Security & compliance
⏱ ~3-min readAceMark Guide
What this topic is really about
Microsoft Secure Score measures an organization's security posture and recommends improvement actions across identity, devices, and apps. Compliance Manager scores compliance (not general security), Azure Monitor handles telemetry, and Editor is a writing assistant.
Microsoft Defender for Office 365 includes Safe Links and Safe Attachments, which detonate and scan URLs and files to block threats. Sensitivity labels classify content, OneDrive syncs files, and Whiteboard is a collaboration canvas — none provide threat detonation.
See the mechanism
Sensitivity labels apply visual markings and encryption to documents and emails based on classification. A diagram for this topic isn't available yet — the worked example below walks the same reasoning step by step.
An exam-style question, fully explained
Which feature classifies and protects documents based on sensitivity (e.g. Confidential, Public)?
- Identify what the question tests: Which feature classifies and protects documents based on sensitivity (e.g..
- Sensitivity labels apply visual markings and encryption to documents and emails based on classification.
- Defender protects against threats.
- Conditional Access controls sign-in.
- DLP prevents accidental data exfiltration but does not classify content.
Traps the examiner sets
- On-prem AD DS can sync to it but is not the cloud foundation, Defender is threat protection, and Purview is compliance.
Test your recall
Answer each from memory — you'll see instantly whether you're right and why.
Run a focused 10-question mini-mock on Security & compliance and see it stick.
Practice more of this topic →