Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   Which Microsoft 365 component is responsible for enforcing authorization decisions?

   • AAzure Active Directory (Azure AD)
   • BMicrosoft Intune
   • CMicrosoft Purview compliance portal
   • DMicrosoft Defender for Office 365
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security operations center (SOC) is overwhelmed with alerts from multiple Microsoft 365 security tools. They want to reduce alert fatigue and focus on the most critical threats. Which feature of Microsoft Defender XDR should they use?

   • AIncident management and alert correlation
   • BMicrosoft Secure Score
   • CAutomated investigation and response (AIR)
   • DThreat analytics
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A security analyst at a company notices a new phishing campaign targeting their industry. They want to use threat intelligence to proactively block similar threats in Microsoft 365 before they reach users. Which action should they take?

   • ACreate a mail flow rule to quarantine all messages with the word 'invoice'.
   • BDisable email forwarding for all users to prevent phishing from spreading.
   • CSubmit the phishing email to Microsoft for analysis and then add the sender to the blocked senders list.
   • DUse Microsoft Defender for Office 365's Threat Explorer to search for similar indicators and create a block policy based on the campaign's indicators.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company is experiencing a phishing campaign that bypasses Microsoft Defender for Office 365. The security team wants to improve detection and response. They have a limited budget and need to choose between investing in Microsoft Defender XDR or additional third-party security tools. What is the most effective approach?

   • AIncrease user training and awareness.
   • BPurchase a third-party email security gateway.
   • CDisable email links and attachments for all users.
   • DInvest in Microsoft Defender XDR to get unified XDR and automated response.
   Reveal Solution Discussion Select an answer first
6. 40expert · hard

   An organization wants to use threat intelligence to prioritize their security investments. They have limited budget and need to focus on the most impactful security improvements. Which approach should they take?

   • AImplement all security features available in Microsoft 365 to ensure maximum protection.
   • BFocus on endpoint protection only, as it is the most common attack vector.
   • CUse Microsoft Secure Score to identify areas where security posture is weak and align with threat intelligence from Defender XDR.
   • DPurchase additional threat intelligence feeds from third-party vendors.
   Reveal Solution Discussion Select an answer first