MS-900 Practice Exam 3 — 20 Questions

Question 1

A company runs a critical application on-premises but wants to extend capacity to the cloud during peak demand without purchasing additional hardware. Which cloud deployment model best describes this strategy?

Accepted Answer

Hybrid cloud. A hybrid cloud model combines on-premises infrastructure (private cloud) with public cloud resources, enabling a company to 'burst' into the public cloud during peak demand without purchasing additional hardware. This strategy, often called cloud bursting, allows the critical application to run locally under normal conditions and seamlessly extend capacity to a public cloud provider like Azure during spikes.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 2

A company currently has Microsoft 365 E5 licenses for all users. They need to perform advanced threat hunting using queries across email, endpoints, and identities to investigate a potential security incident. Which of the following capabilities is already included in their existing license?

Accepted Answer

Microsoft 365 Defender (including advanced hunting). Microsoft 365 Defender (formerly Microsoft Threat Protection) includes advanced hunting capabilities that allow security teams to run Kusto Query Language (KQL) queries across email, endpoints, identities, and cloud apps. Since the company already has Microsoft 365 E5 licenses, this capability is included without any additional purchase.

Answer

Microsoft Defender for Microsoft 365 Plan 1

Answer

Microsoft Entra ID Premium P1

Answer

Microsoft Cloud App Security

Question 3

A company must comply with a regulation that requires all data stored in Microsoft 365 to remain within the European Union. Which Microsoft 365 feature should an administrator configure to enforce this geographic restriction?

Accepted Answer

Data Residency policies. Option C is correct because Data Residency policies in Microsoft 365 allow administrators to define the geographic location where data at rest is stored. By configuring a Data Residency policy for the European Union, the administrator ensures that all data remains within EU data centers, meeting regulatory requirements.

Answer

Data Loss Prevention (DLP)

Answer

Information Rights Management (IRM)

Answer

Customer Lockbox

Question 4

A company uses a cloud provider that charges them based solely on the exact number of gigabytes of storage used and the number of virtual machine hours consumed. They can increase or decrease usage at any time without any upfront commitment. Which essential characteristic of cloud computing does this billing model demonstrate?

Accepted Answer

Measured service. The billing model charges based on exact gigabytes of storage used and virtual machine hours consumed, which directly aligns with the 'measured service' characteristic of cloud computing. Measured service means cloud providers meter and bill customers precisely for the resources they consume, often using a pay-as-you-go model. This allows the company to pay only for what they use without upfront commitments, as described in the scenario.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 5

A company is preparing for a merger and wants to prevent communication between the Human Resources and Research departments regarding sensitive salary data during the due diligence period. They need a Microsoft Purview solution that can block all email and chat between users in these two groups, as well as prevent file sharing in Teams and SharePoint. Which solution should they configure?

Accepted Answer

Information Barriers. Information Barriers (IB) in Microsoft Purview are specifically designed to prevent communication and collaboration between defined user groups, such as HR and Research, by blocking email, Teams chat, and SharePoint/OneDrive file sharing. This solution enforces policies at the transport and service level, ensuring that sensitive salary data is not inadvertently shared during the merger due diligence period.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity Labels

Answer

eDiscovery (Premium)

Question 6

A company with 40 users needs email, Teams, web Office apps, and cloud file storage but not desktop Office apps. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online for email, Teams for collaboration, web versions of Office apps (Word, Excel, PowerPoint), and OneDrive for cloud file storage — all without including desktop Office apps. This plan is designed specifically for organizations that need cloud productivity tools but not locally installed Office applications, matching the 40-user requirement exactly.

Answer

A free personal Microsoft account only

Answer

Azure Virtual Desktop only

Answer

Microsoft Defender for Cloud only

Question 7

A company with 50 users currently has Microsoft 365 Business Basic licenses. They now want to give all users the desktop versions of Office apps and 1 TB of OneDrive storage per user. What is the most cost-effective licensing change?

Accepted Answer

Upgrade all users to Microsoft 365 Business Standard. Microsoft 365 Business Standard includes desktop Office apps, Exchange Online, Teams, and 1 TB OneDrive storage. Upgrading the existing subscriptions to Business Standard is more cost-effective than adding separate Microsoft 365 Apps for Business licenses because the latter does not include additional benefits like Exchange, and upgrading is typically priced per user as an incremental cost.

Answer

Purchase Microsoft 365 Apps for Business licenses for all users

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Purchase Microsoft 365 E3 licenses for all users

Question 8

A company is evaluating moving its on-premises infrastructure to a cloud environment. They want a service that provides virtual machines, storage, and networking capabilities while retaining full control over the operating system and applications. Which cloud service model best meets this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources, including virtual machines, storage, and networking, over the internet. The customer retains full administrative control over the operating system, applications, and middleware, while the cloud provider manages the underlying physical hardware. This matches the requirement for full OS and application control.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Private Cloud

Question 9

A company uses a cloud storage service that automatically increases its storage capacity without any manual intervention as new files are added. This behavior is an example of which cloud computing characteristic?

