Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company wants to automatically classify and protect documents based on their content, but they also need to allow certain users to override the classification for legitimate business purposes. They also need to track who overrides the classification. What should they configure?

   • AManual labeling only
   • BAuto-labeling with user-defined permissions and audit logging
   • CDLP policy with blocking actions
   • DConditional Access policies
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A global company must comply with data residency laws that require customer data to stay within the country of origin. They also need to ensure that only authorized personnel can access this data. Which Microsoft 365 capabilities should they use?

   • AData residency options and Conditional Access policies
   • BData Loss Prevention (DLP) policies and Insider Risk Management
   • CMicrosoft Purview eDiscovery and audit logs
   • DMicrosoft Priva and sensitivity labels
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company is implementing Zero Trust and wants to minimize user friction while maintaining security. They have a mix of managed and unmanaged devices. They want to require MFA only when risk is detected, and they want to block access to sensitive data from unmanaged devices. Which approach best balances security and usability?

   • AUse Conditional Access with risk-based policies and session controls for unmanaged devices
   • BRequire MFA for all users and block all unmanaged devices
   • CUse DLP policies to block all external sharing
   • DUse sensitivity labels to encrypt all data and allow any device
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization has a high rate of false positives in their insider risk alerts, causing alert fatigue. They want to reduce noise while still detecting genuine data exfiltration. They also need to preserve evidence for potential legal action. What should they do?

   • ADisable Insider Risk Management and rely on DLP alerts
   • BRefine Insider Risk Management policies with specific indicators and thresholds, and use eDiscovery holds to preserve evidence
   • CUse Microsoft Priva to manage alerts
   • DIncrease audit log retention to preserve evidence
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the main purpose of Microsoft Purview Auditing?

   • ATo manage user licenses and subscriptions
   • BTo automatically block all suspicious emails
   • CTo record and provide visibility into user and admin activities across Microsoft 365 services
   • DTo create and enforce data retention policies
   Reveal Solution Discussion Select an answer first