Security, Compliance, & Privacy in Microsoft Flashcards
7 cards from real MS-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Security, Compliance, & Privacy in Microsoft flashcards as text
What capability does Microsoft Sentinel provide in the context of Microsoft 365 security?
Answer: Cloud-native SIEM and SOAR for threat detection and response across the organization
Microsoft Sentinel is a cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution.
Which Microsoft 365 feature enables administrators to review and certify that users still need the access rights they currently have?
Answer: Azure AD Access Reviews
Azure AD Access Reviews allow administrators to periodically review and certify that group memberships and application access assignments are still appropriate.
What does Microsoft Defender for Identity primarily protect against?
Answer: On-premises Active Directory identity-based attacks such as pass-the-hash and lateral movement
Microsoft Defender for Identity monitors on-premises Active Directory signals to detect and investigate advanced threats like credential theft and lateral movement attacks.
What is the purpose of Microsoft Purview Audit (formerly called Office 365 Audit Log)?
Answer: To record user and administrator activity across Microsoft 365 services for investigation and compliance
The Purview Audit log captures thousands of activities across Microsoft 365 services, allowing security and compliance teams to investigate incidents and meet audit requirements.
An organization wants to prevent users from accessing Microsoft 365 from countries where it does not operate. Which feature should they configure?
Answer: Conditional Access with named location restrictions
Conditional Access named locations allow administrators to define geographic regions and block or require additional verification for sign-ins from those areas.
What is the key difference between Microsoft Defender for Office 365 Plan 1 and Plan 2?
Answer: Plan 2 adds advanced hunting, Attack Simulator, and automated investigation and response (AIR)
Defender for Office 365 Plan 2 builds on Plan 1 by adding Threat Explorer, automated investigation and response, Attack Simulator, and advanced threat hunting capabilities.
Which Microsoft concept refers to the built-in privacy principles ensuring that data collected is used only for specified purposes and not retained longer than necessary?
Answer: Privacy by design and data minimization
Privacy by design and data minimization are core Microsoft privacy principles ensuring data is collected for explicit purposes and not kept beyond its intended use.