MS-900 Security, Compliance, & Privacy in Microsoft 3

Question 1

In the shared responsibility model for Microsoft 365 SaaS, who is responsible for managing user identities and access?

Accepted Answer

The customer organization

Answer

In the SaaS shared responsibility model, customers are responsible for managing their own user identities, access control, and data classification.

Question 2

Which Azure Active Directory feature allows administrators to require users to verify their identity through an additional method beyond just a password?

Accepted Answer

Multi-Factor Authentication (MFA)

Answer

Multi-Factor Authentication requires users to provide two or more verification factors, significantly reducing the risk of compromised credentials.

Question 3

What is the function of Microsoft Purview Information Protection's sensitivity labels?

Accepted Answer

They classify and protect documents and emails based on their content sensitivity

Answer

Sensitivity labels classify content (like Confidential or Public) and can automatically apply protections such as encryption, watermarks, and access restrictions.

Question 4

Which Microsoft 365 tool allows organizations to legally hold mailbox content and prevent its deletion during litigation or investigation?

Accepted Answer

Litigation Hold

Answer

Litigation Hold preserves all mailbox content, preventing users from permanently deleting items for the duration of a legal matter.

Question 5

What is the role of Microsoft Entra ID (formerly Azure Active Directory) in Microsoft 365 security?

Accepted Answer

It manages identities, authentication, and access control for Microsoft 365 services

Answer

Microsoft Entra ID is the identity and access management foundation for Microsoft 365, handling authentication, authorization, and user lifecycle management.

MS-900 Practice Test

MS-900 Practice Test

MS-900 Security, Compliance, & Privacy in Microsoft 3