MS-900 Microsoft 365 Fundamentals Microsoft 365 Security Solutions 5 — Questions and Answers
Question 1: Which Microsoft 365 tool provides a centralized dashboard where security administrators can view alerts, incidents, and threat intelligence across Microsoft security products?
- Microsoft 365 Admin Center
- Microsoft 365 Defender portal (Correct answer)
- Microsoft Endpoint Manager admin center
- Microsoft Purview Compliance Portal
Correct answer: Microsoft 365 Defender portal
The Microsoft 365 Defender portal (security.microsoft.com) provides a unified view of security alerts, incidents, and threat data across Defender products.
Question 2: A company suspects an insider threat where an employee may be leaking confidential documents. Which Microsoft Purview feature is best suited to detect and investigate this risk?
- Sensitivity labels
- Insider Risk Management (Correct answer)
- Communication Compliance
- Records Management
Correct answer: Insider Risk Management
Microsoft Purview Insider Risk Management uses machine learning to detect risky user behavior patterns such as data exfiltration or policy violations.
Question 3: What is the benefit of enabling Self-Service Password Reset (SSPR) in Microsoft 365?
- It allows users to reset forgotten passwords without requiring IT helpdesk intervention (Correct answer)
- It automatically generates stronger passwords for all user accounts on a monthly schedule
- It prevents users from changing their own passwords, ensuring IT controls credentials
- It synchronizes passwords between on-premises Active Directory and Azure AD in real time
Correct answer: It allows users to reset forgotten passwords without requiring IT helpdesk intervention
SSPR empowers users to reset their own passwords using pre-registered verification methods, reducing helpdesk burden and improving productivity.
Question 4: Which Microsoft 365 licensing plan includes the full suite of Microsoft 365 Defender products for enterprise security?
- Microsoft 365 Business Basic
- Microsoft 365 Business Premium
- Microsoft 365 E5 (Correct answer)
- Microsoft 365 F3
Correct answer: Microsoft 365 E5
Microsoft 365 E5 includes the complete set of Microsoft 365 Defender products including Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, and Defender for Identity.
Question 5: What security benefit does enabling unified audit logging in Microsoft 365 provide?
- It automatically encrypts all files stored in SharePoint and OneDrive
- It records user and administrator activities for forensic investigation and compliance reporting (Correct answer)
- It blocks users from accessing Microsoft 365 from unmanaged devices
- It enforces password complexity requirements across all user accounts
Correct answer: It records user and administrator activities for forensic investigation and compliance reporting
Unified audit logging captures activities across Microsoft 365 services, providing a searchable record for security investigations and regulatory compliance.
Question 6: Which Microsoft 365 feature helps organizations comply with regulations like GDPR by allowing them to search for and export user data in response to data subject requests?
- eDiscovery in Microsoft Purview (Correct answer)
- Azure AD Access Reviews
- Microsoft Defender for Cloud Apps
- Microsoft Endpoint Manager compliance policies
Correct answer: eDiscovery in Microsoft Purview
eDiscovery in Microsoft Purview enables organizations to search, hold, and export content across Microsoft 365 to fulfill regulatory data subject access requests.
Question 7: How does Microsoft 365's 'defense in depth' security strategy benefit organizations?
- It relies on a single, highly advanced security control to block all threats at the perimeter
- It layers multiple security controls so that if one fails, others continue to protect the environment (Correct answer)
- It focuses exclusively on endpoint security to prevent initial compromise
- It delegates all security responsibilities to Microsoft, removing the need for customer-managed policies
Correct answer: It layers multiple security controls so that if one fails, others continue to protect the environment
Defense in depth applies multiple layers of security controls (identity, network, data, endpoint) so a breach of one layer does not compromise the entire environment.
MS-900 Microsoft 365 Fundamentals Microsoft 365 Security Solutions 5
Which Microsoft 365 tool provides a centralized dashboard where security administrators can view alerts, incidents, and threat intelligence across Microsoft security products?