MS-900 Practice Test 17 — 15 Questions

Question 1

A marketing team wants to quickly create a visually appealing report from data stored in Excel and share it with stakeholders via a web browser. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct choice because it is designed specifically for creating interactive, visually appealing reports and dashboards from data sources like Excel. It allows users to publish these reports to the Power BI service, where stakeholders can access them via a web browser without needing to install any software.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft Excel

Question 2

Drag and drop the steps to configure a data loss prevention (DLP) policy in the Microsoft 365 compliance center into the correct order.

Accepted Answer

Step 1: Select a DLP template or start with a custom policy. Step 2: Choose the locations (Exchange, SharePoint, OneDrive, Teams) where the policy applies. Step 3: Define the policy rules with conditions and actions.. DLP policies are created in the compliance center by selecting a template, locations, and rules.

Answer

Step 1: Choose locations (Exchange, SharePoint, OneDrive, Teams). Step 2: Select a DLP template or start with a custom policy. Step 3: Define the policy rules with conditions and actions.

Answer

Step 1: Define the policy rules with conditions and actions. Step 2: Select a DLP template or start with a custom policy. Step 3: Choose locations (Exchange, SharePoint, OneDrive, Teams).

Answer

Step 1: Select a DLP template or start with a custom policy. Step 2: Define the policy rules with conditions and actions. Step 3: Choose locations (Exchange, SharePoint, OneDrive, Teams).

Question 3

During requirements gathering, an IT manager says the organization must classify files as Confidential and apply encryption to the most sensitive content. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Sensitivity labels. Sensitivity labels in Microsoft Purview Information Protection allow organizations to classify files as Confidential and apply encryption automatically or manually. This capability meets the requirement to protect the most sensitive content by enforcing access controls and encryption policies based on the label.

Answer

Microsoft Stream

Answer

Microsoft Planner

Answer

Microsoft Forms

Question 4

A nonprofit organization with 50 users needs to use Microsoft 365 for email, file storage, and online versions of Office apps. They have a very limited budget. Which Microsoft 365 plan should they consider first?

Accepted Answer

Microsoft 365 Nonprofit Business Basic. Microsoft 365 Nonprofit Business Basic (Option D) is the correct choice because it provides email (Exchange Online), file storage (OneDrive and SharePoint), and online versions of Office apps (Word, Excel, etc.) at no cost for eligible nonprofit organizations with up to 300 users. This plan is specifically designed for nonprofits with limited budgets, offering the required functionality without the expense of paid plans.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Premium

Answer

Office 365 E3

Question 5

A financial services firm uses Microsoft 365 and must retain all business communications for 7 years to comply with SEC regulations. They also need to prevent users from permanently deleting emails. Which Microsoft Purview feature should they implement?

Accepted Answer

Retention policies and retention labels. Retention policies and retention labels in Microsoft Purview allow organizations to retain content for a specified period (e.g., 7 years) and prevent permanent deletion by users. They can be applied to Exchange email, SharePoint, OneDrive, and Teams, ensuring compliance with SEC regulations. This feature also supports disposition review and legal hold scenarios.

Answer

Sensitivity labels

Answer

eDiscovery (Standard)

Answer

Data Loss Prevention (DLP) policies

Question 6

An e-commerce company hosts its website on a public cloud IaaS platform. The site experiences varying traffic throughout the year. The cloud provider automatically adds more virtual servers during peak traffic and removes them when demand drops. The company only pays for the resources used during each period. Which two cloud characteristics are demonstrated? (Choose two.)

Accepted Answer

Rapid elasticity. Rapid elasticity is demonstrated because the cloud provider automatically scales virtual servers up or down in response to varying traffic, which is a key characteristic of cloud computing where resources can be provisioned and released elastically to match demand. Measured service is demonstrated because the company only pays for the resources used during each period, meaning the provider meters resource usage (e.g., CPU hours, memory, bandwidth) and bills accordingly, which is a core attribute of cloud services.

Answer

On-demand self-service

Answer

Resource pooling

Question 7

Your company uses Microsoft Defender for Office 365 and wants to prevent users from clicking malicious links in email. A user reports that a known phishing link was not blocked. Which step should you take to investigate?

Accepted Answer

Search in Threat Explorer for the URL and review the verdict.. Threat Explorer in Microsoft Defender for Office 365 provides detailed information about email threats, including URLs. Searching for the specific URL allows you to see if it was detected, what verdict was assigned, and why it might not have been blocked. This is the most direct way to investigate why a known phishing link was not blocked.

Answer

Check the Microsoft Secure Score for recommendations.

Answer

Review the Safe Links policy to ensure it is enabled.

Answer

Run an attack simulation to test the link.

Question 8

A user reports receiving a phishing email in their Outlook inbox. The organization uses Microsoft Defender for Office 365. Which feature should the user use to report the email to the security team?

