A company has deployed Microsoft Defender for Endpoint, Defender for Office 365, and Defender for Identity. They receive an alert about a suspicious sign-in from a user, followed by a malware detection on the same user's device, and then a phishing email reported by the user. The security team wants to understand the full attack chain and respond from a single queue. What should they use?

Microsoft 365 compliance portal

Microsoft Defender XDR incident view

Microsoft Defender for Cloud Apps

How does Microsoft Secure Score help improve an organization's security?

By encrypting all data in transit

By providing recommendations for security improvements

By monitoring user activity in real time

By automatically applying all security patches

A company has a large number of Windows devices that are not yet onboarded to Defender for Endpoint. The security team wants to ensure that all devices are protected against malware and other threats as soon as possible. What should they do first?

Onboard the devices to Defender for Endpoint

Create a device isolation policy

Enable attack surface reduction rules

A company uses Microsoft 365 and wants to protect users from malicious attachments in email and from unsafe links in Teams messages. They also want to review the threat detections in a central portal. What should they configure?

Defender for Endpoint policies and review in the Microsoft Defender portal

Defender for Identity policies and review in the Microsoft Defender portal

Defender for Cloud Apps policies and review in the Microsoft Defender portal

Defender for Office 365 policies and review in the Microsoft Defender portal

Which capability does Microsoft Secure Score provide?

Benchmarking against industry peers

Data loss prevention for emails

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 2

Describe Threat Protection Solutions of Microsoft 365 MS-900 Practice Questions (Page 6)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

11concepts

25–30%of the exam

11 Concepts in This Objective

Microsoft Defender XDR Overview
Defender for Endpoint Functionality
Defender for Office 365 Features
Defender for Identity Capabilities
Defender for Cloud Apps Role
Microsoft Defender Portal Usage
Microsoft Secure Score Benefits
Microsoft Secure Score Capabilities
Endpoint Threat Protection in Microsoft 365
Application Threat Protection in Microsoft 365
Identity Threat Protection in Microsoft 365

Questions 26–30

26expert · hard
A company has deployed Microsoft Defender for Endpoint, Defender for Office 365, and Defender for Identity. They receive an alert about a suspicious sign-in from a user, followed by a malware detection on the same user's device, and then a phishing email reported by the user. The security team wants to understand the full attack chain and respond from a single queue. What should they use?
Select an answer first
27foundation · easy
How does Microsoft Secure Score help improve an organization's security?
Select an answer first
28application · medium
A company has a large number of Windows devices that are not yet onboarded to Defender for Endpoint. The security team wants to ensure that all devices are protected against malware and other threats as soon as possible. What should they do first?
Select an answer first
29application · medium
A company uses Microsoft 365 and wants to protect users from malicious attachments in email and from unsafe links in Teams messages. They also want to review the threat detections in a central portal. What should they configure?
Select an answer first
30foundation · easy
Which capability does Microsoft Secure Score provide?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.