Accepted Answer

Rapid elasticity. The scenario describes storage capacity automatically increasing as new files are added, which is the essence of rapid elasticity. This cloud characteristic allows resources to scale out and in automatically, often to the point where the user perceives unlimited capacity, without requiring manual provisioning or intervention.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 10

A company wants to provide its employees with access to email, calendar, and document editing tools through a web browser without installing any software. The provider manages all maintenance, updates, and security of the applications. Which cloud service model best describes this scenario?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS) because the provider delivers fully functional applications—such as email, calendar, and document editing—over the web, with no local installation required. The provider handles all maintenance, updates, and security, which is the defining characteristic of SaaS. Examples include Microsoft 365 (Exchange Online, Outlook, Word Online) and Google Workspace.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Desktop as a Service (DaaS)

Question 11

A company wants to use a cloud service where they can develop and run applications without managing the underlying infrastructure, including servers, operating systems, or storage. They only need to upload their code and the provider handles scaling and availability. Which cloud service model best describes this approach?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed hosting environment where developers can deploy applications without worrying about the underlying infrastructure. The provider automatically handles server provisioning, OS patching, storage management, and scaling based on demand. In this scenario, the company only needs to upload code, which is the defining characteristic of PaaS.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 12

A company wants to run a workload that requires the highest level of physical security and control over hardware. They have the budget to purchase and maintain their own data center. Which cloud deployment model should they choose?

Accepted Answer

Private cloud. A private cloud deployment model is correct because it provides dedicated infrastructure for a single organization, offering the highest level of physical security and full control over hardware. This model allows the company to purchase, own, and manage its own data center, ensuring compliance with stringent security requirements and complete hardware isolation.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 13

A company moves its on-premises servers to a cloud provider. The provider supplies the physical hardware, networking, and storage. The company installs and manages the operating system and applications on the virtual machines. Which cloud service model does this scenario represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the cloud provider supplies the physical hardware, networking, and storage, while the customer retains full control over the operating system and applications. In IaaS, the provider manages the underlying infrastructure (e.g., hypervisor, physical servers, network switches), and the customer is responsible for the guest OS, middleware, and application stack. This aligns with the shared responsibility model where the customer handles OS patching, application configuration, and data management.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Question 14

A company with 300 users currently has Microsoft 365 Business Premium licenses. They want to add the highest level of automated threat investigation and response capabilities for all users. Which licensing option should they purchase?

Accepted Answer

Add the Microsoft 365 Defender for Office 365 Plan 2 add-on for each user. Microsoft 365 Defender for Office 365 Plan 2 provides the highest level of automated investigation and response (AIR) capabilities, including threat hunting, automated remediation, and simulation training. Since the company already has Microsoft 365 Business Premium, which includes Defender for Office 365 Plan 1, adding Plan 2 as an add-on is the most cost-effective way to achieve the desired capabilities without upgrading to E5.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Add the Microsoft 365 E5 Security add-on for each user

Answer

Add the Microsoft 365 Business Premium Threat Protection add-on

Question 15

A company is planning to purchase Microsoft 365 subscriptions. They want to follow the recommended process. Which of the following sequences correctly represents the order of steps from start to finish?

Accepted Answer

Assess needs, Choose subscription, Add licenses, Assign licenses. The recommended process begins with assessing organizational needs (e.g., number of users, required features), then choosing the appropriate subscription plan, adding the required number of licenses to the tenant, assigning those licenses to individual users, and finally provisioning the services (which happens automatically after license assignment). The correct order is: Assess needs, Choose subscription, Add licenses, Assign licenses.

Answer

Choose subscription, Assess needs, Assign licenses, Add licenses

Answer

Add licenses, Assign licenses, Assess needs, Choose subscription

Answer

Assess needs, Add licenses, Choose subscription, Assign licenses

Question 16

Which cloud computing characteristic allows a company to access resources like storage and databases from any device with an internet connection without needing to manage the physical infrastructure?

Accepted Answer

Broad network access. Broad network access is the correct answer because it describes the ability to access cloud resources (such as storage and databases) over the network via standard protocols (e.g., HTTP/HTTPS, SMB, NFS) from any device (laptop, smartphone, tablet) with an internet connection, without requiring the customer to manage the underlying physical infrastructure. This characteristic is defined by NIST SP 800-145 as 'capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms.'

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling

Question 17

A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID passwordless authentication. Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 18

A company with 100 users wants to provide all users with Microsoft Teams and cloud file storage, but only the sales team of 20 users needs access to Dynamics 365. Which licensing approach is most cost-effective?

Accepted Answer

Purchase Microsoft 365 Business Basic for all 100 users and Dynamics 365 Sales Professional for the 20 sales users.. Microsoft 365 Business Basic includes Teams and SharePoint for all users at a low cost. Adding Dynamics 365 Sales Professional licenses only for the sales team minimizes expense. Business Premium is more expensive, E3 is also pricier, and Business Central is an ERP not a CRM. Hence, the correct approach is Business Basic plus Dynamics 365 Sales for the sales team.

Answer

Purchase Microsoft 365 Business Premium for all 100 users.

Answer

Purchase Microsoft 365 E3 for all 100 users and add Dynamics 365 for the sales team.

Answer

Purchase Microsoft 365 Business Basic for all users and Dynamics 365 Business Central for the 20 sales users.

Question 19

A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?

Accepted Answer

Litigation hold. Litigation hold is the correct feature because it preserves all mailbox and document content in its original state indefinitely until the hold is explicitly released. Unlike a retention policy, which can delete content after a specified period, Litigation hold ensures that even permanently deleted items are retained in the Recoverable Items folder, meeting the legal preservation requirement.

Answer

Retention policy

Answer

eDiscovery

Answer

Data Loss Prevention (DLP)

Question 20

A company uses a cloud service where administrators can add or remove virtual machine instances through a web portal without contacting the provider. The provider bills only for the exact resources consumed. Which cloud computing characteristic does this scenario best demonstrate?

Accepted Answer

On-demand self-service. On-demand self-service allows users to provision compute capabilities without requiring human interaction with the service provider. Measured service refers to metering resource usage; rapid elasticity is about scaling; resource pooling is about multi-tenancy. The combination of self-provisioning and usage-based billing points primarily to on-demand self-service.

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling