Free Microsoft Security, Compliance, and Identity Fundamentals practice test

Defender for Endpoint detects a malicious file on a user's device. Defender for Office 365 immediately scans and removes the same file from every mailbox across the organization without manual action. Which Microsoft Defender XDR feature describes this behavior?

A financial services company wants to require multifactor authentication only when administrators sign in to the Azure portal, without blocking normal user access to other apps. Which Microsoft Entra capability should they configure?

A security team builds a Microsoft Purview data loss prevention policy that blocks sharing of documents containing driver's license numbers, but lets users override the block with a justification. Which DLP policy element controls this behavior?

A company redesigns its access strategy so that no device or user is trusted by default, even when connected to the internal corporate network, and every access request is authenticated and authorized using all available signals. Which Zero Trust guiding principle does this describe?

An organization needs to collect security data from users, devices, applications and infrastructure across several clouds and on-premises, then hunt across it. Which product category is this?

Beyond the security risk, why are excessive access rights a problem for an organization being audited?

In a Microsoft Purview eDiscovery case, an investigator adds search results to a review set. What happens to the collected items?

Organization A configures its identity provider to trust Organization B's, so B's users can reach A's workspace with their own credentials. A's users then try to access a resource in B. What happens?

Which component of Defender for Cloud is concerned with checking and improving the configuration of resources rather than detecting active attacks?

An organization wants a sign-in method that cannot be replayed by an attacker who intercepts it remotely. Which property of passkeys delivers that?