MS-900 Practice Exam 2 — 20 Questions

Question 1

A security team wants to ensure that only devices that are compliant with company security policies (e.g., antivirus enabled, disk encrypted) can access Exchange Online and SharePoint Online. Which feature should they configure in Microsoft 365?

Accepted Answer

Conditional Access policies. Conditional Access policies in Microsoft Entra ID (formerly Azure AD) allow administrators to enforce device compliance as a condition for granting access to cloud apps like Exchange Online and SharePoint Online. By integrating with Microsoft Intune device compliance policies (e.g., requiring antivirus, disk encryption), Conditional Access can block or allow access based on real-time device health signals, ensuring only compliant devices can connect.

Answer

Data loss prevention (DLP) policies

Answer

Information Rights Management (IRM)

Answer

Microsoft Defender for Office 365

Question 2

A security administrator needs to review all sign-in attempts and identify suspicious login patterns for the past 30 days. Which Microsoft 365 portal should they use to access this information?

Accepted Answer

Microsoft Entra ID sign-in logs. Microsoft Entra ID sign-in logs provide a detailed record of all sign-in attempts, including successful and failed logins, IP addresses, applications used, and risk detections. This data can be filtered and analyzed to identify suspicious patterns such as multiple failed attempts or sign-ins from unusual locations over the past 30 days, making it the correct choice for a security administrator.

Answer

Microsoft Purview compliance portal

Answer

Microsoft 365 admin center

Answer

Microsoft Defender for Cloud Apps

Question 3

A security analyst receives an alert about a user who downloaded a large number of files from a SharePoint document library in a short period. The analyst needs to investigate the user's activities across Exchange, SharePoint, and Teams to determine if data exfiltration is occurring. Which Microsoft Purview solution should the analyst use to review detailed activity logs?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) provides detailed, searchable activity logs for user actions across Exchange, SharePoint, and Teams, including file downloads, access events, and admin operations. The analyst can use the Audit log search to filter by user, date range, and activity type (e.g., 'FileDownloaded') to identify potential data exfiltration patterns. Audit (Premium) also offers longer retention (up to 1 year by default, extendable to 10 years) and higher-bandwidth APIs for large-scale investigations.

Answer

Microsoft Purview eDiscovery (Premium)

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention (DLP)

Question 4

A sales team needs to track customer interactions, manage leads, and automate follow-up emails. Which Microsoft 365 app is specifically designed for this customer relationship management (CRM) purpose?

Accepted Answer

Microsoft Dynamics 365 Sales. Microsoft Dynamics 365 Sales is a dedicated customer relationship management (CRM) application within the Dynamics 365 suite, purpose-built for tracking customer interactions, managing leads, and automating follow-up emails. Unlike general productivity tools, it provides structured pipelines, lead scoring, and workflow automation specifically for sales processes.

Answer

Microsoft Outlook

Answer

Microsoft SharePoint

Answer

Microsoft Power Automate

Question 5

Which cloud computing characteristic allows users to be billed only for the resources they consume, such as processing power, storage, or bandwidth?

Accepted Answer

Measured service. Measured service is the cloud computing characteristic that enables usage-based billing by monitoring, controlling, and reporting resource consumption (e.g., CPU hours, GB of storage, or data transfer) at a granular level. This metering capability allows providers to charge customers only for what they actually use, rather than a flat fee, and is typically implemented via telemetry and billing APIs.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 6

Which cloud characteristic allows an organization to increase or decrease computing resources quickly based on demand, without requiring manual intervention?

Accepted Answer

Rapid elasticity. Rapid elasticity is the cloud characteristic that enables automatic, on-demand scaling of computing resources (such as virtual machines, storage, or network bandwidth) in response to fluctuating workload demands, without requiring manual provisioning or de-provisioning. This is a core feature of cloud computing defined by NIST SP 800-145, allowing resources to scale out (increase) or scale in (decrease) dynamically, often using orchestration tools like Azure Autoscale or AWS Auto Scaling. The key distinction is that the scaling happens quickly and automatically, based on predefined rules or metrics like CPU utilization or request count.

