MS-900 Practice Test 13 — 15 Questions

Question 1

An administrator is reviewing a request from users who need to reset user passwords without assigning Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Password Administrator. The Password Administrator role in Microsoft Entra ID (formerly Azure AD) allows users to reset passwords for non-administrator users and manage service requests without granting the highly privileged Global Administrator role. This directly addresses the user request while adhering to the principle of least privilege, making it the most relevant concept for this scenario.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 2

A user wants to access their work files from a personal laptop without installing any Microsoft 365 Apps. Which web-based service allows them to view and edit documents in a browser?

Accepted Answer

Microsoft 365 for the web. Microsoft 365 for the web (formerly Office Web Apps) provides browser-based versions of Word, Excel, PowerPoint, and OneNote, enabling users to view and edit documents without installing any local applications. This service is accessed through a web browser on any device, including a personal laptop, and requires only an internet connection and a valid Microsoft 365 subscription.

Answer

Microsoft OneDrive

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Question 3

A company with 1,000 users currently has Microsoft 365 E3 licenses. They need to add advanced threat protection for email (including anti-phishing and anti-malware) and endpoint detection and response (EDR) for all devices. What is the most cost-effective licensing addition?

Accepted Answer

Microsoft 365 E5 Security add-on. The Microsoft 365 E5 Security add-on provides advanced threat protection (including anti-phishing and anti-malware for email via Defender for Office 365 Plan 2) and endpoint detection and response (EDR) via Microsoft Defender for Endpoint Plan 2, all without requiring a full E5 license upgrade. This is the most cost-effective solution for adding these specific security capabilities to existing E3 users.

Answer

Microsoft 365 E5 Compliance add-on

Answer

Upgrade all users to Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 1 standalone

Question 4

A security team needs to ensure that all Microsoft 365 administrative actions—such as creating user accounts or resetting passwords—are logged and searchable for at least 90 days. They also need to create custom alert rules for suspicious admin activity. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Audit (Standard). Microsoft Purview Audit (Standard) logs and retains all administrative actions (e.g., creating users, resetting passwords) for 90 days by default, meeting the retention requirement. It also supports creating custom alert rules for suspicious admin activity via the Microsoft 365 Defender portal, which queries the audit log. This makes it the correct solution for both logging and alerting on admin actions.

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Entra ID sign-in logs

Answer

Microsoft Defender for Cloud Apps

Question 5

An administrator is reviewing a request from users who need to reset user passwords without assigning Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assign least-privileged support or reader roles. The scenario requires granting support staff the ability to troubleshoot without tenant-wide change permissions, which directly maps to the principle of least privilege. In Microsoft 365, this is achieved by assigning a role like Helpdesk Administrator or a reader role (e.g., Global Reader), which provides read-only or limited administrative access without allowing modifications to tenant-wide settings. This aligns with the 'Describe Microsoft 365 pricing and support' domain, specifically the support and admin concepts.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 6

An HR manager needs to collect anonymous feedback from employees about a new benefits policy. They want the responses to be automatically summarized into charts and graphs. Which Microsoft 365 app is best suited for this task?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct choice because it is specifically designed for creating surveys and quizzes, with built-in support for anonymous responses and automatic generation of charts and graphs from collected data. The HR manager can create a feedback form, enable anonymous submissions, and view real-time summaries with visualizations directly within Forms, without needing additional tools.

Answer

Microsoft Excel

Answer

Microsoft Sway

Answer

Microsoft Power BI

Question 7

A company wants to reduce hardware maintenance costs by moving to the cloud. They need to maintain full control over the operating system, applications, and security configurations, but do not want to manage physical servers or data center facilities. Which cloud service model should they choose?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, allowing the company to deploy and manage their own operating systems, applications, and security configurations while offloading the physical hardware and data center management to the cloud provider. This model gives the highest level of control over the software stack without the burden of maintaining physical servers, aligning perfectly with the requirement to reduce hardware maintenance costs while retaining full administrative access.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

On-premises

Question 8

A company with 100 users has Microsoft 365 Business Basic licenses. They want to add Phone System and Audio Conferencing for all users to enable PSTN calling and dial-in capabilities. They wish to minimize additional costs. What is the most cost-effective licensing approach?

Accepted Answer

Add the Microsoft 365 Business Voice add-on for each user.. Microsoft 365 Business Voice is a cost-effective add-on specifically designed for Business Basic, Standard, or Premium subscribers to add Phone System and Audio Conferencing capabilities. It bundles both PSTN calling and dial-in features into a single license, avoiding the higher cost of upgrading to E3 or purchasing separate add-ons.

