What is the primary purpose of Microsoft Purview sensitivity labels?

To classify and protect data by applying labels that can enforce encryption and access restrictions

To block all external sharing of documents

To monitor user activity in real time

To automatically delete all sensitive data after 30 days

An organization wants to prevent users from sharing files containing employee IDs with external users in Microsoft Teams. They also need to be alerted when such sharing is attempted. What should they implement?

Insider Risk Management policies

A DLP policy for Teams that detects employee IDs and blocks external sharing, with audit logging enabled

A sensitivity label applied to all Teams files

eDiscovery holds on Teams content

What is the primary purpose of Microsoft Purview Insider Risk Management?

To detect and analyze potentially risky activities by users inside the organization

To encrypt all data stored in SharePoint Online

To block all external emails from entering the organization

To manage user permissions across all Microsoft 365 services

A compliance officer needs to prove that a specific user accessed a sensitive file during a two-week period. They also want to know if any unusual activity occurred around that access. Which Microsoft Purview tool should they use first?

Microsoft Purview Data Loss Prevention (DLP)

Microsoft Purview Insider Risk Management

Microsoft Purview Audit (Standard or Premium)

A European company must ensure that all customer data stored in Microsoft 365 remains within the European Union to comply with data residency regulations. They also want to control which administrators can access this data. Which Microsoft 365 capabilities should they use?

Microsoft Priva and sensitivity labels

Data residency options in a European datacenter region and Privileged Access Management

Azure AD Conditional Access and DLP policies

Microsoft Purview eDiscovery and audit logs

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 3

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 2)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25–30%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of Microsoft Purview sensitivity labels?
Select an answer first
7application · medium
An organization wants to prevent users from sharing files containing employee IDs with external users in Microsoft Teams. They also need to be alerted when such sharing is attempted. What should they implement?
Select an answer first
8foundation · easy
What is the primary purpose of Microsoft Purview Insider Risk Management?
Select an answer first
9application · medium
A compliance officer needs to prove that a specific user accessed a sensitive file during a two-week period. They also want to know if any unusual activity occurred around that access. Which Microsoft Purview tool should they use first?
Select an answer first
10application · medium
A European company must ensure that all customer data stored in Microsoft 365 remains within the European Union to comply with data residency regulations. They also want to control which administrators can access this data. Which Microsoft 365 capabilities should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.