MS-900 Practice Exam 2 — 20 Questions

Question 1

During requirements gathering, an IT manager says the organization must manage users, licenses, billing, and tenant settings. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 admin center. The Microsoft 365 admin center is the centralized web portal for managing users, licenses, billing, and tenant-wide settings. It provides administrators with a single pane of glass to perform tasks such as adding or removing users, assigning licenses, viewing invoices, and configuring tenant-level policies. This directly matches the IT manager's stated requirements for managing users, licenses, billing, and tenant settings.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 2

Which of the following are key characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose all that apply. There are four correct answers.)

Accepted Answer

On-demand self-service. The NIST SP 800-145 definition identifies five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service allows users to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, laptops, workstations). Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. Rapid elasticity allows capabilities to be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand.

Answer

Fixed, non-scalable capacity

Answer

Locally installed software only

Question 3

Drag and drop the steps to perform an eDiscovery content search in the Microsoft 365 compliance center into the correct order.

Accepted Answer

Create a new content search, then specify the locations to search, then define the search query, then preview and review the results. eDiscovery content search involves creating a search, specifying locations, query, and reviewing results.

Answer

Create a new content search, then define the search query, then specify the locations to search, then preview and review the results

Answer

Specify the locations to search, then create a new content search, then define the search query, then preview and review the results

Answer

Create a new content search, then specify the locations to search, then preview and review the results, then define the search query

Question 4

A project team needs to collaborate on Teams channel conversations and meetings and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct answer because it provides the central hub for channel conversations, meetings, and real-time collaboration. SharePoint Online document storage is also correct because Teams channels use SharePoint as the underlying storage for all shared files, enabling co-authoring of Office documents directly within the Teams interface.

Answer

Microsoft Purview eDiscovery case

Answer

Exchange anti-malware policy

Question 5

During requirements gathering, an IT manager says the organization must manage users, licenses, billing, and tenant settings. Microsoft 365 licensing, admin, or support concept is most relevant?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Infrastructure as a Service (IaaS). The IT manager's requirement is to identify the service model where the customer manages the most layers. In Infrastructure as a Service (IaaS), the cloud provider manages only the physical infrastructure (servers, storage, networking), while the customer is responsible for managing the operating system, middleware, runtime, data, and applications. This gives the customer the highest degree of control and management responsibility compared to PaaS or SaaS.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Hybrid cloud

Question 6

A non-profit organization with 15 employees needs business-grade email, desktop versions of Office apps, and 1 TB of cloud storage per user. They are eligible for Microsoft's non-profit program. Which plan provides these features at the lowest cost?

Accepted Answer

Microsoft 365 Business Standard for Nonprofits. Microsoft 365 Business Standard for Nonprofits is the correct choice because it includes business-grade email (Exchange Online), desktop versions of Office apps (Word, Excel, PowerPoint, etc.), and 1 TB of OneDrive cloud storage per user, all at a significantly reduced cost (or free for qualifying organizations) under the nonprofit program. Business Basic only provides web and mobile Office apps, not desktop versions, and E3/Enterprise plans are more expensive and include advanced security and compliance features not required by this 15-employee organization.

Answer

Microsoft 365 Business Basic for Nonprofits

Answer

Microsoft 365 E3 for Nonprofits

Answer

Microsoft 365 Enterprise for Nonprofits

Question 7

A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID passwordless authentication. Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 8

You are the compliance officer for Fabrikam, a medium-sized company with 500 users on Microsoft 365 Business Premium. Fabrikam must comply with the California Consumer Privacy Act (CCPA). The legal team has identified that they need to be able to respond to consumer requests to delete personal data within 45 days. They also need to ensure that personal data is not retained longer than necessary. You have been asked to configure Microsoft Purview to meet these requirements. Specifically, you need to search for and delete personal data when a deletion request is received, and set up a data retention policy to automatically delete personal data after 2 years. What should you do?

Accepted Answer

Use Content Search to find personal data, then use eDiscovery to delete it for deletion requests. Create a retention policy with a retention period of 2 years for all SharePoint sites and OneDrive accounts.. To delete personal data for a specific user, you need to use Content Search to find the data and then eDiscovery to delete it. A retention policy can be set to automatically delete data after 2 years. Option A is incorrect because a retention label is for manual application, not automatic deletion. Option C is incorrect because DLP does not delete data. Option D is incorrect because auto-labeling does not delete data.

