nerdexam
Microsoft

MS-900 · Question #232

Hotspot Question For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

The correct answer is Microsoft Defender for Endpoint detects advanced attacks and automates investigation and remediation of security incidents. = Yes; Microsoft Defender for Office 365 helps protect against malicious attachments and links that are sent through email. = Yes; Microsoft Cloud App Security provides client virtual private network (VPN) access to Office 365 services. = No. The question correctly identifies the core functions of Microsoft Defender for Endpoint and Defender for Office 365, and correctly refutes the claim that Cloud App Security acts as a VPN.

Submitted by eva_at· Mar 5, 2026Describe security, compliance, privacy, and trust in Microsoft 365

Question

Hotspot Question For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

MS-900 question #232 exhibit

Answer Area

  • Microsoft Defender for Endpoint detects advanced attacks and automates investigation and remediation of security incidents.Yes
  • Microsoft Defender for Office 365 helps protect against malicious attachments and links that are sent through email.Yes
  • Microsoft Cloud App Security provides client virtual private network (VPN) access to Office 365 services.No

Explanation

The question correctly identifies the core functions of Microsoft Defender for Endpoint and Defender for Office 365, and correctly refutes the claim that Cloud App Security acts as a VPN.

Approach. 1. 'Microsoft Defender for Endpoint detects advanced attacks...' -> Yes. This product is an endpoint detection and response (EDR) solution that includes automated investigation and remediation (AIR) capabilities to handle alerts automatically. 2. 'Microsoft Defender for Office 365 helps protect against malicious attachments and links...' -> Yes. It includes core features like Safe Attachments and Safe Links specifically designed to secure emails and collaboration tools. 3. 'Microsoft Cloud App Security provides client virtual private network (VPN) access...' -> No. Microsoft Cloud App Security (now known as Microsoft Defender for Cloud Apps) is a Cloud Access Security Broker (CASB) that monitors and controls access to cloud applications; it does not provide network-level VPN services.

Common mistakes.

  • common_mistake. A common mistake is selecting 'Yes' for the third statement by confusing secure cloud access management (which a CASB provides via policies and monitoring) with secure network routing (which a VPN provides).

Concept tested. Microsoft 365 Security Solutions (Defender for Endpoint, Defender for Office 365, and Defender for Cloud Apps/CASB)

Reference. https://learn.microsoft.com/en-us/microsoft-365/security/

Topics

#Defender for Endpoint#Defender for Office 365#Cloud App Security#threat protection

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice