MS-900 Practice Test 15 — 15 Questions

Question 1

A department head asks which Microsoft 365 option should be used to access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

Accepted Answer

Broad network access. Broad network access is a core NIST cloud characteristic that enables resources to be accessed over the internet by standard protocols (e.g., HTTPS, TLS) from a wide range of client devices such as laptops, tablets, and phones. This directly matches the requirement for accessing cloud resources from multiple device types over the internet.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Question 2

Your company is experiencing high costs for maintaining an on-premises email server and wants to reduce IT management overhead. Which Microsoft 365 service provides enterprise-grade email with minimal infrastructure management?

Accepted Answer

Exchange Online. Exchange Online is Microsoft's cloud-hosted email service that eliminates the need for on-premises Exchange servers, providing enterprise-grade email with minimal infrastructure management. It includes built-in security, compliance, and high availability, and is part of most Microsoft 365 subscriptions. By moving to Exchange Online, the company offloads server maintenance, patching, and scaling to Microsoft, reducing IT overhead and costs.

Answer

Microsoft Entra ID

Answer

SharePoint Online

Answer

Microsoft Intune

Question 3

A company uses a cloud service where administrators can add or remove virtual machine instances through a web portal without contacting the provider. The provider bills only for the exact resources consumed. Which cloud computing characteristic does this scenario best demonstrate?

Accepted Answer

On-demand self-service. On-demand self-service is the cloud characteristic where consumers can provision capabilities, such as VM instances, automatically through a web portal or API without requiring human interaction with the service provider. The scenario explicitly states administrators add or remove VMs via a web portal without contacting the provider, which is the textbook definition of on-demand self-service per NIST SP 800-145.

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling

Question 4

During requirements gathering, an IT manager says the organization must see how many paid licenses are unused. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Available license count. The Available license count in the Microsoft 365 admin center allows administrators to view how many licenses have been purchased versus how many are assigned, directly revealing unused paid licenses. This is the core licensing management feature under 'Billing > Licenses' that tracks consumption and helps optimize costs.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 5

A company has 100 Microsoft 365 E3 users. They need to add advanced threat protection (Microsoft Defender for Microsoft 365 Plan 2) and advanced compliance (eDiscovery Premium) for all users. They want to minimize additional costs while keeping their existing E3 subscriptions. What is the most cost-effective licensing strategy?

Accepted Answer

Purchase both the Microsoft 365 E5 Compliance add-on and the Microsoft 365 E5 Security add-on. The Microsoft 365 E5 Security add-on provides Microsoft Defender for Office 365 Plan 2, and the Microsoft 365 E5 Compliance add-on provides eDiscovery Premium. Purchasing both add-ons for existing E3 users delivers the required advanced threat protection and advanced compliance capabilities without the full cost of upgrading to E5, making it the most cost-effective strategy.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase only the Microsoft 365 E5 Compliance add-on

Answer

Purchase only the Microsoft 365 E5 Security add-on

Question 6

A small business with 10 employees needs the desktop versions of Microsoft 365 apps (Word, Excel, PowerPoint) and 1 TB of cloud storage per user. They do not need business email because they use a separate provider. Which Microsoft 365 plan should they purchase?

Accepted Answer

Microsoft 365 Apps for Business. Microsoft 365 Apps for Business is the correct plan because it provides the desktop versions of Word, Excel, and PowerPoint along with 1 TB of OneDrive cloud storage per user, but does not include Exchange Online (business email). This matches the requirement exactly, as the customer uses a separate email provider and only needs the Office apps and storage.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 Business Premium

Question 7

A company wants to ensure that only managed and compliant devices can access corporate email in Microsoft 365. Which Microsoft Entra ID capability should they configure?

Accepted Answer

Conditional Access. Conditional Access in Microsoft Entra ID is the policy engine that evaluates signals like device compliance and management state, then grants or blocks access to Microsoft 365 services such as Exchange Online. Configuring a policy that requires a compliant or hybrid Microsoft Entra ID joined device ensures only managed, compliant devices can reach corporate email. This is the precise Entra ID capability designed for that enforcement.

Answer

Microsoft Authenticator

Answer

Privileged Identity Management

Answer

Identity Protection

Question 8

Contoso Ltd. is a global consulting firm with 5,000 employees. They use Microsoft 365 E5 and have recently deployed Microsoft Copilot for Microsoft 365 to enhance productivity. The IT team wants to ensure that users' interactions with Copilot are compliant with the company's data retention policies. They need to retain all Copilot interactions for 7 years for legal reasons. Which Microsoft Purview solution should the IT team implement?

Accepted Answer

Create retention policies for Copilot interactions. Retention policies in Microsoft Purview can be applied to Copilot interactions stored in Exchange Online and SharePoint Online to retain them for 7 years. Option A is incorrect because sensitivity labels classify data but do not enforce retention. Option C is incorrect because eDiscovery is for searching and exporting content, not setting retention. Option D is incorrect because Data Loss Prevention (DLP) policies prevent data loss but do not retain data for legal hold.

Answer

Apply sensitivity labels to Copilot data

Answer

Set up eDiscovery cases for Copilot data

Answer

Configure Data Loss Prevention (DLP) policies

Question 9

A company is evaluating cloud service models for running custom line-of-business applications. They need full control over the operating system and applications, but want to avoid managing physical hardware. Which cloud service model should they choose?

Accepted Answer

Infrastructure as a Service (IaaS). IaaS provides virtualized compute, storage, and networking where the customer retains full control over the operating system, middleware, and applications while the provider manages the physical hardware, hypervisor, and datacenter. Because the requirement is 'full control over OS and applications' without managing physical hardware, IaaS is the exact fit — the customer patches the OS and deploys their own line-of-business software on provider-managed VMs.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 10

Your company is moving to Microsoft 365 and wants to reduce capital expenditure (CapEx) on hardware and software licenses. Which cloud benefit is most directly related to this goal?

Accepted Answer

Consumption-based pricing. Consumption-based pricing (also called pay-as-you-go) directly reduces capital expenditure because organizations no longer purchase hardware or perpetual software licenses upfront; instead they pay only for the resources and licenses they consume. This shifts spending from CapEx to OpEx, which is the core financial benefit the company is seeking. Scalability, agility, and security are cloud benefits but do not directly address the CapEx reduction goal.

Answer

Scalability

Answer

Agility

Answer

Security

Question 11

A business stakeholder asks how Microsoft 365 can help them periodically review group memberships and application access. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Access reviews. Access reviews in Microsoft Entra ID (formerly Azure AD) allow administrators to periodically review and certify group memberships and application access. This capability directly addresses the stakeholder's requirement by automating recurring attestation workflows, ensuring that only authorized users retain access. It is part of Microsoft's identity governance framework, not a general productivity or media tool.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 12

Fabrikam Inc. is a technology company that uses Microsoft 365 E5. They have implemented Microsoft Defender XDR to monitor for threats. The security team wants to receive alerts when a user is compromised, such as when a user's credentials are used from an unusual location. They also want to automatically block the user from signing in until the risk is mitigated. You need to configure a solution that automatically detects and responds to such identity risks. What should you configure?

Accepted Answer

Configure Identity Protection in Microsoft Entra ID to detect risky sign-ins and enable the 'User risk policy' to automatically block high-risk users.. Microsoft Entra ID Identity Protection detects risky sign-ins and user risk, and allows configuring risk policies to automatically block or require password change for high-risk users. The 'User risk policy' can block access when user risk is high, which meets the requirement to automatically block compromised users. This is the native solution for identity risk detection and response.

Answer

Enable Microsoft Defender for Cloud Apps to monitor user activities.

Answer

Deploy Microsoft Sentinel and create analytics rules to detect and respond to identity threats.

Answer

Create a Conditional Access policy that requires MFA for all sign-ins.

Question 13

A help desk lead is documenting the correct Microsoft 365 approach to preserve relevant mailboxes and SharePoint content during a legal case. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview eDiscovery hold. Microsoft Purview eDiscovery hold is the correct capability because it allows organizations to place legal holds on mailboxes, SharePoint sites, and other content sources to preserve data relevant to a legal case. This ensures that content cannot be altered or deleted until the hold is released, meeting compliance and eDiscovery requirements.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Planner

Question 14

A company uses Microsoft Purview to monitor for potential data security incidents. They want to automatically detect and remediate activities like downloading large amounts of data to a personal device. Which solution should they configure?

Accepted Answer

Insider Risk Management. Insider Risk Management is the correct solution because it is specifically designed to detect and remediate risky user activities that could lead to data security incidents, such as downloading large amounts of data to a personal device. It uses machine learning and behavioral analytics to identify anomalous patterns and can trigger automated remediation actions like blocking the activity or notifying the user.

Answer

Data Loss Prevention (DLP)

Answer

Audit

Answer

eDiscovery

Question 15

A project team needs a central location to store and collaborate on project documents, with version history, co-authoring, and the ability to share files securely with external partners. Which Microsoft 365 service provides these capabilities?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it provides a centralized document library with version history, real-time co-authoring via Office Online integration, and granular external sharing controls through secure links or direct invitations. These capabilities align directly with the project team's need for collaborative document management and secure external partner access.

Answer

Exchange Online

Answer

Microsoft Stream

Answer

Microsoft Viva Engage