Microsoft · Free Practice Questions · Last reviewed May 2026
23real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
50% of exam · 6 sample questions below
A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?
Microsoft Teams
Microsoft Viva Engage
Microsoft Viva Engage is an enterprise social network that allows organizations to create company-wide announcements, topic-based communities, and integrate with other apps like SharePoint and Power BI. It is the intended service for broad employee communication.
SharePoint Online
Outlook
A sales manager wants to track customer interactions, manage leads, and automate follow-up emails from a single platform. Which Microsoft 365 service is specifically designed for customer relationship management (CRM)?
Microsoft Bookings
Microsoft Dynamics 365 Sales
Microsoft Dynamics 365 Sales is a purpose-built CRM application that leverages the Dataverse (Common Data Service) to store leads, contacts, accounts, and opportunities with full relationship hierarchies. It records customer interactions such as emails, calls, meetings, and notes as activities, while sales automation features—including workflows and Power Automate connectors—can trigger follow-up actions automatically. Its dashboards and built-in sales insights give managers the analytics needed to monitor pipeline health, making it the correct choice here.
Microsoft Power Automate
Microsoft To Do
A project manager wants a shared workspace where team members can create and track tasks, set deadlines, and collaborate on documents. This workspace should integrate with Microsoft Teams for quick access. Which Microsoft 365 service is best suited for this purpose?
Microsoft Lists
Microsoft Planner
Microsoft Planner is a collaborative task management tool built around a visual Kanban board where each task has assignees, due dates, checklists, labels, and file attachments. Every Planner plan is backed by a Microsoft 365 Group, giving the team a shared mailbox, calendar, and SharePoint document library for co-authoring, and the Board can be embedded into Teams as a tab. Its simplicity and native Teams integration make it the correct choice for a shared workspace with assignments and deadlines.
Microsoft To Do
Microsoft Project Online
A company uses a third-party Human Resources (HR) system. Whenever a new employee is added to the HR system, they want to automatically create a user account in Microsoft 365, assign the appropriate license, and send a welcome email. Which Microsoft 365 service should be used to orchestrate this automation?
Microsoft Power Automate
Microsoft Power Automate enables no-code/low-code cloud flows that use built-in connectors and triggers to react to events in third-party HR systems. These flows can orchestrate user provisioning, send approval emails, and update Microsoft Entra ID or other systems automatically, making it the correct tool for automating HR-driven identity workflows.
Microsoft Identity Manager
Microsoft Entra ID Connect
Microsoft Graph API
A manager wants to quickly create a survey to collect employee feedback on a new policy. The survey must automatically store responses in an Excel spreadsheet and trigger an email notification when a response is submitted. Which Microsoft 365 service should the manager use?
Microsoft Forms
Microsoft Forms is the correct choice because it provides an out-of-the-box survey creation interface with ready-to-use question types, branching, and themes, enabling an employee feedback survey to be built in minutes. Responses are automatically collected into an Excel workbook for immediate analysis, and the built-in Power Automate integration allows you to trigger an email alert to a manager or HR whenever a new response is submitted, without writing any code.
Microsoft Lists
Microsoft Power Apps
Microsoft SharePoint
A sales team needs a centralized repository for customer proposals that multiple team members can edit simultaneously and that maintains version history. Which Microsoft 365 service should they use?
OneDrive for Business
SharePoint Online
SharePoint Online is the correct choice because it provides team-specific document libraries with granular permission controls, content types, and managed metadata that support a shared repository. Multiple users can co-author the same document simultaneously while version history records every change, and workflows or retention policies can be applied at the site or library level. For a centralized customer repository, SharePoint gives the sales team a governed, collaborative home rather than a personal drive or a communication tool.
Microsoft Teams
Exchange Online
Want more Describe Microsoft 365 apps and services practice?
Practice this domain13% of exam · 5 sample questions below
Your organization has 500 users with Microsoft 365 E3 licenses. You want to add security features such as Microsoft Defender for Office 365 (Plan 1) and Microsoft Purview Information Protection. Which licensing approach should you recommend?
Keep E3 and add Microsoft 365 E5 Compliance add-on
Keep E3 and add Microsoft 365 E5 Security add-on
Upgrade all users to Microsoft 365 E5
Upgrading all users to Microsoft 365 E5 is the correct choice because E5 directly includes both Defender for Office 365 Plan 1 and Microsoft Purview Information Protection. E5 bundles all E3 features with advanced security and compliance workloads, eliminating the need for additional add-ons and ensuring both the email protection and information protection requirements are met under a single license.
Keep E3 and use the Security & Compliance Center for E3
A company with 200 employees needs to deploy Microsoft 365 Apps for Enterprise. They want to pay monthly and have no annual commitment. Which licensing program should they use?