Answer

Implement auto-labeling to label personal data and configure a retention label to delete after 2 years.

Answer

Create a retention label that deletes data after 2 years and apply it manually to all documents containing personal data.

Answer

Configure a DLP policy to block sharing of personal data and set a retention policy for 2 years.

Question 9

Drag and drop the steps to set up a Microsoft Teams meeting with external participants into the correct order.

Accepted Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees (including external participants). Step 3: Configure meeting options (e.g., bypass lobby for external). Step 4: Send the meeting invitation.. Creating a Teams meeting involves scheduling, adding attendees, setting options, and sending the invite.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Configure meeting options. Step 3: Add attendees. Step 4: Send the meeting invitation.

Answer

Step 1: Add attendees. Step 2: Open Teams calendar and schedule a new meeting. Step 3: Configure meeting options. Step 4: Send the meeting invitation.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees. Step 3: Send the meeting invitation. Step 4: Configure meeting options.

Question 10

Drag and drop the steps to deploy Microsoft 365 Apps for enterprise to a Windows device using the Microsoft 365 Apps admin center into the correct order.

Accepted Answer

Step 1: Sign in to the Microsoft 365 Apps admin center. Step 2: Create a configuration for deployment. Step 3: Download the Office Deployment Tool and the configuration file. Step 4: Run the Office Deployment Tool on the client device.. Deploying Office uses the admin center to create a config, then ODT to install based on that config.

Answer

Step 1: Download the Office Deployment Tool. Step 2: Sign in to the Microsoft 365 Apps admin center. Step 3: Create a configuration. Step 4: Run the ODT on the client device.

Answer

Step 1: Run the Office Deployment Tool on the client device. Step 2: Sign in to the admin center. Step 3: Create a configuration. Step 4: Download the configuration file.

Answer

Step 1: Sign in to the admin center. Step 2: Download the ODT. Step 3: Create a configuration. Step 4: Run ODT with the configuration.

Question 11

A compliance team needs to ensure that any email sent from the Finance department that contains a bank account number is automatically encrypted. External recipients must be able to reply securely without needing to sign up for any service. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (B) is the correct solution because it allows the organization to automatically encrypt emails based on conditions (e.g., emails from Finance containing bank account numbers) and enables external recipients to reply securely using the encrypted reply portal without requiring any sign-up or additional software. This is achieved through Azure Rights Management (Azure RMS) and the Office 365 Message Encryption (OME) portal, which provides a seamless, browser-based experience for external users.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Information Protection (sensitivity labels)

Answer

Microsoft Defender for Office 365

Question 12

A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?

Accepted Answer

Microsoft Viva Engage. Microsoft Viva Engage (formerly Yammer) is designed as a social networking and employee communication hub that provides company-wide announcements, topic-based communities, and seamless integration with SharePoint and Power BI dashboards. It focuses on fostering open communication across the organization, unlike collaboration tools that are team-centric.

Answer

Microsoft Teams

Answer

SharePoint Online

Answer

Outlook

Question 13

A company with 300 Microsoft 365 E3 users needs to add advanced identity protection features: Microsoft Entra ID Premium P2 and Microsoft Defender for Identity. They want to add these capabilities without upgrading all users to E5. What is the most cost-effective licensing strategy?

Accepted Answer

Add the Microsoft 365 E5 Security add-on for each user.. The Microsoft 365 E5 Security add-on bundles Microsoft Entra ID Premium P2 and Microsoft Defender for Identity (along with other security features) at a lower per-user cost than purchasing them separately, and it can be added to an existing E3 subscription without upgrading the entire license. This provides the required identity protection capabilities cost-effectively for all 300 users.

Answer

Upgrade all users to Microsoft 365 E5.

Answer

Add Microsoft Entra ID Premium P2 and Microsoft Defender for Identity as standalone add-ons.

Answer

Add Enterprise Mobility + Security E5 add-on.

Question 14

A company with 500 Microsoft 365 E3 users wants to add the highest level of threat protection and advanced investigation capabilities for their security team. Which licensing add-on should they purchase?

