What type of information does Microsoft Secure Score use to calculate its score?

Security configurations and user behaviors

Where would a security administrator go to view and manage alerts from Microsoft Defender XDR?

Microsoft Defender Portal (security.microsoft.com)

Microsoft Purview compliance portal

A company has a hybrid identity environment with Active Directory on-premises and Azure AD. The security team wants to detect attackers who have compromised a domain admin account and are using it to access sensitive resources. They have deployed Microsoft Defender for Identity. What should they do to detect this?

Review Defender for Identity alerts for suspicious activities

Enable Azure AD Privileged Identity Management

Configure Conditional Access policies

A security analyst needs to investigate a suspicious file that was detected on a user's device. They want to see the file's behavior, related alerts, and the device's exposure level. Where should they go?

Azure Active Directory admin center, then Sign-ins

Compliance portal, then Data classification

Microsoft Defender portal, Device inventory, then the device's timeline

Microsoft 365 admin center, then User management

What is the role of Microsoft Defender for Cloud Apps?

Manage user identities and access permissions

Protect on-premises servers from malware

Encrypt data at rest in Microsoft 365

Provide visibility and control over cloud applications and services

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 2

Describe Threat Protection Solutions of Microsoft 365 MS-900 Practice Questions (Page 3)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

11concepts

25–30%of the exam

11 Concepts in This Objective

Microsoft Defender XDR Overview
Defender for Endpoint Functionality
Defender for Office 365 Features
Defender for Identity Capabilities
Defender for Cloud Apps Role
Microsoft Defender Portal Usage
Microsoft Secure Score Benefits
Microsoft Secure Score Capabilities
Endpoint Threat Protection in Microsoft 365
Application Threat Protection in Microsoft 365
Identity Threat Protection in Microsoft 365

Questions 11–15

11foundation · easy
What type of information does Microsoft Secure Score use to calculate its score?
Select an answer first
12foundation · easy
Where would a security administrator go to view and manage alerts from Microsoft Defender XDR?
Select an answer first
13expert · hard
A company has a hybrid identity environment with Active Directory on-premises and Azure AD. The security team wants to detect attackers who have compromised a domain admin account and are using it to access sensitive resources. They have deployed Microsoft Defender for Identity. What should they do to detect this?
Select an answer first
14application · medium
A security analyst needs to investigate a suspicious file that was detected on a user's device. They want to see the file's behavior, related alerts, and the device's exposure level. Where should they go?
Select an answer first
15foundation · easy
What is the role of Microsoft Defender for Cloud Apps?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.