MS-900 Practice Test 11 — 15 Questions

Question 1

A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Data Loss Prevention (DLP) policies. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect and block the sharing of sensitive information, such as credit card numbers, across email (Exchange Online) and SharePoint. By scanning content for predefined sensitive info types (e.g., credit card numbers using regex patterns from the DLP engine), DLP can automatically block or warn users before external sharing occurs, meeting the company's requirement.

Answer

Sensitivity labels and Microsoft Purview Information Protection (Microsoft Purview Information Protection)

Answer

Microsoft Purview Compliance Manager

Answer

Exchange Online Protection (EOP) and Microsoft Defender for Microsoft 365

Question 2

A company must comply with a regulation that requires all data stored in Microsoft 365 to remain within the European Union. Which Microsoft 365 feature should an administrator configure to enforce this geographic restriction?

Accepted Answer

Data Residency policies. Data Residency policies in Microsoft 365 allow administrators to define the geographic location where data at rest is stored. By configuring a Data Residency policy for the European Union, the administrator ensures that all data remains within EU data centers, meeting regulatory requirements.

Answer

Data Loss Prevention (DLP)

Answer

Information Rights Management (IRM)

Answer

Customer Lockbox

Question 3

A multinational organization with 500 users currently has Microsoft 365 E3 licenses. They need to perform advanced threat hunting using queries across email, endpoints, and identities to investigate a security incident. They also need the ability to automatically isolate infected endpoints. What is the most cost-effective licensing addition?

Accepted Answer

Microsoft 365 E5 Security. Microsoft 365 E5 Security is the most cost-effective addition because it provides advanced threat hunting via Microsoft 365 Defender (including queries across email, endpoints, and identities) and automated endpoint isolation through Microsoft Defender for Endpoint. This add-on delivers the required capabilities without the full cost of upgrading all users to Microsoft 365 E5, which would also include unnecessary features like advanced compliance and analytics.

Answer

Microsoft 365 E5

Answer

Microsoft 365 E5 Compliance

Answer

Enterprise Mobility + Security (EMS) E5

Question 4

A company wants to use a cloud service where they only manage their data and user access, while the cloud provider handles everything from the physical infrastructure to the applications. Which cloud service model is this?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS), where the cloud provider manages the entire stack—physical infrastructure, operating system, middleware, runtime, data, and applications—while the customer only manages their data and user access. In SaaS, the provider delivers fully functional applications over the internet, such as Microsoft 365, where users simply log in and use the software without any infrastructure or platform management responsibilities.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

On-premises deployment

Question 5

An organization wants to prevent employees from sharing sensitive files with external users via SharePoint Online, but they need to allow sharing with a specific external partner for a single project. What is the most efficient configuration?

Accepted Answer

Disable external sharing at the tenant level and enable it only for the specific project site. It allows the organization to disable external sharing globally at the tenant level via the SharePoint admin center, which prevents all users from sharing with external users by default. Then, by enabling external sharing only for the specific project site (site-level override), the organization can grant the necessary access to the external partner while maintaining the broad restriction. This is the most efficient approach because it uses a single configuration change at the tenant level and a targeted exception at the site level, avoiding complex policies or labels.

Answer

Change the default sharing link type to 'Specific people' and add the partner's domain to an allow list

Answer

Apply sensitivity labels with encryption to all files

Answer

Configure a DLP policy to block external sharing except for the partner domain

Question 6

A company wants to run a workload that requires the highest level of physical security and control over hardware. They have the budget to purchase and maintain their own data center. Which cloud deployment model should they choose?

Accepted Answer

Private cloud. A private cloud deployment model is correct because it provides dedicated infrastructure for a single organization, offering the highest level of physical security and full control over hardware. This model allows the company to purchase, own, and manage its own data center, ensuring compliance with stringent security requirements and complete hardware isolation.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 7

An administrator is reviewing a request from users who need to reduce maintenance of power, cooling, and server replacement. Cloud concept or benefit best matches this requirement?

Accepted Answer

Reduced data center management. The users' requirement to reduce maintenance of power, cooling, and server replacement directly maps to the cloud benefit of reduced data center management. By moving to a cloud model, the cloud provider assumes responsibility for the physical infrastructure, including hardware lifecycle, environmental controls, and facility upkeep, allowing the organization to offload these operational burdens.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 8

A company with 100 Microsoft 365 Business Premium users needs to add advanced compliance features: eDiscovery (Premium) and Communication Compliance. They want to keep their existing Business Premium subscriptions to retain current capabilities. What is the most cost-effective licensing approach?

Accepted Answer

Purchase Microsoft 365 E5 Compliance add-on for all 100 users. Microsoft 365 Business Premium already includes the base compliance features, and the Microsoft 365 E5 Compliance add-on provides the advanced capabilities (eDiscovery Premium and Communication Compliance) without requiring a full license upgrade. This add-on is the most cost-effective approach as it adds only the needed compliance features to existing Business Premium subscriptions.