Accepted Answer

Microsoft 365 E5 Security. Microsoft 365 E5 Security is the correct add-on because it bundles the highest level of threat protection (Microsoft Defender for Office 365 Plan 2, Microsoft Defender for Endpoint Plan 2, and Microsoft Defender for Identity) along with advanced investigation capabilities like automated investigation and response (AIR), threat analytics, and advanced hunting in Microsoft 365 Defender. This meets the requirement for top-tier threat protection and advanced investigation without upgrading the entire E3 base license to E5.

Answer

Microsoft 365 E5 Compliance

Answer

Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 2 only

Question 15

An organization needs to prevent users from sharing documents that contain credit card numbers via email and Microsoft Teams. When a user attempts to share such a document, they should see a policy tip explaining the restriction. Which Microsoft Purview solution should the compliance team configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect sensitive information types—such as credit card numbers—in documents and communications. DLP policies can be configured to block or warn users via policy tips when they attempt to share such content through email or Microsoft Teams, enforcing compliance without disrupting legitimate work.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Retention Policies

Answer

Microsoft Purview Sensitivity Labels

Question 16

A company needs a dedicated, private network connection between its on-premises data center and Microsoft's cloud infrastructure to support a hybrid deployment with low latency and high reliability. The connection must not traverse the public internet. Which service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct choice because it provides a dedicated, private network connection from an on-premises data center directly into Microsoft's cloud infrastructure, bypassing the public internet entirely. This ensures low latency, high reliability, and consistent performance for hybrid deployments, as the traffic traverses a private MPLS or Ethernet link rather than the unpredictable internet.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Microsoft Entra ID Application Proxy

Question 17

A sales team wants to build a custom inventory tracking application with minimal code. They need a cloud-based database that can securely store structured data and integrate with the low-code app builder. Which Microsoft 365 service should they use as the database backend?

Accepted Answer

Microsoft Dataverse. Microsoft Dataverse is the correct choice because it provides a scalable, cloud-based relational database that securely stores structured data and integrates natively with Power Apps, the low-code app builder. Unlike simpler list-based storage, Dataverse supports rich data types, relationships, business logic, and role-based security, making it ideal for custom inventory tracking applications built with minimal code.

Answer

Microsoft Lists

Answer

Power Apps

Answer

Power Automate

Question 18

A sales manager wants to track customer interactions, manage leads, and automate follow-up emails from a single platform. Which Microsoft 365 service is specifically designed for customer relationship management (CRM)?

Accepted Answer

Microsoft Dynamics 365 Sales. Microsoft Dynamics 365 Sales is the dedicated CRM service within the Microsoft 365 ecosystem, purpose-built for tracking customer interactions, managing leads, and automating follow-up emails. Unlike general productivity tools, it provides a unified platform with lead scoring, opportunity management, and workflow automation specifically for sales processes.

Answer

Microsoft Bookings

Answer

Microsoft Power Automate

Answer

Microsoft To Do

Question 19

A company uses a third-party Human Resources (HR) system. Whenever a new employee is added to the HR system, they want to automatically create a user account in Microsoft 365, assign the appropriate license, and send a welcome email. Which Microsoft 365 service should be used to orchestrate this automation?

Accepted Answer

Microsoft Power Automate. Microsoft Power Automate is the correct service because it provides a low-code workflow automation platform that can trigger actions based on events in external systems (e.g., a new employee record in a third-party HR system) and then orchestrate a sequence of tasks in Microsoft 365, such as creating a user account via the Microsoft Graph API, assigning a license, and sending a welcome email. It integrates seamlessly with hundreds of connectors, including HR systems and Microsoft 365 services, making it the ideal tool for this cross-system automation scenario.

Answer

Microsoft Identity Manager

Answer

Microsoft Entra ID Connect

Answer

Microsoft Graph API

Question 20

A manager wants to quickly create a survey to collect employee feedback on a new policy. The survey must automatically store responses in an Excel spreadsheet and trigger an email notification when a response is submitted. Which Microsoft 365 service should the manager use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct choice because it is designed specifically for creating surveys and quizzes, and it natively integrates with Excel to automatically store responses in a spreadsheet. Additionally, Forms supports Power Automate flows out of the box, allowing you to trigger an email notification whenever a new response is submitted, meeting both requirements without custom development.

Answer

Microsoft Lists

Answer

Microsoft Power Apps

Answer

Microsoft SharePoint