A security administrator needs to review the current security posture and recent incidents in one place. They want to see the Secure Score and any active alerts. Where should they go?

Microsoft Purview compliance portal

Azure Active Directory admin center

Which threat is specifically addressed by application threat protection in Microsoft 365?

Ransomware on local hard drives

Malicious links in Office documents

Brute-force attacks on user passwords

A company has a mix of Windows and macOS devices. The security team wants to protect all devices from malware and also be able to isolate a compromised device from the network. They have Microsoft 365 E5. What should they do?

Onboard all devices to Defender for Endpoint and use device isolation when needed

Use Defender for Office 365 for device protection

Use Microsoft Secure Score to identify devices that need protection

Use Intune to deploy antivirus and manually disconnect compromised devices

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 2

Describe Threat Protection Solutions of Microsoft 365 MS-900 Practice Questions (Page 2)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

11concepts

25–30%of the exam

11 Concepts in This Objective

Microsoft Defender XDR Overview
Defender for Endpoint Functionality
Defender for Office 365 Features
Defender for Identity Capabilities
Defender for Cloud Apps Role
Microsoft Defender Portal Usage
Microsoft Secure Score Benefits
Microsoft Secure Score Capabilities
Endpoint Threat Protection in Microsoft 365
Application Threat Protection in Microsoft 365
Identity Threat Protection in Microsoft 365

Questions 6–10

6application · medium
A company uses Microsoft 365 and several third-party SaaS applications. The security team wants to identify which cloud apps are being used by employees and assess the risk of each app. Which Defender for Cloud Apps feature should they use?
Select an answer first
7application · medium
A company has a mix of Windows 10 and Windows 11 devices enrolled in Microsoft Intune. The security team wants to ensure that if a device is compromised, the device can be isolated from the network while still allowing the security team to investigate. Which Defender for Endpoint capability should they use?
Select an answer first
8application · medium
A security administrator needs to review the current security posture and recent incidents in one place. They want to see the Secure Score and any active alerts. Where should they go?
Select an answer first
9foundation · easy
Which threat is specifically addressed by application threat protection in Microsoft 365?
Select an answer first
10expert · hard
A company has a mix of Windows and macOS devices. The security team wants to protect all devices from malware and also be able to isolate a compromised device from the network. They have Microsoft 365 E5. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.

Describe Threat Protection Solutions of Microsoft 365 MS-900 Practice Questions (Page 2)

Questions 6–10

A company uses Microsoft 365 and several third-party SaaS applications. The security team wants to identify which cloud apps are being used by employees and assess the risk of each app. Which Defender for Cloud Apps feature should they use?

A security administrator needs to review the current security posture and recent incidents in one place. They want to see the Secure Score and any active alerts. Where should they go?

Which threat is specifically addressed by application threat protection in Microsoft 365?

A company has a mix of Windows and macOS devices. The security team wants to protect all devices from malware and also be able to isolate a compromised device from the network. They have Microsoft 365 E5. What should they do?

Keep studying — Describe security, compliance, privacy, and trust in Microsoft 365