 1: What is the function of Microsoft 365 Compliance Manager?
- Monitoring network traffic for intrusions
- Helping organizations assess compliance risks and track regulatory improvement actions (Correct answer)
- Automatically patching software vulnerabilities
- Managing software update schedules for Windows devices
Correct answer: Helping organizations assess compliance risks and track regulatory improvement actions
Compliance Manager provides a compliance score and step-by-step guidance to help organizations meet regulatory standards like GDPR and HIPAA.
Question 2: Which type of Microsoft 365 tenant deployment model keeps all data within a specific geographic region?
- Multi-tenant deployment
- Sovereign cloud / national cloud deployment (Correct answer)
- Hybrid deployment
- Federated identity model
Correct answer: Sovereign cloud / national cloud deployment
Sovereign or national cloud deployments (e.g., Microsoft Cloud for US Government) ensure data residency and compliance within specific geopolitical boundaries.
Question 3: What is the primary benefit of using Microsoft 365 Groups compared to traditional distribution lists?
- Microsoft 365 Groups support only email communication
- Microsoft 365 Groups provide a shared workspace including mailbox, calendar, SharePoint, Planner, and Teams (Correct answer)
- Distribution lists can be managed by end users while Groups require admin control
- Microsoft 365 Groups are limited to 10 members
Correct answer: Microsoft 365 Groups provide a shared workspace including mailbox, calendar, SharePoint, Planner, and Teams
Microsoft 365 Groups integrate multiple collaboration tools—email, calendar, files, tasks, and chat—into a single shared workspace unlike simple distribution lists.
Question 4: Which Microsoft 365 feature helps prevent accidental sharing of sensitive information like credit card numbers in emails or Teams messages?
- Microsoft Defender for Office 365
- Data Loss Prevention (DLP) policies (Correct answer)
- Microsoft Information Protection labels
- Safe Attachments scanning
Correct answer: Data Loss Prevention (DLP) policies
DLP policies automatically detect and block or warn users when sensitive information is about to be shared in violation of organizational policies.
Question 5: In Microsoft 365, what does 'tenant' refer to?
- A single user's account within an organization
- A dedicated, isolated instance of Microsoft 365 services for an organization (Correct answer)
- A geographic data center region used by Microsoft
- A type of SharePoint site collection
Correct answer: A dedicated, isolated instance of Microsoft 365 services for an organization
A tenant is a dedicated, isolated cloud instance of Microsoft 365 that represents an organization's entire environment, users, and data.
Question 6: What is the purpose of Sensitivity Labels in Microsoft 365?
- To categorize users by their security clearance level
- To classify and protect documents and emails by applying encryption, watermarks, or access restrictions (Correct answer)
- To flag emails as spam or phishing automatically
- To tag SharePoint pages for search engine optimization
Correct answer: To classify and protect documents and emails by applying encryption, watermarks, or access restrictions
Sensitivity Labels allow organizations to classify content (e.g., Confidential, Public) and automatically apply protection like encryption or visual markings.
Question 7: Which Microsoft 365 service is responsible for centralized identity management and single sign-on (SSO) across cloud applications?
- Microsoft Intune
- Azure Active Directory (Azure AD) (Correct answer)
- Exchange Online
- Microsoft Defender for Cloud Apps
Correct answer: Azure Active Directory (Azure AD)
Azure Active Directory is Microsoft's cloud-based identity and access management service that provides SSO, MFA, and conditional access for Microsoft 365 and third-party apps.
MS-900 Knowledge 4
What is the function of Microsoft 365 Compliance Manager?