Answer

Upgrade all users to Microsoft 365 E3 and add Phone System and Audio Conferencing.

Answer

Purchase Phone System and Audio Conferencing as standalone add-ons separately.

Answer

Add the Microsoft Teams Phone Standard add-on.

Question 9

A compliance officer needs to automatically detect when employees share customers' personal data (e.g., social security numbers) via email and block such sharing. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to identify, monitor, and automatically protect sensitive data—such as social security numbers—across Microsoft 365 services, including Exchange Online. DLP policies can be configured with conditions that detect sensitive information types (e.g., U.S. Social Security Number) in email messages and apply actions like blocking the email from being sent. This directly meets the compliance officer's requirement to automatically detect and block sharing of customers' personal data via email.

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Audit

Question 10

A project team needs a centralized workspace that includes a shared calendar for deadlines, a document library for storing deliverables, and a task list with assignments. They also want threaded discussions about each item. Which Microsoft 365 service provides this integrated experience out of the box?

Accepted Answer

Microsoft 365 Groups. Microsoft 365 Groups is the correct answer because it provides a unified, out-of-the-box workspace that includes a shared calendar, document library (via connected SharePoint), task list (via Planner or To Do), and a group mailbox with threaded conversations. Unlike standalone services, a Microsoft 365 Group bundles these resources together automatically when created, offering the integrated experience described without requiring manual configuration.

Answer

Microsoft Teams

Answer

SharePoint Online

Answer

Microsoft Outlook

Question 11

An administrator is reviewing a request from users who need to avoid overprovisioning for a seasonal workload. Cloud concept or benefit best matches this requirement?

Accepted Answer

Rapid elasticity. Rapid elasticity is a core cloud computing characteristic defined by NIST (SP 800-145) that allows resources to scale out and in automatically based on demand. For a seasonal workload, this means the cloud can provision additional compute or storage capacity during peak periods and release it when demand drops, preventing overprovisioning and optimizing costs.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Answer

Microsoft Planner

Question 12

A company is choosing a Microsoft 365 plan for 150 users who need email, file storage, and Teams. They also need basic compliance features such as data retention policies and eDiscovery. Which TWO plans meet these requirements?

Accepted Answer

Microsoft 365 E3. Microsoft 365 E3 includes Exchange Online, SharePoint Online, and Teams, plus advanced compliance features like data retention policies and eDiscovery (Standard). Microsoft 365 Business Premium also includes these core services and compliance capabilities, making both suitable for 150 users needing email, file storage, Teams, and basic compliance.

Answer

Microsoft 365 E1

Answer

Microsoft 365 E5

Answer

Microsoft 365 Business Basic

Question 13

A compliance administrator needs to block sharing of documents containing credit card numbers. Which Microsoft 365 capability is the best fit?

Accepted Answer

Data Loss Prevention policies. Data Loss Prevention (DLP) policies in Microsoft 365 are specifically designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. By configuring a DLP policy with a built-in sensitive info type for credit card numbers, the administrator can block users from sharing documents containing that data, either by preventing the action or triggering a notification. This directly addresses the compliance requirement to block sharing of documents with credit card numbers.

Answer

Microsoft Teams live events

Answer

Microsoft Bookings

Answer

OneDrive sync client

Question 14

A compliance team needs to prevent employees from copying sensitive data (such as financial records or customer PII) to USB drives and other removable media from their Windows 10/11 devices. When a user attempts to copy data to an unapproved USB device, the action should be blocked and an alert should be generated. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) with device policies. Microsoft Purview Data Loss Prevention (DLP) with device policies is the correct solution because it is specifically designed to monitor and control actions like copying sensitive data to removable media on Windows 10/11 endpoints. DLP device policies can block the copy action to unapproved USB devices and generate alerts when a policy violation occurs, directly addressing the compliance team's requirement to prevent data exfiltration via USB drives.

Answer

Microsoft Purview Data Lifecycle Management (retention policies)

Answer

Microsoft Purview Information Protection (sensitivity labels)

Answer

Microsoft Purview eDiscovery (Standard or Premium)

Question 15

A tenant administrator is advising a department that wants to review upcoming Microsoft 365 changes and recommended admin actions. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Message center. The Message center in the Microsoft 365 admin center is the dedicated hub for reviewing upcoming changes, new features, and recommended admin actions. It provides service advisories, planned changes, and action-required notifications, making it the most relevant concept for a tenant administrator advising a department on upcoming Microsoft 365 changes.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard