Microsoft · Free Practice Questions · Last reviewed May 2026
24 real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
A company is evaluating moving its on-premises infrastructure to a cloud environment. They want a service that provides virtual machines, storage, and networking capabilities while retaining full control over the operating system and applications. Which cloud service model best meets this requirement?
Software as a Service (SaaS)
Platform as a Service (PaaS)
Infrastructure as a Service (IaaS)
IaaS offers virtualized infrastructure like VMs and storage with full user control over OS and applications.
Private Cloud
Which characteristic of cloud computing allows a user to provision resources automatically without requiring human interaction with the service provider?
Rapid elasticity
Resource pooling
On-demand self-service
On-demand self-service allows users to automatically get resources as needed without manual intervention.
Measured service
A company runs a critical application on-premises but wants to extend capacity to the cloud during peak demand without purchasing additional hardware. Which cloud deployment model best describes this strategy?
Public cloud
Private cloud
Hybrid cloud
Hybrid cloud connects on-premises with public cloud, enabling cloud bursting during peak loads.
Multi-cloud
A company's CFO is pleased that they only pay for the compute and storage resources consumed each month, with no upfront hardware costs. This billing model is a direct result of which cloud computing characteristic?
On-demand self-service
Broad network access
Measured service
Measured service is the cloud characteristic that provides metering and billing based on usage. This allows customers to pay only for what they consume, with no upfront costs.
Resource pooling
A startup wants to focus only on developing and deploying its application code without managing underlying servers or operating systems. Which cloud service model best fits this need?
Infrastructure as a Service (IaaS)
Platform as a Service (PaaS)
PaaS provides a complete platform including OS, runtime, and tools, so the startup can deploy and manage applications without server-level maintenance.
Software as a Service (SaaS)
On-premises deployment
An e-commerce application runs in the cloud and automatically adjusts the number of virtual machines based on real-time traffic. When traffic spikes, more VMs are added; when traffic drops, VMs are removed. Which cloud computing characteristic does this behavior exemplify?
Rapid elasticity
Elasticity allows resources to be automatically scaled out (added) and scaled in (removed) to match workload changes.
Measured service
Resource pooling
On-demand self-service
Want more Describe cloud concepts practice?
Practice this domainA marketing team needs to collaboratively create and edit documents in real time, share files securely, and track version history. Which Microsoft 365 service should they primarily use?
Microsoft Teams
OneDrive for Business
SharePoint Online
SharePoint provides team sites, document libraries, versioning, and co-authoring for collaborative work.
Microsoft Viva Engage
A global sales team uses Microsoft Teams for communication. They need to automate business workflows such as sending approval requests when a new lead is created in Dynamics 365. Which Microsoft 365 service should they integrate with Teams?
Power Apps
Power Automate
Power Automate allows you to create automated workflows that integrate Dynamics 365 with Teams for approvals.
Power BI
Power Virtual Agents
A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?
Microsoft Teams
Microsoft Viva Engage
Microsoft Viva Engage is an enterprise social network that allows organizations to create company-wide announcements, topic-based communities, and integrate with other apps like SharePoint and Power BI. It is the intended service for broad employee communication.
SharePoint Online
Outlook
A sales manager wants to track customer interactions, manage leads, and automate follow-up emails from a single platform. Which Microsoft 365 service is specifically designed for customer relationship management (CRM)?
Microsoft Bookings
Microsoft Dynamics 365 Sales
Dynamics 365 Sales provides a comprehensive CRM platform for tracking interactions, managing leads, and automating sales processes including follow-up emails. It meets the manager's requirements.
Microsoft Power Automate
Microsoft To Do
A project manager wants a shared workspace where team members can create and track tasks, set deadlines, and collaborate on documents. This workspace should integrate with Microsoft Teams for quick access. Which Microsoft 365 service is best suited for this purpose?
Microsoft Lists
Microsoft Planner
Planner offers a visual task board with assignments, due dates, and file attachments, and it integrates natively with Microsoft Teams.
Microsoft To Do
Microsoft Project Online
A company uses a third-party Human Resources (HR) system. Whenever a new employee is added to the HR system, they want to automatically create a user account in Microsoft 365, assign the appropriate license, and send a welcome email. Which Microsoft 365 service should be used to orchestrate this automation?
Microsoft Power Automate
Power Automate provides triggers and actions to automate workflows across services, perfect for HR-driven user provisioning.
Microsoft Identity Manager
Microsoft Entra ID Connect
Microsoft Graph API
Want more Describe Microsoft 365 apps and services practice?
Practice this domainAn organization is concerned about data leakage from sensitive emails. They want to enforce encryption on emails containing financial information automatically. Which Microsoft 365 solution should they configure?
Data Loss Prevention (DLP) policies
Microsoft Purview Message Encryption
Message Encryption uses rules to encrypt emails based on conditions like sensitive content.
Microsoft Purview Information Protection (Microsoft Purview Information Protection)
Exchange Online Protection (EOP)
A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?
Sensitivity labels and Microsoft Purview Information Protection (Microsoft Purview Information Protection)
Data Loss Prevention (DLP) policies
DLP policies detect sensitive data and block sharing actions automatically across services.
Microsoft Purview Compliance Manager
Exchange Online Protection (EOP) and Microsoft Defender for Microsoft 365
A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?