Answer

Measured service

Answer

Resource pooling

Answer

Broad network access

Question 7

A development team wants to build a custom web application. They choose a cloud service that provides the runtime environment, operating system, and middleware, but the team is responsible for writing and deploying their own code. The provider automatically applies patches to the underlying infrastructure. Which cloud service model best describes this approach?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides the runtime environment, operating system, and middleware, allowing developers to focus on writing and deploying their own code while the cloud provider manages the underlying infrastructure, including automatic patching. This model abstracts the hardware and OS layer, giving the team full control over application code but not the platform stack.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Question 8

An organization is concerned about data leakage from sensitive emails. They want to enforce encryption on emails containing financial information automatically. Which Microsoft 365 solution should they configure?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (Option B) is the correct solution because it enables organizations to send and receive encrypted email messages, and it can be configured with mail flow rules to automatically encrypt emails containing sensitive financial information. This service leverages Azure Rights Management (Azure RMS) to provide persistent protection that follows the email, ensuring only authorized recipients can decrypt and read the content.

Answer

Data Loss Prevention (DLP) policies

Answer

Microsoft Purview Information Protection (Microsoft Purview Information Protection)

Answer

Exchange Online Protection (EOP)

Question 9

An administrator is reviewing a request from users who need to reset user passwords without assigning Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Password Administrator. The Password Administrator role in Microsoft Entra ID (formerly Azure AD) allows users to reset passwords for non-administrator users and manage service requests without granting the highly privileged Global Administrator role. This directly addresses the user request while adhering to the principle of least privilege, making it the most relevant concept for this scenario.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 10

A department head asks which Microsoft 365 option should be used to confirm whether a feature is included in a Microsoft 365 plan. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Official Microsoft plan comparison and licensing documentation. Option A is correct because the official Microsoft plan comparison and licensing documentation (available at the Microsoft 365 admin center and the Microsoft 365 for business or enterprise plans page) provides the definitive, up-to-date list of features included in each subscription tier. This is the primary resource for confirming feature availability, as it directly maps service names (e.g., Exchange Online, Teams, SharePoint) to specific licensing SKUs, such as Microsoft 365 Business Basic or Microsoft 365 E5.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 11

A security administrator needs to automatically restrict access to documents that contain 'PII' (personally identifiable information) so that only employees in the 'Data Privacy' security group can view them. Additionally, editing and printing of these documents must be disabled. Which combination of Microsoft Purview features should be used?

Accepted Answer

Sensitivity labels with auto-labeling and encryption that restricts permissions to the 'Data Privacy' group. Option A is correct because sensitivity labels in Microsoft Purview can be configured with auto-labeling to automatically detect and classify documents containing PII, and then apply encryption that restricts access to only the 'Data Privacy' security group. Additionally, the label can enforce usage rights such as 'View Only' to disable editing and printing, meeting all requirements.

Answer

Data Loss Prevention (DLP) policy with a block action

Answer

Retention policy with a restrict action

Answer

Privileged Identity Management (PIM)

Question 12

A business stakeholder asks how Microsoft 365 can help them use hosted email without managing mail servers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Software as a Service (SaaS). Microsoft 365 delivers hosted email (Exchange Online) as a Software as a Service (SaaS) offering, where Microsoft manages the mail servers, patches, and infrastructure. The stakeholder simply uses the service via a web browser or client without any server administration. This aligns with the SaaS model, which provides ready-to-use applications over the internet.

Answer

Platform as a Service (PaaS)

Answer

Community cloud

Answer

Infrastructure as a Service (IaaS)

Question 13

An organization wants to automatically detect when a user attempts to share a document containing a customer's credit card number via email. The system should block the sharing and display a warning to the user. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. When a user attempts to share a document containing a credit card number via email, DLP can inspect the content using built-in sensitive information types (e.g., Credit Card Number), block the email, and display a policy tip warning to the user. This matches the requirement exactly.

Answer

Sensitivity labels

Answer

Retention policies

Answer

eDiscovery

Question 14

A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?

