nerdexam
Microsoft

MS-900 · Question #431

Drag and Drop Question A company is evaluating Microsoft 365. You need to identify features of Zero Trust. Which features should you choose? To answer, drag the appropriate features to the correct…

The correct answer is Policy Optimization; Threat Protection. In Microsoft 365's Zero Trust framework, Policy Optimization is a core capability that ensures access policies are continuously refined and enforced based on verified identity, device compliance, and least-privilege principles. Threat Protection is another fundamental Zero…

Submitted by khalil_dz· Mar 5, 2026Describe Microsoft 365 security and compliance capabilities - specifically identifying Zero Trust features and capabilities within the Microsoft 365 ecosystem (aligned to MS-900 or SC-900 certification objectives)

Question

Drag and Drop Question A company is evaluating Microsoft 365. You need to identify features of Zero Trust. Which features should you choose? To answer, drag the appropriate features to the correct capabilities. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

MS-900 question #431 exhibit

Answer Area

Drag items

Adaptive AccessThreat ProtectionPolicy Optimization

Correct arrangement

  • Policy Optimization
  • Threat Protection

Explanation

In Microsoft 365's Zero Trust framework, Policy Optimization is a core capability that ensures access policies are continuously refined and enforced based on verified identity, device compliance, and least-privilege principles. Threat Protection is another fundamental Zero Trust capability, enabling detection and response to threats across endpoints, identities, and data - aligning with the Zero Trust principle of 'assume breach.' These two features directly map to Zero Trust's pillars of verifying explicitly, using least privilege access, and assuming breach.

Topics

#Zero Trust#Microsoft 365 Security#Threat Protection#Conditional Access Policy

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice