MS-900 Study Guide Exam QUESTIONS
AND CORRECT ANSWERS
A company plans to migrate to Microsoft 365.
You need to advise the company about how Microsoft provides protection in a multitenancy
environment. What are the three ways that Microsoft provides protection?
A. Customer content at rest in encrypted on the server by using BitLocker.
B. Microsoft Azure AD provides authorization and role based access control at the tenant layer.
C. Customer content at rest is encrypted on the server by using transport layer security (TLS).
D. Microsoft Azure AD provides authorization and role based access control at the transport layer.
E. Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant.
F. Mailbox database in Microsoft Exchange Online contain mailboxes from multiple tenants. -
CORRECT ANSWER Answer: A, B, F
You are the Microsoft 365 administrator for a company.
You company plans to open a new office in the United Kingdom.
You need to provide penetration test and security assessment reports or the new office. Where can you
locate the required reports?
A. Data Governance page of the Security and Compliance portal.
B. Compliance Manager page of the Services Trust portal.
C. Data Loss Prevention page of the Security and Compliance portal.
D. Regional Compliance page of the Services Trust portal. - CORRECT ANSWER Answer: D
HOTSPOT
An organization plans to deploy Microsoft Intune.
For each of the following statement, select Yes if the statement is true. Otherwise, select No.
1. Data protection can be selectively applied to application.
, 2. Microsoft Intune can define where data is stored.
3. Once a device is registered with Microsoft Intune, device wipe will include the user's personal data.
- CORRECT ANSWER Answers:
1. Yes
2. Yes
3. No
Drag and Drop
Your company has a Microsoft 365 subscription.
You need to implement security policies to ensure that sensitive data is protected.
Which tools should you use? to answer drag the appropriate tools to the correct scenarios. Each tool
may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.
Tools:
Compliance Manager.
Identity and access management (IAM).
Information rights management (IRM)
Scenarios:
1. Use the Microsoft Authenticator app to enable multi-factor authentication.
2. Classify documents to restrict permission to content.
3. Use a dashboard for data-protection recommendations.
4. Provide auditors and regulators with reports on data-protection status. - CORRECT ANSWER
Answers:
1. Information rights management (IRM)
2. Information rights management (IRM)
3. Compliance Manager
4. Compliance Manager.
HOTSPOT
AND CORRECT ANSWERS
A company plans to migrate to Microsoft 365.
You need to advise the company about how Microsoft provides protection in a multitenancy
environment. What are the three ways that Microsoft provides protection?
A. Customer content at rest in encrypted on the server by using BitLocker.
B. Microsoft Azure AD provides authorization and role based access control at the tenant layer.
C. Customer content at rest is encrypted on the server by using transport layer security (TLS).
D. Microsoft Azure AD provides authorization and role based access control at the transport layer.
E. Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant.
F. Mailbox database in Microsoft Exchange Online contain mailboxes from multiple tenants. -
CORRECT ANSWER Answer: A, B, F
You are the Microsoft 365 administrator for a company.
You company plans to open a new office in the United Kingdom.
You need to provide penetration test and security assessment reports or the new office. Where can you
locate the required reports?
A. Data Governance page of the Security and Compliance portal.
B. Compliance Manager page of the Services Trust portal.
C. Data Loss Prevention page of the Security and Compliance portal.
D. Regional Compliance page of the Services Trust portal. - CORRECT ANSWER Answer: D
HOTSPOT
An organization plans to deploy Microsoft Intune.
For each of the following statement, select Yes if the statement is true. Otherwise, select No.
1. Data protection can be selectively applied to application.
, 2. Microsoft Intune can define where data is stored.
3. Once a device is registered with Microsoft Intune, device wipe will include the user's personal data.
- CORRECT ANSWER Answers:
1. Yes
2. Yes
3. No
Drag and Drop
Your company has a Microsoft 365 subscription.
You need to implement security policies to ensure that sensitive data is protected.
Which tools should you use? to answer drag the appropriate tools to the correct scenarios. Each tool
may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.
Tools:
Compliance Manager.
Identity and access management (IAM).
Information rights management (IRM)
Scenarios:
1. Use the Microsoft Authenticator app to enable multi-factor authentication.
2. Classify documents to restrict permission to content.
3. Use a dashboard for data-protection recommendations.
4. Provide auditors and regulators with reports on data-protection status. - CORRECT ANSWER
Answers:
1. Information rights management (IRM)
2. Information rights management (IRM)
3. Compliance Manager
4. Compliance Manager.
HOTSPOT
