A European bank must store customer data within the European Union to comply with local regulations. They also want to ensure that only authorized employees can access this data. What should they do in Microsoft 365?

Enable audit logging for all access

Use sensitivity labels to encrypt all data

Select an EU data residency option and implement Conditional Access policies

Implement Microsoft Priva for data subject requests

A company wants to minimize the amount of personal data they collect and ensure that data is retained only as long as necessary. They also need to identify where personal data is stored across Microsoft 365. Which Microsoft solution should they use?

Microsoft Purview Sensitivity Labels

Microsoft Purview Data Loss Prevention (DLP)

Which action can a sensitivity label perform when applied to a document?

Automatically send the document to a manager for approval

Encrypt the document so only authorized users can open it

Delete the document after a set period

Create a backup copy of the document

A law firm wants to automatically classify documents containing client information and apply encryption to those documents. They also want to prevent these documents from being shared with external parties. What should they configure?

Auto-labeling sensitivity labels with encryption and a DLP policy that blocks external sharing

A DLP policy that detects client information

Sensitivity labels with manual labeling only

An organization is adopting a Zero Trust security model. They want to implement 'assume breach' by segmenting access and continuously validating user identity. They also need to protect data in emails and documents from unauthorized access. Which combination of Microsoft 365 features should they use?

Conditional Access, sensitivity labels, and DLP policies

Data residency and sensitivity labels

Microsoft Priva and Insider Risk Management

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 3

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 5)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25–30%of the exam

Questions 21–25

21application · medium
A European bank must store customer data within the European Union to comply with local regulations. They also want to ensure that only authorized employees can access this data. What should they do in Microsoft 365?
Select an answer first
22application · medium
A company wants to minimize the amount of personal data they collect and ensure that data is retained only as long as necessary. They also need to identify where personal data is stored across Microsoft 365. Which Microsoft solution should they use?
Select an answer first
23foundation · easy
Which action can a sensitivity label perform when applied to a document?
Select an answer first
24application · medium
A law firm wants to automatically classify documents containing client information and apply encryption to those documents. They also want to prevent these documents from being shared with external parties. What should they configure?
Select an answer first
25application · medium
An organization is adopting a Zero Trust security model. They want to implement 'assume breach' by segmenting access and continuously validating user identity. They also need to protect data in emails and documents from unauthorized access. Which combination of Microsoft 365 features should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.