Retention policy
Litigation hold
Litigation hold preserves all data indefinitely (or until the hold is removed) even if users delete items. It is the correct feature for legal preservation requirements.
eDiscovery
Data Loss Prevention (DLP)
A healthcare organization must protect patient health information (PHI) from being accidentally shared externally via email. They need to automatically block emails containing medical record numbers from being sent outside the organization and also encrypt any email that does contain PHI when it is allowed. Which two Microsoft Purview solutions should they combine? (Choose two.)
Microsoft Purview Data Loss Prevention (DLP)
DLP policies can scan emails and documents for sensitive data (e.g., medical record numbers) and automatically block sharing or show policy tips. This is the correct solution for blocking external sharing of PHI.
Microsoft Purview eDiscovery
Microsoft Purview Message Encryption
Message Encryption (OME) allows users to send encrypted emails, and can be automatically applied through DLP rules. When an email contains PHI, encryption ensures the content is protected in transit and at rest.
Microsoft Purview Audit (Standard)
A healthcare organization stores patient records in SharePoint Online. They need to ensure that the data is encrypted at rest and in transit. Which statement is true regarding Microsoft 365 encryption?
Microsoft provides default encryption for data at rest and in transit.
Microsoft 365 encrypts all data at rest using disk and file encryption, and all data in transit using industry-standard protocols like TLS.
Customers must enable encryption at rest manually for each workload.
Encryption only applies to Exchange Online, not SharePoint or OneDrive.
Encryption is optional and can be turned off if a customer chooses.
A company uses Microsoft Purview to monitor for potential data security incidents. They want to automatically detect and remediate activities like downloading large amounts of data to a personal device. Which solution should they configure?
Data Loss Prevention (DLP)
Insider Risk Management
Insider Risk Management uses risk indicators to identify and automatically respond to risky user actions such as unusual data downloads.
Audit
eDiscovery
Want more Describe security, compliance, privacy, and trust in Microsoft 365 practice?
Practice this domainA non-profit organization with 250 employees is considering Microsoft 365. They want the most cost-effective plan that includes business-class email, web and mobile versions of Office apps, and 1 TB of cloud storage per user. Which subscription should they choose?
Microsoft 365 Business Premium
Microsoft 365 Business Basic
Business Basic provides email, web/mobile Office, and 1 TB storage at the lowest price point.
Microsoft 365 E1
Microsoft 365 Apps for Business
A company with 100 users currently has Microsoft 365 Business Standard. The IT department wants to add governance-level security features, including conditional access policies, Microsoft Defender for Microsoft 365, and compliance tools like litigation hold and eDiscovery. Which licensing upgrade should they consider?
Microsoft 365 Business Premium
Business Premium is the direct upgrade from Business Standard that adds the required security and compliance features while maintaining the same business-oriented licensing model. It is the most cost-effective choice for this scenario.
Microsoft 365 E3
Microsoft 365 F3
Microsoft 365 E1
A company is planning to purchase Microsoft 365 subscriptions. They want to follow the recommended process. Which of the following sequences correctly represents the order of steps from start to finish?
Choose subscription, Assess needs, Assign licenses, Add licenses
Assess needs, Choose subscription, Add licenses, Assign licenses
This order reflects the logical process: understand requirements, select a plan, purchase licenses, then allocate them to users.
Add licenses, Assign licenses, Assess needs, Choose subscription
Assess needs, Add licenses, Choose subscription, Assign licenses
A company with 1,000 users has Microsoft 365 E3 subscriptions. They are experiencing a major outage affecting all users and need guaranteed 1-hour response time for a critical support issue. What should they purchase?
Standard Support (included)
Professional Direct Support
Professional Direct is a paid support plan that offers a guaranteed 1-hour response for critical severity issues, along with proactive services.
Azure Support Basic
Partner support via a Microsoft CSP
A company with 500 Microsoft 365 E3 users wants to add the highest level of threat protection and advanced investigation capabilities for their security team. Which licensing add-on should they purchase?
Microsoft 365 E5 Security
Microsoft 365 E5 Security is an add-on for E3 that includes advanced security features such as Microsoft 365 Defender, Defender for Microsoft 365 Plan 2, Defender for Identity, and more, providing the highest threat protection and investigation.
Microsoft 365 E5 Compliance
Microsoft 365 E5
Microsoft Defender for Microsoft 365 Plan 2 only
A company with 250 users has Microsoft 365 E3 licenses. They want to add advanced anti-phishing and anti-malware protection for email and also deploy endpoint detection and response (EDR) for all devices. What is the most cost-effective licensing add-on?
Microsoft 365 E5 Security add-on
This add-on bundles Defender for Microsoft 365 Plan 2 and Defender for Endpoint Plan 1 at a lower combined price than purchasing them individually.
Microsoft Defender for Microsoft 365 Plan 1 and Microsoft Defender for Endpoint Plan 1 add-ons
Microsoft 365 E5 Compliance add-on
Upgrade all users to Microsoft 365 E5
Want more Describe Microsoft 365 pricing and support practice?
Practice this domainThe MS-900 exam has up to 60 questions and must be completed in 60 minutes. The passing score is 700/1000.
The MS-900 exam uses multiple-choice, multiple-select, drag-and-drop, and exhibit-based questions. Exhibit questions show CLI output, network diagrams, or routing tables and ask you to interpret them — exactly the format Courseiva uses.
The exam covers 4 domains: Describe cloud concepts, Describe Microsoft 365 apps and services, Describe security, compliance, privacy, and trust in Microsoft 365, Describe Microsoft 365 pricing and support. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official Microsoft MS-900 exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.