MS-900 Practice Test 11 — 15 Questions

Question 1

A team needs to create a shared online document and collaborate in real time with colleagues. They require built-in version history and the ability to access the document from any device. Which Microsoft 365 app should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Word Online. Microsoft Word Online is the correct choice because it is a browser-based version of Word that enables real-time co-authoring, automatic version history, and access from any device with an internet connection. Unlike the desktop app, it does not require installation and syncs changes instantly via OneDrive or SharePoint, meeting all stated requirements.

Answer

Microsoft Word (desktop)

Answer

Microsoft OneNote

Answer

Microsoft Teams

Question 2

Your company has a mix of on-premises and cloud users. You plan to move to Microsoft 365 and need to support hybrid identity with password hash synchronization. Which licensing is minimally required?

Accepted Answer

Microsoft Entra ID Free. Password hash synchronization (PHS) is a feature of Microsoft Entra ID available in all editions, including the free tier. It is part of the directory synchronization capabilities provided by Microsoft Entra Connect. Therefore, Microsoft Entra ID Free is the minimum licensing required to support hybrid identity with PHS. Microsoft 365 E3 also works but is not minimal.

Answer

Microsoft Entra ID P1

Answer

Microsoft 365 E3

Answer

Microsoft Entra ID P2

Question 3

A company runs a virtual machine in Azure that hosts a web application. The company is responsible for configuring the operating system, installing web server software, and managing application updates. The cloud provider is responsible for the physical hardware, networking, and data center security. Which cloud service model does this represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the customer manages the operating system, web server software, and application updates, while the cloud provider handles the physical hardware, networking, and data center security. In IaaS, the provider offers virtualized computing resources over the internet, and the customer retains control over the guest OS and installed software, which matches the responsibilities outlined.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 4

A company currently has Microsoft 365 E5 licenses for all users. They need to perform advanced threat hunting using queries across email, endpoints, and identities to investigate a potential security incident. Which of the following capabilities is already included in their existing license?

Accepted Answer

Microsoft 365 Defender (including advanced hunting). Microsoft 365 Defender (formerly Microsoft Threat Protection) includes advanced hunting capabilities that allow security teams to run Kusto Query Language (KQL) queries across email, endpoints, identities, and cloud apps. Since the company already has Microsoft 365 E5 licenses, this capability is included without any additional purchase.

Answer

Microsoft Defender for Microsoft 365 Plan 1

Answer

Microsoft Entra ID Premium P1

Answer

Microsoft Cloud App Security

Question 5

A compliance officer needs to automatically detect documents stored in SharePoint Online that contain sensitive data types (e.g., credit card numbers) and apply a sensitivity label that restricts access to only certain users. The classification should occur without user intervention and the label must be applied to the document. Which Microsoft Purview solution should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling are the correct solution because they can automatically classify documents based on sensitive data types (such as credit card numbers) and apply a sensitivity label that enforces protection actions like restricting access to specific users. This occurs without user intervention, meeting the requirement for automatic classification and labeling in SharePoint Online.

Answer

Data Loss Prevention (DLP)

Answer

Retention labels

Answer

Information barriers

Question 6

A company currently uses Microsoft 365 Business Basic licenses for 80 users. They want to add the desktop versions of Office apps (Word, Excel, PowerPoint) without any additional security or compliance features. Which upgrade is the most cost-effective?

Accepted Answer

Upgrade to Microsoft 365 Business Standard. Microsoft 365 Business Standard is the most cost-effective upgrade from Business Basic because it includes the desktop versions of Office apps (Word, Excel, PowerPoint) without adding the advanced security and compliance features found in Business Premium or Enterprise plans. Business Standard provides the same core productivity tools at a lower per-user price point, making it the ideal choice when only desktop Office is needed.

Answer

Upgrade to Microsoft 365 Business Premium

Answer

Upgrade to Microsoft 365 E3

Answer

Purchase Office 2019 Professional Plus standalone

Question 7

A non-profit organization with 300 users needs to deploy Microsoft 365 Business Basic for all users. They also require device management via Microsoft Intune for 50 users who use company-owned mobile devices. The organization is eligible for non-profit pricing. What is the most cost-effective licensing approach?

Accepted Answer

Purchase Microsoft Intune Plan 1 add-on licenses for the 50 users who need device management. Microsoft 365 Business Basic provides the core productivity and collaboration tools (Exchange Online, Teams, SharePoint) needed by all 300 users. For the 50 users requiring device management, purchasing Microsoft Intune Plan 1 as an add-on license is the most cost-effective approach because it adds mobile device management (MDM) capabilities to their existing Business Basic subscription without upgrading the entire tenant or purchasing more expensive suites. Non-profit pricing applies to both the base license and the add-on, minimizing costs.