Microsoft 365 Enterprise Agreement
Microsoft 365 Business Basic
Microsoft 365 Business Premium
Microsoft 365 Business Premium is the correct choice because it includes the full Microsoft 365 Apps for Enterprise desktop applications, hosted Exchange, Teams, SharePoint, and advanced security features like Microsoft Defender for Office 365 and Intune, and it can be licensed on a true monthly basis with no annual commitment—making it a flexible, comprehensive solution for 200 employees.
Microsoft 365 E3
A company is choosing a Microsoft 365 plan for 150 users who need email, file storage, and Teams. They also need basic compliance features such as data retention policies and eDiscovery. Which TWO plans meet these requirements?
Microsoft 365 E1
Microsoft 365 E3
E3 includes all required features and is suitable for any size.
Microsoft 365 Business Premium
Business Premium includes all required features for up to 300 users.
Microsoft 365 E5
Microsoft 365 Business Basic
Which THREE of the following are benefits of the Microsoft 365 E5 license compared to E3?
Exchange Online
Power BI Pro
E5 includes Power BI Pro, while E3 does not.
Microsoft Purview Communication Compliance
E5 includes advanced compliance features like Communication Compliance.
Microsoft Defender for Office 365 Plan 2
E5 includes Plan 2, which has advanced threat hunting and automation.
Microsoft Entra ID P1
A company has 500 users and is considering moving to Microsoft 365. They need to ensure that all users have access to Exchange Online, SharePoint Online, and Teams, and they want to use Microsoft Entra ID P1 for identity management. Which Microsoft 365 subscription should they choose?
Microsoft 365 E5
Microsoft 365 E3
Microsoft 365 E3 is an enterprise-level plan with no seat cap, making it suitable for 500 users. It includes Exchange Online, SharePoint Online, Teams, and Microsoft Entra ID P1 (Azure AD Premium P1), which provides the required identity and access management features. This plan delivers all necessary services at a lower cost than E5, making it the correct and most cost-effective choice for the scenario.
Microsoft 365 Business Basic
Microsoft 365 Business Premium
Want more Describe Microsoft 365 pricing, licensing, and support practice?
Practice this domain8% of exam · 6 sample questions below
A company's CFO is pleased that they only pay for the compute and storage resources consumed each month, with no upfront hardware costs. This billing model is a direct result of which cloud computing characteristic?
On-demand self-service
Broad network access
Measured service
Measured service is the cloud characteristic that automatically monitors, controls, and reports resource usage, enabling providers to bill customers for exactly the compute, storage, or network capacity they consume. This metering capability makes pay-per-use pricing possible, so the CFO only pays for the compute actually used, avoiding fixed upfront costs. Without measured service, usage-based billing and cost optimization would not be feasible.
Resource pooling
A startup wants to focus only on developing and deploying its application code without managing underlying servers or operating systems. Which cloud service model best fits this need?
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
PaaS delivers a fully managed hosting environment that includes the operating system, language runtime, web server, and deployment tooling as part of the service. The startup only manages its application code and data, while the platform provider automatically handles patching, scaling, and infrastructure maintenance—exactly matching the requirement to focus purely on development and deployment.
Software as a Service (SaaS)
On-premises deployment
A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?
IaaS (Infrastructure as a Service)
In IaaS, the provider supplies virtualized compute, storage, and networking as on-demand resources, but the customer deploys and manages the virtual machines' guest OS, runtime, and installed applications. This shared-responsibility model places patching, configuration, and application stack maintenance squarely on the customer, which is exactly the scenario described. The provider's responsibility ends at the hypervisor and physical infrastructure, so customers must handle everything inside the VM.
PaaS (Platform as a Service)
SaaS (Software as a Service)
FaaS (Function as a Service)
A company wants to run a workload that requires the highest level of physical security and control over hardware. They have the budget to purchase and maintain their own data center. Which cloud deployment model should they choose?
Public cloud
Private cloud
Private cloud offers dedicated hardware and full control, ideal for workloads requiring high security and compliance.
Hybrid cloud
Community cloud
A company runs a virtual machine in Azure that hosts a web application. The company is responsible for configuring the operating system, installing web server software, and managing application updates. The cloud provider is responsible for the physical hardware, networking, and data center security. Which cloud service model does this represent?
Software as a Service (SaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, where the cloud provider supplies the physical hardware, virtualization, networking, and storage, but you are responsible for installing and managing the guest OS, middleware, and applications. For a VM hosting a web app, IaaS matches because you manage the OS, apply patches, configure the web server, and maintain the app itself. Azure Virtual Machines is a classic IaaS offering that gives you full administrative control.
Function as a Service (FaaS)
A company uses a cloud service that provides virtual machines. The company manages the operating system, middleware, and applications, while the cloud provider manages the physical hardware, networking, and data center security. Which cloud service model does this represent?