Accepted Answer

IaaS (Infrastructure as a Service). This scenario describes Infrastructure as a Service (IaaS), where the cloud provider supplies virtualized computing resources such as virtual machines, storage, and networking, but the customer retains full control over the operating system, middleware, and applications. In IaaS, the provider manages only the physical infrastructure (hypervisor, servers, storage, and network), while the customer is responsible for OS installation, configuration, patching, and application management. This aligns directly with the question's description of customer-managed OS and applications on provider-hosted VMs.

Answer

PaaS (Platform as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 15

A charitable organization with 50 employees wants to use Microsoft 365 for email and collaboration but has a very limited budget. What should they do first to obtain licenses at a reduced cost?

Accepted Answer

Apply for Microsoft 365 Nonprofit eligibility. Microsoft offers discounted and donated Microsoft 365 plans for eligible nonprofit organizations. The first step is to apply for nonprofit eligibility through the Microsoft nonprofit portal. Once approved, the organization can purchase Microsoft 365 Nonprofit plans at a significantly reduced cost or even receive donations. Simply purchasing Business Basic or other plans without nonprofit status would not provide the discount.

Answer

Purchase Microsoft 365 Business Basic licenses

Answer

Use the free web versions of Office apps

Answer

Purchase Microsoft 365 E3 licenses

Question 16

A 500-user organization is licensed with Microsoft 365 E3. They need to comply with a regulation that requires retaining all Exchange Online mailbox content for 10 years and providing unlimited archive storage for users. Which add-on license or service should they acquire to meet this requirement most cost-effectively?

Accepted Answer

Exchange Online Archiving for Exchange Online Plan 2. Option B is correct because Exchange Online Archiving for Exchange Online Plan 2 provides unlimited archive storage and retention policies that can enforce a 10-year hold on mailbox content. This add-on is the most cost-effective way to meet the regulatory requirements without upgrading to E5, as it directly extends the archiving and retention capabilities of the existing E3 license.

Answer

Microsoft 365 E5 Compliance add-on

Answer

Microsoft Purview eDiscovery add-on

Answer

Microsoft 365 E5 Security add-on

Question 17

A company uses a cloud service where they pay only for the compute hours their virtual machines run. They can increase or decrease the number of VMs instantly based on demand. Which two cloud computing characteristics are demonstrated? (Choose two.)

Accepted Answer

Rapid elasticity. B is correct because rapid elasticity allows the company to instantly increase or decrease the number of virtual machines based on demand, scaling resources up or down automatically. C is correct because measured service ensures that the company pays only for the compute hours their VMs run, with usage metered and billed accordingly.

Answer

On-demand self-service

Answer

Resource pooling

Question 18

A business stakeholder asks how Microsoft 365 can help them check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and incident information for all Microsoft 365 services. It allows administrators and stakeholders to check known incidents, advisories, and historical uptime data, directly addressing the need to monitor service availability.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 19

A company has 150 users with Microsoft 365 Business Basic licenses. They need to add Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for device management, but they want to retain their existing Basic subscriptions to minimize costs. What is the most cost-effective licensing strategy to meet these requirements?

Accepted Answer

Purchase add-on subscriptions for Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for all users.. Microsoft 365 Business Basic supports purchasing add-on licenses such as Microsoft Defender for Office 365 Plan 1 and Microsoft Intune. Upgrading all users to Business Premium would include these features but at a higher per-user cost if only these two add-ons are needed. Business Standard does not include Intune or Defender. Purchasing add-ons for all 150 users is the most cost-effective way to add the specific capabilities without changing the base license.

Answer

Upgrade all users to Microsoft 365 Business Premium.

Answer

Upgrade all users to Microsoft 365 Business Standard.

Answer

Purchase Microsoft 365 E3 licenses for all users.

Question 20

A company has 10 users who need only Exchange Online mailboxes and Microsoft Teams. They do not need desktop versions of Office apps. What is the most cost-effective Microsoft 365 plan for this requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online mailboxes and Microsoft Teams, along with web and mobile versions of Office apps, without including desktop Office installations. This makes it the most cost-effective plan for the 10 users who need only email and Teams, as it offers the required services at the lowest per-user price among the options.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 Business Standard

Answer

Office 365 E1