An administrator needs to find out which users accessed a specific SharePoint site containing confidential project files over the past month. They also need to preserve the site content for an upcoming legal investigation. What should they do?

Use Insider Risk Management to review user activity

Apply a sensitivity label to the site

Run a Data Loss Prevention report

Search the audit log for SharePoint file accesses and place the site on an eDiscovery hold

An organization is investigating a potential insider threat. They have enabled Insider Risk Management and audit logging. However, they are concerned about false positives and want to reduce the noise while still detecting real threats. They also need to preserve evidence for potential legal action. Which approach should they take?

Enable all Insider Risk Management indicators and rely on default thresholds

Use DLP policies to block all data exfiltration

Configure Insider Risk Management policies with specific indicators and thresholds, and use audit log retention for evidence

Use eDiscovery to search all user activity

A company wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and restrict access to only the finance team. They also want to prevent these documents from being emailed externally. Which Microsoft Purview features should they combine?

Microsoft Priva and Microsoft Purview Audit

Data Loss Prevention (DLP) policy and Insider Risk Management

Sensitivity labels with manual labeling and eDiscovery

Sensitivity labels with auto-labeling and a DLP policy

A healthcare organization needs to classify documents containing patient data and apply visual markings such as 'Confidential' headers. They also want to prevent these documents from being shared outside the organization. What should they implement?

Data Loss Prevention policy only

Sensitivity labels with encryption and a DLP policy that references the labels

Which component is a key part of the Zero Trust model in Microsoft 365?

Conditional Access policies that evaluate signals like user and device health

A single firewall at the network perimeter

A single sign-on solution that grants access to all apps

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 3

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 6)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25–30%of the exam

Questions 26–30

26application · medium
An administrator needs to find out which users accessed a specific SharePoint site containing confidential project files over the past month. They also need to preserve the site content for an upcoming legal investigation. What should they do?
Select an answer first
27expert · hard
An organization is investigating a potential insider threat. They have enabled Insider Risk Management and audit logging. However, they are concerned about false positives and want to reduce the noise while still detecting real threats. They also need to preserve evidence for potential legal action. Which approach should they take?
Select an answer first
28application · medium
A company wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and restrict access to only the finance team. They also want to prevent these documents from being emailed externally. Which Microsoft Purview features should they combine?
Select an answer first
29application · medium
A healthcare organization needs to classify documents containing patient data and apply visual markings such as 'Confidential' headers. They also want to prevent these documents from being shared outside the organization. What should they implement?
Select an answer first
30foundation · easy
Which component is a key part of the Zero Trust model in Microsoft 365?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.