EarnYourCert
Exams › AB-900 › Domain 2 of 3
AB-900 · Domain 2 of 3 · 35-40% of the exam

Data security and compliance

Domain 2 of AB-900 accounts for 35-40% of the exam, the heaviest part of the syllabus. EarnYourCert has 193 original questions for this domain, all with explanations: 121 multiple choice, 41 yes/no and 31 completion or ordering items, like the real exam.

Practice domain 2 for free →No sign-up. Choose how many questions you want.

What this domain covers

  • Sensitivity labels and encryption with Microsoft Purview
  • Data loss prevention (DLP) and retention policies
  • Oversharing in SharePoint and OneDrive and how to detect it
  • Data security posture management for AI (DSPM for AI)

Domain 2 sample questions

8 questions from our 193-question bank for this domain. Try to answer before revealing the solution.

1. Complete the sentence: In Microsoft Purview, sensitivity labels can be configured to apply [___] to labeled content.

  1. an Exchange Online mail flow rule applied to the labeled document
  2. a fixed seven-year data retention policy on all labeled content
  3. a SharePoint permission level to the site containing the content
  4. encryption, content markings, and access restrictions
Show answer

Correct answer: D. Sensitivity labels can apply encryption, content markings (headers/footers/watermarks), and access restrictions. They do not define fixed retention, mail flow rules, or SharePoint permission levels.

2. Which best describes a retention policy applied to a location?

  1. It increases the recycle bin quota of the site involved
  2. It keeps or deletes content based on the defined rules
  3. It blocks the sign-in of the users on that site
  4. It changes the color of the icons of the location's files
Show answer

Correct answer: B. Correct: It keeps or deletes content based on the defined rules.

3. Which best describes default sensitivity labeling?

  1. It automatically shares the file with external users
  2. It deletes content that has no label assigned to it
  3. It automatically applies a base label when content is created
  4. It always converts the created document into a static image
Show answer

Correct answer: C. Correct: It automatically applies a base label when content is created.

4. Which correctly describes Microsoft 365 Copilot's use of data for model training?

  1. User prompts are published on the internet to improve the model's quality
  2. All user prompts are used to train public large language models
  3. The tenant's data is shared with all other Microsoft 365 customers
  4. Customer data and prompts are not used to train the foundation models
Show answer

Correct answer: D. Copilot customer data, prompts, and responses are not used to train the underlying foundation models. They are not shared across customers or published.

5. Why does least-access matter before deploying Copilot?

  1. Copilot publishes all content openly to the internet
  2. Copilot encrypts all of the mailboxes in the tenant
  3. Copilot deletes the permissions configured on the sites
  4. Copilot surfaces content the user is able to access
Show answer

Correct answer: D. Correct: Copilot surfaces content the user is able to access.

6. Which best describes how Copilot treats existing permissions?

  1. It honors them when retrieving and showing content to the user
  2. It turns them into open anonymous access for the whole web
  3. It ignores them entirely to speed up the answers it gives
  4. It deletes them each time it indexes the tenant's content
Show answer

Correct answer: A. Correct: It honors them when retrieving and showing content to the user.

7. Complete the sentence: Compliance Manager helps organizations to [___].

  1. assign and revoke the Copilot licenses based on each individual user's monthly consumption
  2. search and preserve content across the M365 workloads for ongoing legal investigations
  3. create shared mailboxes where the compliance team manually archives the regulated records
  4. assess their compliance posture against regulations and receive improvement actions with a score
Show answer

Correct answer: D. Compliance Manager assesses compliance posture against regulations with a score and improvement actions. Searching content is eDiscovery; license assignment is the M365 admin center; mailboxes are Exchange.

8. Which best describes the purpose of SharePoint Advanced Management?

  1. Editing and publishing internal videos for the org
  2. Creating surveys and quizzes aimed at employees
  3. Designing presentation templates for employees
  4. Controlling access and sharing at a large scale
Show answer

Correct answer: D. Correct: Controlling access and sharing at a large scale.

Other AB-900 domains