Answer

Assign Microsoft 365 Business Premium to all 300 users

Answer

Create a separate Microsoft 365 Business Basic tenant for the 50 users and include Intune

Answer

Purchase Microsoft 365 E3 licenses for the 50 users

Question 8

A company wants to ensure that sensitive documents classified as 'Confidential' are automatically encrypted and have restricted access permissions applied when they are shared via email. The protection must persist even if the email is forwarded to external parties. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (A) is correct because it enables classification and labeling of documents (e.g., 'Confidential'), with built-in encryption and rights management that persists regardless of where the document is shared or forwarded. This is achieved through Azure Rights Management (Azure RMS), which enforces access restrictions even when the email is forwarded to external parties, ensuring the protection travels with the content.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Message Encryption

Answer

Microsoft Purview Compliance Manager

Question 9

A compliance officer needs to ensure that all outgoing emails containing a customer's credit card number are automatically encrypted before delivery. External recipients must be able to reply with the same level of encryption without a separate signing-up process. Which Microsoft Purview solution should be configured?

Accepted Answer

Office 365 Message Encryption (OME) with a DLP policy. Office 365 Message Encryption (OME) with a Data Loss Prevention (DLP) policy is the correct solution because OME provides automatic encryption for emails based on sensitive information types (e.g., credit card numbers) detected by DLP rules. It also supports the 'encrypt-only' option, which allows external recipients to reply with the same level of encryption without requiring a separate sign-up or certificate exchange, leveraging the Microsoft 365 message encryption infrastructure.

Answer

Sensitivity labels with automatic marking

Answer

Azure Information Protection (AIP)

Answer

Microsoft Defender for Office 365

Question 10

A training manager needs to create a simple video that includes screen recordings, webcam overlay, and transitions to announce a new compliance policy. The manager wants to use a Microsoft 365 app that is designed for video creation and editing. Which Microsoft 365 app should the manager use?

Accepted Answer

Microsoft Clipchamp. Microsoft Clipchamp is the correct app because it is a dedicated video creation and editing tool included with Microsoft 365, specifically designed for tasks like combining screen recordings, webcam overlays, and transitions. Unlike other Microsoft 365 apps, Clipchamp provides a full timeline-based editor with built-in support for these features, making it ideal for producing a polished compliance policy announcement video.

Answer

Microsoft Stream

Answer

Microsoft Teams

Answer

Microsoft PowerPoint

Question 11

An organization wants to automatically detect when a user attempts to share a document containing a customer's credit card number via email. The system should block the sharing and display a warning to the user. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. When a user attempts to share a document containing a credit card number via email, DLP can inspect the content using built-in sensitive information types (e.g., Credit Card Number), block the email, and display a policy tip warning to the user. This matches the requirement exactly.

Answer

Sensitivity labels

Answer

Retention policies

Answer

eDiscovery

Question 12

A compliance officer needs to identify users who are at risk of leaking sensitive data based on their activities such as copying files to USB drives or emailing content outside the organization. The solution must also allow reviewing the activities in a case-based workflow. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management is specifically designed to detect, investigate, and act on risky user activities that could lead to data leaks, such as copying files to USB drives or emailing sensitive content externally. It provides a case-based workflow for reviewing and managing these activities, aligning directly with the compliance officer's requirements.

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview Communication Compliance

Question 13

A company has 10 users who need only Exchange Online mailboxes and Microsoft Teams. They do not need desktop versions of Office apps. What is the most cost-effective Microsoft 365 plan for this requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online mailboxes and Microsoft Teams, along with web and mobile versions of Office apps, without including desktop Office installations. This makes it the most cost-effective plan for the 10 users who need only email and Teams, as it offers the required services at the lowest per-user price among the options.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 Business Standard

Answer

Office 365 E1

Question 14

A company is deploying a cloud solution where they have the ability to quickly scale up resources during peak demand and scale down during off-peak hours, paying only for what they use. They also need the provider to automatically manage the underlying platform, including patching the operating system. Which combination of cloud characteristics and service model best describes this scenario?

Accepted Answer

Elasticity and PaaS. The scenario describes elasticity (the ability to scale resources up and down automatically based on demand) and Platform as a Service (PaaS), where the provider manages the underlying platform, including OS patching. Elasticity is a key cloud characteristic that enables dynamic scaling, and PaaS abstracts infrastructure management, aligning perfectly with the requirement for automatic platform maintenance.

Answer

Scalability and IaaS

Answer

Rapid elasticity and SaaS

Answer

Measured service and PaaS

Question 15

A company uses a cloud provider that charges them based solely on the exact number of gigabytes of storage used and the number of virtual machine hours consumed. They can increase or decrease usage at any time without any upfront commitment. Which essential characteristic of cloud computing does this billing model demonstrate?

Accepted Answer

Measured service. The billing model charges based on exact gigabytes of storage used and virtual machine hours consumed, which directly aligns with the 'measured service' characteristic of cloud computing. Measured service means cloud providers meter and bill customers precisely for the resources they consume, often using a pay-as-you-go model. This allows the company to pay only for what they use without upfront commitments, as described in the scenario.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service