MS-900 - Microsoft 365 Fundamentals Compliance and Trust Principles Questions and Answers

Question 1

An external auditor has requested documentation proving that Microsoft's cloud services adhere to specific international standards, such as ISO 27001 and SOC 2.
Where can a Microsoft 365 administrator find these official audit reports and compliance certifications?

Accepted Answer

Service Trust Portal

Answer

Microsoft Purview compliance portal

Answer

Microsoft Entra admin center

Answer

Microsoft Learn documentation

Question 2

An organization wants to continuously monitor its compliance posture against regulations like GDPR. They need a tool that provides a risk-based score, tracks the completion of required actions, and maps Microsoft's controls to specific regulatory requirements. Which Microsoft 365 solution is designed for this purpose?

Accepted Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Cloud

Answer

Service Trust Portal

Answer

Microsoft Priva

Question 3

A German company has a strict requirement that all employee email data must be stored at rest within German datacenters to comply with local regulations. Which compliance principle does this requirement directly address?

Accepted Answer

Data residency

Answer

Data sovereignty

Answer

Data transparency

Answer

Data encryption

Question 4

A company's legal team is initiating an internal investigation and needs to identify, preserve, and collect all electronically stored information (ESI) related to the case from sources like Exchange Online mailboxes and SharePoint sites. Which Microsoft Purview solution provides an end-to-end workflow for this legal process?

Accepted Answer

eDiscovery

Answer

Communication Compliance

Answer

Information Barriers

Answer

Data Loss Prevention

Question 5

Microsoft's commitment to being open with customers about its operational policies, such as where their data is stored and who can access it, is a core component of which trust principle?

Accepted Answer

Transparency

Answer

Security

Answer

Compliance

Answer

Privacy

Question 6

To comply with privacy regulations like GDPR, an organization needs to efficiently manage and respond to data subject rights requests (SRRs), such as a user asking for a copy of their personal data. Which Microsoft solution is specifically designed to help automate and manage this process?

Accepted Answer

Microsoft Priva

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Identity

Answer

Microsoft Purview eDiscovery