Accepted Answer

Use the Report Message add-in in Outlook. The Report Message add-in in Outlook is the user-facing tool that lets users report suspicious emails directly to the security team with a single click. Reported messages are sent to Microsoft for analysis and can be routed to the organization's security operations team via the Microsoft 365 Defender portal's user-reported settings. This is the intended workflow for phishing reports in Defender for Office 365 environments.

Answer

Block the sender in Outlook

Answer

Submit the email to the Microsoft 365 Defender portal

Answer

Enable Safe Links in Outlook

Question 9

Your organization is deploying Microsoft 365 for a subsidiary with 1,000 users. The subsidiary needs to be billed separately. Which licensing model should you use?

Accepted Answer

Create separate subscriptions in the same tenant with different billing profiles. The correct approach is to create separate subscriptions within the same Microsoft 365 tenant, each with its own billing profile. This allows the subsidiary to be billed separately while still benefiting from centralized administration, shared services (like Microsoft Entra ID), and unified management. Billing profiles in Microsoft 365 let you assign different payment methods and invoice recipients for different subscriptions, so the subsidiary can have its own billing without needing a separate tenant.

Answer

Create a separate Microsoft 365 tenant for the subsidiary

Answer

Use a Microsoft Enterprise Agreement for the entire organization

Answer

Create a single Microsoft 365 tenant with multiple subscriptions

Question 10

A law firm uses Microsoft 365 and wants to ensure that only authorized users can access client files stored in SharePoint Online. They also need to track when these files are accessed. Which combination of features should they use?

Accepted Answer

Sensitivity labels with encryption and Microsoft Purview auditing.. Sensitivity labels with encryption enforce access control at the item level by encrypting SharePoint files so only authorized identities can open them, and Microsoft Purview auditing logs every access event for tracking. Together they satisfy both the access restriction and the access-tracking requirements.

Answer

Conditional Access policies and Privileged Identity Management (PIM).

Answer

eDiscovery cases and Content search.

Answer

Data Loss Prevention (DLP) policies and Microsoft Defender for Cloud Apps.

Question 11

A compliance administrator needs to assess compliance posture against standards and improvement actions. Which Microsoft 365 capability is the best fit?

Accepted Answer

Microsoft Purview Compliance Manager. Microsoft Purview Compliance Manager is the correct choice because it provides a comprehensive dashboard for assessing an organization's compliance posture against standards like ISO 27001, NIST, and GDPR, and it offers actionable improvement actions with step-by-step guidance. It automatically tracks controls, assigns scores, and integrates with Microsoft Secure Score to help administrators prioritize remediation efforts.

Answer

OneDrive sync client

Answer

Microsoft Teams live events

Answer

Microsoft Bookings

Question 12

A user wants to access their work files from a personal laptop without installing any Microsoft 365 Apps. Which web-based service allows them to view and edit documents in a browser?

Accepted Answer

Microsoft 365 for the web. Microsoft 365 for the web (formerly Office Web Apps) provides browser-based versions of Word, Excel, PowerPoint, and OneNote, enabling users to view and edit documents without installing any local applications. This service is accessed through a web browser on any device, including a personal laptop, and requires only an internet connection and a valid Microsoft 365 subscription.

Answer

Microsoft OneDrive

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Question 13

A field service team needs a mobile-friendly app that allows technicians to view customer information from a central database, log completed tasks, and capture photos on-site. The IT department has limited development resources and wants to build this app quickly without writing extensive code. Which Microsoft 365 app is best suited for this requirement?

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is the correct choice because it enables rapid development of custom mobile-friendly apps with minimal code, allowing the field service team to view customer data from a central database (e.g., Dataverse or SharePoint), log completed tasks, and capture photos on-site. Its low-code platform provides pre-built connectors and templates that directly address the need for a data-driven, mobile-first application without extensive development resources.

Answer

Microsoft Forms

Answer

Microsoft Power Automate

Answer

Microsoft Power BI

Question 14

Your organization uses Microsoft 365 Business Premium. You need to protect users from phishing attacks by blocking malicious links in real-time when they click them in emails. Which feature provides this capability?

Accepted Answer

Microsoft Defender for Office 365 Safe Links. Safe Links in Microsoft Defender for Office 365 provides real-time protection by checking links in emails and documents at the time of click. It blocks malicious links and can also detonate URLs to analyze for phishing. This directly matches the requirement to block malicious links in real-time when clicked.

Answer

Microsoft Defender for Office 365 Safe Attachments

Answer

Exchange Online Protection (EOP) anti-spam policy

Answer

Microsoft Defender XDR

Question 15

During a Microsoft 365 planning workshop, keep a workload on-premises while using Microsoft cloud collaboration services. Cloud concept or benefit best matches this requirement?

Accepted Answer

Hybrid cloud. A hybrid cloud model is the correct answer because it explicitly describes a scenario where an organization keeps certain workloads on-premises while integrating with Microsoft cloud collaboration services like Microsoft 365. This allows for a unified management plane, identity federation via Microsoft Entra Connect, and seamless data synchronization between on-premises infrastructure and cloud services such as Exchange Online, SharePoint Online, or Teams.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)