Microsoft 365 Certified: Administrator ExpertDeploy and manage a Microsoft 365 tenantHard
A company is planning to deploy Microsoft 365 and wants to ensure that all user data, including email, documents, and chat messages, remains within a specific geographic region (e.g., Europe) to comply with data residency regulations. Which Microsoft 365 feature is designed to address this requirement for data at rest?
- AMicrosoft 365 Multi-Geo Capabilities
- BMicrosoft 365 Customer Lockbox
- CAzure Information Protection (AIP)
- DMicrosoft Defender for Cloud Apps
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft 365 Multi-Geo Capabilities
Microsoft 365 Multi-Geo Capabilities allow an organization to provision and store data at rest in specified geographic locations (data regions) for Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams, thereby addressing data residency requirements.
Why the other options are wrong
- B. Customer Lockbox provides an approval workflow for Microsoft engineers to access customer data, not for data residency.
- C. AIP is for classifying, labeling, and protecting documents and emails, primarily through encryption and access controls, not for controlling the physical storage location.
- D. Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that monitors and protects cloud applications, not for setting data residency.
Microsoft 365 Multi-Geo
A Microsoft 365 feature that enables organizations to store user data at rest in specified geographic locations (geos) to meet data residency requirements.
- Requires an Enterprise Agreement and specific license types (e.g., E3, E5).
- Applies to Exchange Online, SharePoint Online, OneDrive, and Teams.
- Administrators can assign users to a preferred data location (PDL).
Memory trick: Think of Multi-Geo as a global map where you can draw boundaries for your data's home.