1. Recommend security configurations for Microsoft 365 services; Provide configuration steps for security recommendations or links to configuration controls
2. Define application-based security policies; Wipe managed application profile
3. Azure portal
4. Security & Compliance Center

5. Office 365 groups; Security groups; Mail-enabled security groups; Distribution List Groups
6. Only cases that they created or are assigned to them
7. All cases
8. Identity; Data; Device; Apps
9. New and existing external users
10. They can be the same level of permissiveness as SharePoint sharing controls; They can be less permissive than SharePoint sharing controls.
11. Two-stage recycle bin; Preservation Hold Library; Versioning
12. The on-premises Active Directory password control settings are synchronized to Azure AD
13. Azure Information Protection
14. At rest; In transit
15. Password write-back
16. True
17. Audit Log Search