Microsoft 365 Fundamentals Compliance and Trust Principles Flashcards
7 cards from real MS-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft 365 Fundamentals Compliance and Trust Principles flashcards as text
What is the primary purpose of Microsoft's 'Privacy by Design' approach in Microsoft 365?
Answer: To build privacy protections into products and services from the ground up, not as an afterthought
Privacy by Design means privacy and data protection are embedded into the design of Microsoft's systems and services from the earliest stages of development.
Which Microsoft 365 compliance feature allows you to automatically delete content after a specified period?
Answer: Retention Policies
Retention Policies in Microsoft Purview can be configured to either retain content for a minimum period, delete it after a maximum period, or both.
What is the Microsoft 365 'Insider Risk Management' feature designed to detect?
Answer: Potentially risky activities by internal users such as data theft or policy violations
Insider Risk Management uses machine learning to identify potentially risky or malicious behavior by employees or contractors within the organization.
Which standard does Microsoft 365 use to ensure that its cloud infrastructure meets rigorous security requirements for healthcare organizations in the US?
Answer: HIPAA/HITECH
HIPAA/HITECH establishes requirements for protecting electronic protected health information (ePHI), and Microsoft signs Business Associate Agreements to support HIPAA compliance.
What does Microsoft's 'Lockbox' feature (Customer Lockbox) provide to organizations?
Answer: Approval control over Microsoft support engineers accessing customer content during service requests
Customer Lockbox requires organizations to explicitly approve before Microsoft support personnel can access their content during a support request.
Which Microsoft 365 capability allows organizations to discover and govern sensitive data stored in on-premises file shares and databases, not just in the cloud?
Answer: Microsoft Purview Data Map
Microsoft Purview Data Map scans and classifies data across on-premises, multicloud, and SaaS environments to provide a unified view of sensitive data wherever it resides.
What is the key difference between a 'retention label' and a 'retention policy' in Microsoft Purview?
Answer: Retention labels are applied to specific items and can mark content as a record, while retention policies apply broadly to locations like all mailboxes
Retention labels are applied at the item level and can declare content as records, whereas retention policies are applied broadly across entire locations like all Exchange mailboxes or all SharePoint sites.