A legal team is preparing for a lawsuit and needs to collect all relevant content, including emails, documents, and Teams messages. They also need to ensure that content is preserved, but they are concerned about the cost of storing large amounts of data. They want to minimize storage costs while meeting legal requirements. Which eDiscovery approach should they use?

Use DLP policies to prevent deletion

Place a hold on all mailboxes and sites

Use eDiscovery without holds and rely on audit logs

Use eDiscovery with targeted searches and place holds only on relevant custodians

A multinational company is facing litigation that requires them to preserve all data related to a project, but the data is stored in multiple regions with different data residency laws. They need to ensure that the preserved data remains in its original region and that the legal team can search it without moving it. What should they do?

Export all data to a central location for preservation

Use eDiscovery with region-specific holds and search scoped to each region

Use sensitivity labels to encrypt the data

Use audit logs to track access to the data

A company wants to prevent employees from emailing credit card numbers to external recipients. They also need to know when such attempts occur. What should they configure in Microsoft Purview?

An eDiscovery hold on all mailboxes

An Insider Risk Management policy

A DLP policy that detects credit card numbers and blocks external emails, with audit logging enabled

A sensitivity label applied to all emails

A manager suspects that an employee is planning to leave and may be exfiltrating sensitive data. They want to monitor the employee's activity without alerting them, and they also want to be able to review the evidence later. Which Microsoft Purview solution should they use?

Insider Risk Management with audit log review

Data Loss Prevention (DLP) policies

An organization wants to prevent sensitive data from leaving the network, but they also need to allow legitimate sharing with specific external partners. They want to minimize false positives and ensure that any blocked attempts are reviewed. What should they implement?

Insider Risk Management policies

DLP policies that block all external sharing

DLP policies with allowlists for specific partners and audit logging for blocked attempts

Sensitivity labels with encryption

Microsoft Certified:Microsoft 365 Fundamentals

Domain 3Objective 3

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 9)

Part of the Describe security, compliance, privacy, and trust in Microsoft 365 domain, which accounts for 25–30% of the MS-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~5–9 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25–30%of the exam

Questions 41–45

41expert · hard
A legal team is preparing for a lawsuit and needs to collect all relevant content, including emails, documents, and Teams messages. They also need to ensure that content is preserved, but they are concerned about the cost of storing large amounts of data. They want to minimize storage costs while meeting legal requirements. Which eDiscovery approach should they use?
Select an answer first
42expert · hard
A multinational company is facing litigation that requires them to preserve all data related to a project, but the data is stored in multiple regions with different data residency laws. They need to ensure that the preserved data remains in its original region and that the legal team can search it without moving it. What should they do?
Select an answer first
43application · medium
A company wants to prevent employees from emailing credit card numbers to external recipients. They also need to know when such attempts occur. What should they configure in Microsoft Purview?
Select an answer first
44application · medium
A manager suspects that an employee is planning to leave and may be exfiltrating sensitive data. They want to monitor the employee's activity without alerting them, and they also want to be able to review the evidence later. Which Microsoft Purview solution should they use?
Select an answer first
45expert · hard
An organization wants to prevent sensitive data from leaving the network, but they also need to allow legitimate sharing with specific external partners. They want to minimize false positives and ensure that any blocked attempts are reviewed. What should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-900” is a trademark of its owner, used for identification only.

Describe Trust, Privacy, Risk, and Compliance Solutions of Microsoft 365 MS-900 Practice Questions (Page 9)

Questions 41–45

A company wants to prevent employees from emailing credit card numbers to external recipients. They also need to know when such attempts occur. What should they configure in Microsoft Purview?

A manager suspects that an employee is planning to leave and may be exfiltrating sensitive data. They want to monitor the employee's activity without alerting them, and they also want to be able to review the evidence later. Which Microsoft Purview solution should they use?

An organization wants to prevent sensitive data from leaving the network, but they also need to allow legitimate sharing with specific external partners. They want to minimize false positives and ensure that any blocked attempts are reviewed. What should they implement?

Keep studying — Describe security, compliance, privacy, and trust in Microsoft 365