Answer

Upgrade all 100 users from Business Premium to Microsoft 365 E5

Answer

Purchase Microsoft 365 E5 eDiscovery and Audit add-on

Answer

Purchase Microsoft 365 E5 Compliance and Information Protection add-on

Question 9

Wide World Importers is a retail company with 2,000 users. They use Microsoft 365 E3. They need to: (1) Deploy a new employee experience platform that integrates with Microsoft 365 and provides personalized news, tasks, and learning; (2) Enable employees to create low-code apps to automate approvals and workflows without custom development; (3) Provide a secure way for employees to store and share company files with granular permissions; (4) Allow IT to manage mobile devices and applications centrally. Which Microsoft 365 services should they use?

Accepted Answer

Viva Connections, Power Apps and Power Automate, SharePoint Online, Microsoft Intune. Microsoft Viva Connections provides the employee experience platform with personalized news and tasks. Power Apps and Power Automate allow low-code app creation for approvals. SharePoint Online provides secure file storage with granular permissions. Microsoft Intune provides mobile device and app management. Microsoft Teams is a collaboration platform but not the employee experience platform.

Answer

Viva Insights, Power Apps and Power Automate, SharePoint Online, Microsoft 365 Defender

Answer

Microsoft Teams, Power Apps and Power Automate, OneDrive, Microsoft Entra ID

Answer

Viva Connections, Power BI, OneDrive, Microsoft Intune

Question 10

Drag and drop the steps to enable Microsoft 365 audit logging in the compliance center into the correct order.

Accepted Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.. The correct sequence to enable Microsoft 365 audit logging in the compliance center is: first sign in to the Microsoft 365 Compliance center, then navigate to the Audit solution, click 'Start recording user and admin activity' to enable auditing, and finally wait for the audit log to become active (which may take up to 24 hours). This order ensures that all prerequisites are met and the feature is properly activated.

Answer

Step 1: Navigate to the Audit solution. Step 2: Sign in to the Microsoft 365 Compliance center. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.

Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Click 'Start recording user and admin activity'. Step 3: Navigate to the Audit solution. Step 4: Wait for the audit log to be enabled.

Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Wait for the audit log to be enabled. Step 4: Click 'Start recording user and admin activity'.

Question 11

A company uses a cloud provider that hosts multiple customers on the same physical servers. Each customer's data and applications are isolated, but customers have no knowledge or control over the exact physical location of their resources. Which cloud characteristic does this describe?

Accepted Answer

Resource pooling. Resource pooling is the correct answer because the scenario describes a multi-tenant model where the cloud provider's physical and virtual resources are pooled to serve multiple customers, with isolation between tenants. Customers have no knowledge or control over the exact physical location of their resources, which is a defining characteristic of resource pooling as defined by NIST SP 800-145.

Answer

Rapid elasticity

Answer

On-demand self-service

Answer

Measured service

Question 12

A compliance administrator needs to ensure that any document containing a patient's health information (e.g., medical record number) is automatically encrypted and restricted to authorized users. The encryption should be enforced regardless of where the document is saved (SharePoint, OneDrive, or email). Which Microsoft Purview feature should they configure?

Accepted Answer

Auto-labeling policies with sensitivity labels. Auto-labeling policies with sensitivity labels are the correct choice because they can automatically apply encryption and access restrictions to documents containing sensitive data like medical record numbers, regardless of where the document is saved (SharePoint, OneDrive, or email). Sensitivity labels support persistent protection that travels with the file, enforcing encryption and authorized user restrictions even when the file is moved or copied. This meets the requirement for automatic, location-independent encryption and access control.

Answer

Information Rights Management (IRM)

Answer

Data Loss Prevention (DLP) policies

Answer

Retention labels

Question 13

A small business with 10 employees needs the desktop versions of Microsoft 365 apps (Word, Excel, PowerPoint) and 1 TB of cloud storage per user. They do not need business email because they use a separate provider. Which Microsoft 365 plan should they purchase?

Accepted Answer

Microsoft 365 Apps for Business. Microsoft 365 Apps for Business is the correct plan because it provides the desktop versions of Word, Excel, and PowerPoint along with 1 TB of OneDrive cloud storage per user, but does not include Exchange Online (business email). This matches the requirement exactly, as the customer uses a separate email provider and only needs the Office apps and storage.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 Business Premium

Question 14

During requirements gathering, an IT manager says the organization must see how many paid licenses are unused. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Available license count. The Available license count in the Microsoft 365 admin center allows administrators to view how many licenses have been purchased versus how many are assigned, directly revealing unused paid licenses. This is the core licensing management feature under 'Billing > Licenses' that tracks consumption and helps optimize costs.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 15

A business stakeholder asks how Microsoft 365 can help them check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and incident information for all Microsoft 365 services. It allows administrators and stakeholders to check known incidents, advisories, and historical uptime data, directly addressing the need to monitor service availability.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream