MS-900 Practice Test 14 — 15 Questions

Question 1

An organization must comply with GDPR and needs to respond to a data subject access request (DSAR) within 30 days. Which Microsoft Purview solution helps search for personal data across Microsoft 365?

Accepted Answer

eDiscovery (Premium). eDiscovery (Premium) in Microsoft Purview is purpose-built for identifying, collecting, and reviewing content across Microsoft 365 workloads (Exchange, SharePoint, OneDrive, Teams) in response to legal and regulatory requests like GDPR DSARs. It supports keyword searches, custodian-based holds, and case management workflows that map directly to the DSAR process. Its search capabilities span mailboxes, sites, and chats, which is exactly what a DSAR requires to locate all personal data tied to a data subject.

Answer

Data Loss Prevention (DLP)

Answer

Records Management

Answer

Audit (Premium)

Question 2

A hospital must store patient medical records on-premises to comply with strict data sovereignty regulations. However, they also want to use advanced analytics tools hosted on a public cloud platform. Which cloud deployment model best meets their needs?

Accepted Answer

Hybrid cloud. (Hybrid cloud) is correct because it allows the hospital to keep sensitive patient medical records on-premises to satisfy strict data sovereignty regulations, while leveraging public cloud services for advanced analytics. This model combines private and public cloud resources, enabling data to remain compliant without sacrificing access to cloud-hosted analytics tools.

Answer

Private cloud

Answer

Public cloud

Answer

Community cloud

Question 3

A financial services company uses Microsoft 365 E5 and wants to implement a data loss prevention (DLP) policy that blocks users from sharing credit card numbers via email and Teams messages. The compliance team also wants to generate reports on policy violations. They are considering using Microsoft Purview. Which approach should they take to meet these requirements with minimum administrative overhead?

Accepted Answer

Create a unified DLP policy in the Microsoft Purview compliance portal that covers Exchange and Teams.. A unified DLP policy in Microsoft Purview covers Exchange Online, Teams, SharePoint, and OneDrive from a single policy definition, so credit card numbers (a built-in sensitive information type) can be blocked across both email and Teams chat with one configuration. This minimizes administrative overhead because there is no need to duplicate rules across separate admin centers, and violation reports are consolidated in the Purview compliance portal.

Answer

Create separate DLP policies in Exchange admin center and Teams admin center.

Answer

Use Microsoft Sentinel to create analytics rules that detect sharing of credit card numbers.

Answer

Use Microsoft Defender for Cloud Apps to create session policies for email and Teams.

Question 4

A company wants to enable its sales team to automatically generate meeting summaries and action items from Microsoft Teams conversations. Which Microsoft 365 app or feature provides this capability?

Accepted Answer

Microsoft Copilot for Microsoft 365. Microsoft Copilot for Microsoft 365 is an AI-powered assistant integrated across Microsoft 365 apps, including Microsoft Teams. It can automatically generate meeting summaries, action items, and key discussion points from Teams conversations using advanced natural language processing. This capability is part of Copilot's intelligent recap and meeting productivity features, directly addressing the sales team's need.

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 5

A company with 100 Microsoft 365 Business Premium users needs to add advanced compliance features: eDiscovery (Premium) and Communication Compliance. They want to keep their existing Business Premium subscriptions to retain current capabilities. What is the most cost-effective licensing approach?

Accepted Answer

Purchase Microsoft 365 E5 Compliance add-on for all 100 users. Microsoft 365 Business Premium already includes the base compliance features, and the Microsoft 365 E5 Compliance add-on provides the advanced capabilities (eDiscovery Premium and Communication Compliance) without requiring a full license upgrade. This add-on is the most cost-effective approach as it adds only the needed compliance features to existing Business Premium subscriptions.

Answer

Upgrade all 100 users from Business Premium to Microsoft 365 E5

Answer

Purchase Microsoft 365 E5 eDiscovery and Audit add-on

Answer

Purchase Microsoft 365 E5 Compliance and Information Protection add-on

Question 6

Wide World Importers is a retail company with 2,000 users. They use Microsoft 365 E3. They need to: (1) Deploy a new employee experience platform that integrates with Microsoft 365 and provides personalized news, tasks, and learning; (2) Enable employees to create low-code apps to automate approvals and workflows without custom development; (3) Provide a secure way for employees to store and share company files with granular permissions; (4) Allow IT to manage mobile devices and applications centrally. Which Microsoft 365 services should they use?

Accepted Answer

Viva Connections, Power Apps and Power Automate, SharePoint Online, Microsoft Intune. Viva Connections delivers the employee experience platform with personalized news, tasks, and learning integrated into Microsoft 365; Power Apps and Power Automate enable low-code app creation and workflow automation; SharePoint Online provides secure file storage and sharing with granular permissions; and Microsoft Intune delivers centralized mobile device and application management (MDM/MAM). All four requirements map exactly to these services, which are included in or available with Microsoft 365 E3.

Answer

Viva Insights, Power Apps and Power Automate, SharePoint Online, Microsoft 365 Defender

Answer

Microsoft Teams, Power Apps and Power Automate, OneDrive, Microsoft Entra ID

Answer

Viva Connections, Power BI, OneDrive, Microsoft Intune

Question 7

Which TWO are characteristics of the public cloud deployment model?

Accepted Answer

Services are owned by a third-party provider. Option A is correct because in the public cloud deployment model the cloud services and underlying infrastructure are owned, managed, and operated by a third-party cloud provider such as AWS, Microsoft Azure, or Google Cloud, and delivered to customers over the internet. Option E is correct because public cloud infrastructure is multi-tenant: compute, storage, and network resources are pooled and shared among many different organizations (tenants), with logical isolation enforced by the provider. Option B is incorrect because use by a single organization describes the private cloud model, not the public cloud. Option C is incorrect because public cloud scalability is effectively elastic and limited only by the provider's vast resource pools, not by a customer's existing hardware. Option D is incorrect because on-premises infrastructure is characteristic of private or traditional data-center deployments, whereas public cloud infrastructure resides in the provider's data centers.

