MS-900 Microsoft 365 Fundamentals Compliance and Trust Principles 2 — Questions and Answers
Question 1: Which Microsoft 365 feature allows organizations to place a legal hold on mailboxes to preserve email content for litigation purposes?
- Litigation Hold (Correct answer)
- Retention Policy
- Archive Mailbox
- eDiscovery Case
Correct answer: Litigation Hold
Litigation Hold preserves all mailbox content indefinitely so it cannot be deleted, even by the user, to satisfy legal requirements.
Question 2: What is the purpose of the Microsoft Compliance Manager tool?
- To block phishing emails automatically
- To assess compliance posture and provide remediation guidance (Correct answer)
- To encrypt all outbound emails
- To manage user licenses
Correct answer: To assess compliance posture and provide remediation guidance
Compliance Manager provides a compliance score and step-by-step guidance to help organizations meet regulatory requirements.
Question 3: Which regulation requires organizations to notify authorities within 72 hours of discovering a personal data breach?
- HIPAA
- SOC 2
- GDPR (Correct answer)
- FedRAMP
Correct answer: GDPR
GDPR mandates that data breaches affecting EU residents must be reported to supervisory authorities within 72 hours of discovery.
Question 4: What does the term 'data residency' mean in the context of Microsoft 365?
- The process of encrypting data at rest
- The geographic location where customer data is stored (Correct answer)
- The backup frequency for tenant data
- The retention period for deleted items
Correct answer: The geographic location where customer data is stored
Data residency refers to specifying and controlling the geographic region where Microsoft stores your organization's data at rest.
Question 5: Which Microsoft 365 compliance feature automatically classifies and labels sensitive documents based on their content?
- Azure AD Conditional Access
- Sensitivity Labels (Correct answer)
- Safe Attachments
- Compliance Score
Correct answer: Sensitivity Labels
Sensitivity Labels in Microsoft Purview can be applied automatically or manually to classify documents and apply protection policies.
Question 6: What is the primary function of Microsoft Purview Audit (formerly Office 365 Audit Log)?
- Blocking spam messages
- Recording user and admin activities across Microsoft 365 services (Correct answer)
- Encrypting sensitive emails
- Managing device compliance policies
Correct answer: Recording user and admin activities across Microsoft 365 services
Microsoft Purview Audit captures a detailed log of user and administrator activities across Microsoft 365 services for forensic and compliance investigations.
Question 7: In Microsoft 365, what does 'zero-trust security' primarily assume about network traffic?
- All internal traffic is safe by default
- No user or device should be trusted by default, even inside the network (Correct answer)
- Only external traffic requires verification
- Encrypted traffic is always trustworthy
Correct answer: No user or device should be trusted by default, even inside the network
Zero-trust security operates on the principle of 'never trust, always verify,' requiring authentication and authorization for every request regardless of source.
MS-900 Microsoft 365 Fundamentals Compliance and Trust Principles 2
Which Microsoft 365 feature allows organizations to place a legal hold on mailboxes to preserve email content for litigation purposes?