What is the primary purpose of Microsoft Purview Data Loss Prevention (DLP)?

To prevent sensitive data from being shared or leaked outside the organization

An organization is under a regulatory requirement to retain records of all user and admin activities in Microsoft 365 for a minimum of three years. They also need to be able to search these records quickly during an investigation. What should they configure in Microsoft Purview?

Enable unified audit logging and set audit log retention to three years

Create an eDiscovery case and place all mailboxes on hold

Use Microsoft Priva to track data transfers

Enable Insider Risk Management analytics

An organization wants to prevent data breaches by blocking the sharing of sensitive data. However, they also want to allow legitimate business sharing with external partners. They need to balance security with business needs. Which approach should they take?

Use sensitivity labels to encrypt all data

Use Insider Risk Management to monitor sharing

Use DLP policies with user overrides and justification, and audit the overrides

Block all external sharing with DLP policies

A security team is investigating a potential data breach. They need to determine which users accessed sensitive files, what actions they took, and whether any data was exfiltrated. They also need to preserve the affected files for forensic analysis. What is the best combination of Microsoft Purview tools?

Sensitivity labels and Microsoft Priva

Audit log search, Insider Risk Management, and eDiscovery hold

DLP policy and audit log search

An organization needs to track all administrative changes to their Microsoft 365 environment for compliance purposes. They also want to detect suspicious admin activity, such as unusual login times. Which Microsoft Purview capability should they enable?

Microsoft Purview Audit (Premium)

Microsoft Purview Insider Risk Management

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 3

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 1)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25–30%of the exam

Questions 1–5

1foundation · easy
What is the primary purpose of Microsoft Purview Data Loss Prevention (DLP)?
Select an answer first
2application · medium
An organization is under a regulatory requirement to retain records of all user and admin activities in Microsoft 365 for a minimum of three years. They also need to be able to search these records quickly during an investigation. What should they configure in Microsoft Purview?
Select an answer first
3expert · hard
An organization wants to prevent data breaches by blocking the sharing of sensitive data. However, they also want to allow legitimate business sharing with external partners. They need to balance security with business needs. Which approach should they take?
Select an answer first
4expert · hard
A security team is investigating a potential data breach. They need to determine which users accessed sensitive files, what actions they took, and whether any data was exfiltrated. They also need to preserve the affected files for forensic analysis. What is the best combination of Microsoft Purview tools?
Select an answer first
5application · medium
An organization needs to track all administrative changes to their Microsoft 365 environment for compliance purposes. They also want to detect suspicious admin activity, such as unusual login times. Which Microsoft Purview capability should they enable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.