Exam MS-900 topic 1 question 206 discussion

ABF. https://docs.microsoft.com/en-us/office365/enterprise/office-365-isolation-in-office-365

Surely this is wrong? C. Customer content at rest is encrypted on the server by using transport-layer security (TLS). How can TLS encrypt data at rest?

exam Question in September

https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-isolation-in-microsoft-365?view=o365-worldwide Each mailbox database within Exchange Online contains mailboxes from multiple tenants. An authorization code secures each mailbox, including within a tenancy. By default, only the assigned user has access to a mailbox. So the 3rd choice is F. Though I think this choice is poorly written in this manner without the additional information.

E should be the 3rd choice instead of F Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant: This means that customer data is isolated from other tenants and cannot be accessed by unauthorized users.

Transport Layer Security (TLS) is often used to encrypt data in transit for transport security so the answer on this question is CORRECT. BitLocker is for DATA AT REST

Each mailbox database within Exchange Online contains mailboxes from multiple tenants.

https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-isolation-in-microsoft-365?view=o365-worldwide - so F

ABE is correct

It's A,B,F

How is "F: Mailbox databases in Microsoft Exchange Online contain mailboxes from multiple tenants" providing any protection? It may be a fact, but does not protect data at all. "My dog is brown" is also true, but is not protecting your data. and answer C is for transport, not data at rest. I don't think it is C or F. I am so confused.

ABF for sure

Database contains mailboxen from multiple tenants (F)..how should this protect data? F is not likely to be an answer on this Q.

C is correct: You can have multiple layers of encryption in place at the same time. For example, you can encrypt email messages and also the communication channels through which your email flows. With Office 365, your data is encrypted at rest and in transit, using several strong encryption protocols, and technologies that include Transport Layer Security/Secure Sockets Layer (TLS/SSL), Internet Protocol Security (IPSec), and Advanced Encryption Standard (AES). Source: https://docs.microsoft.com/en-us/microsoft-365/compliance/encryption?view=o365-worldwide

https://docs.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-tenant-isolation-overview?view=o365-worldwide: "Logical isolation of customer content within each tenant for Microsoft 365 services is achieved through Azure Active Directory authorization and role-based access control. Microsoft 365 uses service-side technologies that encrypt customer content at rest and in transit, including BitLocker, per-file encryption, Transport Layer Security (TLS)" ABC are right Besides, how can tenants share data if data is not in transit?

I will be going with ABF

A, b and F TLS is while data on go