An organization wants to ensure that users can only access Microsoft 365 resources from compliant devices. They have implemented Intune for device management. Which Microsoft 365 feature should they configure to enforce this requirement?

Microsoft Defender for Endpoint

Multi-factor authentication (MFA) for all users

Conditional Access policies that require device compliance

In Microsoft 365, what is the primary purpose of authorization?

To monitor user activity for suspicious behavior

To verify the identity of a user attempting to sign in

To encrypt data transmitted between the client and the server

To determine what resources and actions a user is permitted to access

What does the 'XDR' in Microsoft Defender XDR stand for?

Extended Detection and Response

An organization is using Microsoft Defender XDR but is not seeing alerts from all their Microsoft 365 workloads. They have enabled Defender for Office 365 and Defender for Endpoint, but they are not receiving alerts from Defender for Identity. What is the most likely reason?

They have not assigned the appropriate roles to the security team.

Defender for Identity is not included in their license.

They have not enabled the Defender for Identity sensor on their domain controllers.

They have not configured the data connectors in Microsoft Defender XDR.

An organization wants to automate the response to common threats, such as phishing emails and compromised user accounts, to reduce the workload on their security team. Which Microsoft 365 feature should they use?

Microsoft 365 compliance center

Microsoft Defender XDR automated investigation and response (AIR)

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 1Objective 2

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 6)

Part of the Identify the core features and objects of Microsoft 365 services domain, which accounts for 30–35% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

30–35%of the exam

Questions 26–30

26application · medium
An organization wants to ensure that users can only access Microsoft 365 resources from compliant devices. They have implemented Intune for device management. Which Microsoft 365 feature should they configure to enforce this requirement?
Select an answer first
27foundation · easy
In Microsoft 365, what is the primary purpose of authorization?
Select an answer first
28foundation · easy
What does the 'XDR' in Microsoft Defender XDR stand for?
Select an answer first
29expert · hard
An organization is using Microsoft Defender XDR but is not seeing alerts from all their Microsoft 365 workloads. They have enabled Defender for Office 365 and Defender for Endpoint, but they are not receiving alerts from Defender for Identity. What is the most likely reason?
Select an answer first
30application · medium
An organization wants to automate the response to common threats, such as phishing emails and compromised user accounts, to reduce the workload on their security team. Which Microsoft 365 feature should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.