MS-900 Microsoft 365 Fundamentals Compliance and Trust Principles 5

Question 1

What is the primary purpose of Microsoft's 'Privacy by Design' approach in Microsoft 365?

Accepted Answer

To build privacy protections into products and services from the ground up, not as an afterthought

Answer

Privacy by Design means privacy and data protection are embedded into the design of Microsoft's systems and services from the earliest stages of development.

Question 2

Which Microsoft 365 compliance feature allows you to automatically delete content after a specified period?

Accepted Answer

Retention Policies

Answer

Retention Policies in Microsoft Purview can be configured to either retain content for a minimum period, delete it after a maximum period, or both.

Question 3

What is the Microsoft 365 'Insider Risk Management' feature designed to detect?

Accepted Answer

Potentially risky activities by internal users such as data theft or policy violations

Answer

Insider Risk Management uses machine learning to identify potentially risky or malicious behavior by employees or contractors within the organization.

Question 4

Which standard does Microsoft 365 use to ensure that its cloud infrastructure meets rigorous security requirements for healthcare organizations in the US?

Accepted Answer

HIPAA/HITECH

Answer

HIPAA/HITECH establishes requirements for protecting electronic protected health information (ePHI), and Microsoft signs Business Associate Agreements to support HIPAA compliance.

Question 5

What does Microsoft's 'Lockbox' feature (Customer Lockbox) provide to organizations?

Accepted Answer

Approval control over Microsoft support engineers accessing customer content during service requests

Answer

Customer Lockbox requires organizations to explicitly approve before Microsoft support personnel can access their content during a support request.

MS-900 Practice Test

MS-900 Practice Test

MS-900 Microsoft 365 Fundamentals Compliance and Trust Principles 5