MS-900 Practice Test 2 — 10 Questions

Question 1

A security administrator needs to audit all activities related to a specific user in Exchange Online, SharePoint Online, and Microsoft Entra ID for the past 90 days. They also need to export the audit log as a CSV file. Which Microsoft Purview solution provides this capability without additional licensing beyond Microsoft 365 E3?

Accepted Answer

Microsoft Purview Audit (Standard). Microsoft Purview Audit (Standard) is included with Microsoft 365 E3 and provides the ability to search and export audit logs for user activities across Exchange Online, SharePoint Online, and Microsoft Entra ID for up to 90 days. This meets the administrator's requirement without needing additional licensing.

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview eDiscovery (Standard)

Answer

Microsoft Purview Content Search

Question 2

A compliance administrator needs to block sharing of documents containing credit card numbers. Which Microsoft 365 capability is the best fit?

Accepted Answer

Data Loss Prevention policies. Data Loss Prevention (DLP) policies in Microsoft 365 are specifically designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. By configuring a DLP policy with a built-in sensitive info type for credit card numbers, the administrator can block users from sharing documents containing that data, either by preventing the action or triggering a notification. This directly addresses the compliance requirement to block sharing of documents with credit card numbers.

Answer

Microsoft Teams live events

Answer

Microsoft Bookings

Answer

OneDrive sync client

Question 3

A global company needs to ensure that only employees in the 'HR' security group can access a specific set of HR documents stored in SharePoint. If a user outside the group attempts to view or copy the content, it must be blocked. The protection must persist even if someone downloads the files and shares them externally, or if the files are saved to a personal device. Which Microsoft Purview solution should be used?

Accepted Answer

Sensitivity labels with encryption and permission settings. Sensitivity labels with encryption and permission settings are the correct solution because they allow you to apply persistent protection that travels with the file, regardless of where it is stored or shared. By configuring a sensitivity label to restrict access to only members of the 'HR' security group and enabling encryption, the protection remains intact even if the file is downloaded, saved to a personal device, or shared externally. This meets the requirement for persistent access control that blocks unauthorized viewing or copying.

Answer

Data Loss Prevention (DLP) policy

Answer

Microsoft Entra ID Conditional Access

Answer

Microsoft Defender for Cloud Apps session policy

Question 4

A non-profit organization with 100 users needs business-grade email, desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user. They are eligible for non-profit pricing. Which Microsoft 365 plan meets these requirements at the lowest cost?

Accepted Answer

Microsoft 365 Business Standard (Nonprofit). Microsoft 365 Business Standard (Nonprofit) is the lowest-cost plan that includes business-grade email (Exchange Online), desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user (OneDrive for Business). Microsoft 365 Business Basic (Nonprofit) lacks the desktop Office apps, while Business Premium and E3 include additional security and compliance features that increase cost beyond the stated requirements.

Answer

Microsoft 365 Business Basic (Nonprofit)

Answer

Microsoft 365 Business Premium (Nonprofit)

Answer

Microsoft 365 E3 (Nonprofit)

Question 5

A compliance-aware administrator is selecting the right Microsoft 365 capability to evaluate Microsoft 365 before purchasing. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

A Microsoft 365 trial subscription. A Microsoft 365 trial subscription is the correct choice because it allows an administrator to evaluate the full functionality of Microsoft 365 before making a purchase, directly addressing the requirement to 'evaluate Microsoft 365 before purchasing.' This aligns with the 'Describe Microsoft 365 pricing and support' domain, as trial subscriptions are a key licensing and evaluation concept. Other options like Stream, Whiteboard, and Forms are individual services within Microsoft 365, not mechanisms for pre-purchase evaluation.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 6

A non-profit organization with 300 users currently uses Microsoft 365 Business Basic. They want to add Microsoft Defender for Office 365 (Plan 1) and endpoint management capabilities using Microsoft Intune. They are eligible for non-profit pricing. What is the most cost-effective way to obtain these features?

Accepted Answer

Upgrade to Microsoft 365 Business Premium. Microsoft 365 Business Premium includes both Microsoft Defender for Office 365 (Plan 1) and Microsoft Intune (for endpoint management) at no additional cost, and with non-profit pricing it is the most cost-effective option. Upgrading from Business Basic to Business Premium provides all required features in a single subscription, avoiding the need for separate add-ons or higher-tier enterprise plans.

Answer

Switch to Microsoft 365 E3 licenses

Answer

Add Microsoft 365 E5 Security add-on

Answer

Add Microsoft 365 Business Extra File Storage

Question 7

A marketing team needs to create a visually rich newsletter that includes dynamic content from a SharePoint list, such as upcoming events and product images. Which Microsoft 365 app is specifically designed for creating interactive newsletters and presentations?

Accepted Answer

Microsoft Sway. Microsoft Sway is specifically designed for creating interactive, visually rich newsletters and presentations that can pull dynamic content from SharePoint lists, such as upcoming events and product images. It uses a web-based canvas with responsive design and supports embedding live data via SharePoint connectors, making it ideal for marketing teams needing dynamic, shareable content without coding.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft Microsoft Viva Engage

Question 8

A sales manager needs a visual tool to track the sales pipeline with stages, deal values, and assigned team members. The team should be able to update the board in real time and see changes instantly. Which Microsoft 365 app is most suitable?

Accepted Answer

Microsoft Lists. Microsoft Lists is the most suitable app because it provides a customizable, real-time collaborative board view that can track sales pipeline stages, deal values, and assigned team members. Lists supports real-time co-authoring and instant updates via SharePoint, making it ideal for a visual, always-current sales tracking tool without requiring a full CRM system.

Answer

Microsoft Dynamics 365 Sales

Answer

Microsoft Planner

Answer

Microsoft Excel

Question 9

A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?

Accepted Answer

Data Loss Prevention (DLP) policies. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect and block the sharing of sensitive information, such as credit card numbers, across email (Exchange Online) and SharePoint. By scanning content for predefined sensitive info types (e.g., credit card numbers using regex patterns from the DLP engine), DLP can automatically block or warn users before external sharing occurs, meeting the company's requirement.

Answer

Sensitivity labels and Microsoft Purview Information Protection (Microsoft Purview Information Protection)

Answer

Microsoft Purview Compliance Manager

Answer

Exchange Online Protection (EOP) and Microsoft Defender for Microsoft 365

Question 10

A multinational corporation must comply with GDPR. They need to ensure that personal data of EU residents is retained for a specific period and then securely deleted. Additionally, they must be able to respond to data subject access requests (DSARs) within 30 days by finding and exporting relevant data. Which two Microsoft Purview solutions should they use together? (Choose two.)

Accepted Answer

Retention policies. Retention policies (A) are correct because they allow organizations to define rules that retain personal data for a specific period and then automatically delete it, meeting GDPR retention and secure deletion requirements. eDiscovery (Premium) (C) is correct because it enables searching, collecting, and exporting data from various Microsoft 365 workloads to fulfill data subject access requests (DSARs) within the 30-day regulatory timeframe.

Answer

Data Lifecycle Management (via sensitivity labels)

Answer

Audit (Standard)