Answer

Services are used by a single organization

Answer

Scalability is limited to existing hardware

Answer

Infrastructure is located on-premises

Question 8

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

Accepted Answer

Microsoft 365 Copilot. Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Answer

Microsoft Viva Insights

Answer

Microsoft Editor

Answer

Microsoft Power Automate

Question 9

An organization uses Microsoft Teams and wants to record meetings for compliance purposes. Which Microsoft 365 service provides meeting recording with automatic transcription?

Accepted Answer

Microsoft Teams meeting recording. Microsoft Teams meeting recording with automatic transcription is a native feature of Teams itself, not a separate service. When a meeting is recorded, Teams stores the recording in OneDrive or SharePoint, but the recording and transcription capabilities are part of the Teams meeting experience. Option B is correct because Teams meeting recording directly provides the recording and automatic transcription for compliance purposes.

Answer

Microsoft OneDrive

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 10

A compliance-aware administrator is selecting the right Microsoft 365 capability to add and remove capacity quickly when demand changes. Cloud concept or benefit best matches this requirement?

Accepted Answer

Rapid elasticity. Rapid elasticity is a core cloud computing concept defined by NIST (SP 800-145) that allows resources to be provisioned and released automatically in response to demand. In Microsoft 365, this is demonstrated by the ability to add or remove user licenses (e.g., via the Microsoft 365 admin center or PowerShell) on a per-seat basis, scaling capacity up or down almost instantly without manual infrastructure changes.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 11

Drag and drop the steps to enable Microsoft 365 audit logging in the compliance center into the correct order.

Accepted Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.. The correct sequence to enable Microsoft 365 audit logging in the compliance center is: first sign in to the Microsoft 365 Compliance center, then navigate to the Audit solution, click 'Start recording user and admin activity' to enable auditing, and finally wait for the audit log to become active (which may take up to 24 hours). This order ensures that all prerequisites are met and the feature is properly activated.

Answer

Step 1: Navigate to the Audit solution. Step 2: Sign in to the Microsoft 365 Compliance center. Step 3: Click 'Start recording user and admin activity'. Step 4: Wait for the audit log to be enabled.

Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Click 'Start recording user and admin activity'. Step 3: Navigate to the Audit solution. Step 4: Wait for the audit log to be enabled.

Answer

Step 1: Sign in to the Microsoft 365 Compliance center. Step 2: Navigate to the Audit solution. Step 3: Wait for the audit log to be enabled. Step 4: Click 'Start recording user and admin activity'.

Question 12

A company uses a cloud provider that hosts multiple customers on the same physical servers. Each customer's data and applications are isolated, but customers have no knowledge or control over the exact physical location of their resources. Which cloud characteristic does this describe?

Accepted Answer

Resource pooling. Resource pooling is the correct answer because the scenario describes a multi-tenant model where the cloud provider's physical and virtual resources are pooled to serve multiple customers, with isolation between tenants. Customers have no knowledge or control over the exact physical location of their resources, which is a defining characteristic of resource pooling as defined by NIST SP 800-145.

Answer

Rapid elasticity

Answer

On-demand self-service

Answer

Measured service

Question 13

Which TWO are features of Microsoft Entra ID? (Choose two.)

Accepted Answer

Identity and access management. Option B (Identity and access management) is correct because Microsoft Entra ID is Microsoft's cloud-based identity provider, delivering authentication, authorization, SSO, conditional access, and directory services for users, groups, and applications. Option D (Multi-Factor Authentication) is correct because Entra ID natively provides Microsoft Entra multifactor authentication, requiring a second verification factor such as the Microsoft Authenticator app, SMS, or a FIDO2 key during sign-in. Option A (Mobile device management) does not belong because MDM is delivered by Microsoft Intune, not Entra ID, even though Intune integrates with Entra ID for identity. Option C (Data Loss Prevention policies) does not belong because DLP is a Microsoft Purview compliance capability that protects sensitive data across Exchange, SharePoint, and endpoints. Option E (Sensitivity labels) does not belong because sensitivity labels are also a Microsoft Purview Information Protection feature used to classify and protect content, not an Entra ID identity feature.

Answer

Mobile device management

Answer

Data Loss Prevention policies

Answer

Sensitivity labels

Question 14

A compliance-aware administrator is selecting the right Microsoft 365 capability to encrypt email messages sent to internal or external recipients. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (B) is the correct choice because it is the dedicated Microsoft 365 service that provides encryption for email messages sent to both internal and external recipients. It leverages Azure Rights Management (Azure RMS) to protect messages, ensuring only intended recipients can decrypt and read them, which directly meets the compliance requirement for email encryption.

Answer

Microsoft Stream

Answer

Microsoft Planner

Answer

Microsoft Forms

Question 15

A team wants to build a custom business app to track inventory with minimal custom code. They need a cloud-based database that can store structured data and is tightly integrated with the low-code app platform. Which Microsoft 365 service should they use as the database?

Accepted Answer

Microsoft Dataverse. Microsoft Dataverse is the correct choice because it is a cloud-based, scalable data service designed specifically for Power Platform and Microsoft 365 low-code app development. It stores structured data in tables with rich metadata, supports relationships, business logic, and security at the row/column level, and integrates natively with Power Apps, Power Automate, and Power BI. This tight integration enables building custom business apps with minimal code, exactly as required for inventory tracking.

Answer

Microsoft SharePoint Online list

Answer

Microsoft Excel Online

Answer

Microsoft Forms