Infrastructure as a Service (IaaS)
IaaS (Infrastructure as a Service) delivers virtualized compute resources as ready-to-use VMs, and the customer retains full control over the guest operating system, runtime, and application stack. The cloud provider is responsible for the physical hosts, the hypervisor, and the data-center networking, while the customer patches, configures, and secures the OS. In this scenario, the company is using a cloud service that provides virtual machines, which directly matches the IaaS delivery model.
Platform as a Service (PaaS)
Software as a Service (SaaS)
Desktop as a Service (DaaS)
Want more Describe cloud concepts practice?
Practice this domain29% of exam · 6 sample questions below
A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?
Sensitivity labels and Microsoft Purview Information Protection (Microsoft Purview Information Protection)
Data Loss Prevention (DLP) policies
DLP policies detect sensitive data and block sharing actions automatically across services.
Microsoft Purview Compliance Manager
Exchange Online Protection (EOP) and Microsoft Defender for Microsoft 365
A healthcare organization stores patient records in SharePoint Online. They need to ensure that the data is encrypted at rest and in transit. Which statement is true regarding Microsoft 365 encryption?
Microsoft provides default encryption for data at rest and in transit.
Microsoft applies encryption automatically, without requiring any customer configuration. Data at rest, including SharePoint patient records, is protected with BitLocker disk encryption and Storage Service Encryption, while data in transit is secured with industry-standard TLS 1.2+ protocols. These default protections cover every Microsoft 365 workload, so encryption is always on from the moment data is written.
Customers must enable encryption at rest manually for each workload.
Encryption only applies to Exchange Online, not SharePoint or OneDrive.
Encryption is optional and can be turned off if a customer chooses.
A company uses Microsoft Purview to monitor for potential data security incidents. They want to automatically detect and remediate activities like downloading large amounts of data to a personal device. Which solution should they configure?
Data Loss Prevention (DLP)
Insider Risk Management
Insider Risk Management is the Microsoft Purview solution built specifically to identify, triage, and respond to risky user behavior by aggregating signals from Windows, Microsoft 365, and HR systems into a consolidated risk score. It uses predefined risk indicator policies—such as mass file downloads, unusual device connections, or repeated data exfiltration—and applies machine learning to surface anomalous patterns with a case-management workflow. When a threshold is met, it can automatically escalate to an investigation, notify the user, or trigger a policy response, making it the correct choice for monitoring and remediating potential data loss from insiders.
Audit
eDiscovery
An administrator needs to monitor and investigate potential data breaches by reviewing detailed records of file access and sharing activities across Microsoft 365. They require a centralized report showing who accessed what, from where, and any unusual patterns. Which tool should they use?
Microsoft 365 Defender
Microsoft Purview Audit (Standard)
Microsoft Purview Audit (Standard) is the correct tool because it records timestamped events for user and admin actions across Exchange, SharePoint, OneDrive, Teams, and Azure AD. Investigators can query the unified audit log to identify exactly when a file was accessed, downloaded, shared, or deleted and which account performed the action. This historical, activity-level evidence is essential for monitoring, triaging, and thoroughly investigating a potential data breach, with default retention of 90 days for standard events.
Microsoft Purview eDiscovery
Microsoft Secure Score
A security administrator needs to audit all activities related to a specific user in Exchange Online, SharePoint Online, and Microsoft Entra ID for the past 90 days. They also need to export the audit log as a CSV file. Which Microsoft Purview solution provides this capability without additional licensing beyond Microsoft 365 E3?
Microsoft Purview Audit (Standard)
Correct. Audit (Standard) is included with E3, retains logs for 90 days, covers the required services, and allows export to CSV.
Microsoft Purview Audit (Premium)
Microsoft Purview eDiscovery (Standard)
Microsoft Purview Content Search
A company uses Microsoft 365 (a SaaS offering). A security incident occurs where an employee's account is compromised because the employee reused their corporate password on a personal website. According to the shared responsibility model, who is primarily responsible for this security failure?
The customer (the company using Microsoft 365)
The customer is accountable for the identity plane in the Microsoft 365 shared responsibility model. Entra ID (Azure AD) tenant configuration, user accounts, passwords, and access policies like MFA and Conditional Access are all customer-managed controls. Because the incident stemmed from weak password practices and password reuse, the failure resides in the customer's cloud-hosted data and identity responsibilities, not in Microsoft's infrastructure or code.
Microsoft, because they provide the SaaS platform
Both Microsoft and the customer share equal responsibility
It depends on the contract terms with Microsoft
Want more Describe security, compliance, privacy, and trust in Microsoft 365 practice?
Practice this domainThe MS-900 exam has 50 questions and must be completed in 60 minutes. The passing score is 700/1000.
Conceptual questions on Microsoft 365 services, cloud productivity, collaboration, security, compliance, and subscription management.
The exam covers 4 domains: Describe Microsoft 365 apps and services, Describe Microsoft 365 pricing, licensing, and support, Describe cloud concepts, Describe security, compliance, privacy, and trust in Microsoft 365. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official Microsoft MS-900 exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.