Drag and Drop Question Your company has a Microsoft 365 subscription. You need to implement security policies to ensure that sensitive data is protected. Which tools should you use? To answer, drag…

Submitted by asante_acc· Mar 5, 2026Describe Microsoft 365 security and compliance capabilities - specifically understanding the purpose of compliance, identity, and information protection tools within a Microsoft 365 subscription (MS-900 / SC-900 domain: Security, Compliance, and Identity fundamentals)

Question

Drag and Drop Question Your company has a Microsoft 365 subscription. You need to implement security policies to ensure that sensitive data is protected. Which tools should you use? To answer, drag the appropriate tools to the correct scenarios. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: each correct selection is worth one point. Answer:

Exhibit

Explanation

Compliance Manager is the correct tool for both dashboard-based data-protection recommendations and providing auditors/regulators with compliance reports, as it is specifically designed to assess compliance posture, track regulatory requirements, and generate actionable insights and reports. Information Rights Management (IRM) is correct for classifying and restricting document permissions because it encrypts content and controls who can access, print, copy, or forward sensitive documents. Identity and Access Management (IAM) with Microsoft Authenticator is the appropriate tool for enabling multi-factor authentication (MFA), as it governs user identity verification and access control policies.

Topics

#Compliance Manager#Information Rights Management#Identity and Access Management#Microsoft 365 Security

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice