MS-900 Practice Exam 4 — 20 Questions

Question 1

A communications manager wants to create an interactive monthly newsletter that includes embedded videos, images, and links to SharePoint documents. The newsletter should be viewable on any device without needing to install an app. Which Microsoft 365 app is best suited for this?

Accepted Answer

Microsoft Sway. Microsoft Sway is a presentation and storytelling app designed to create interactive, web-based content that can include multimedia such as videos, images, and embedded links. It adjusts automatically to any screen size and is accessible via a browser without installation. PowerPoint is mainly for slideshows and offline viewing. SharePoint is a document management and collaboration platform, not a content authoring tool. Stream is a video service, not suitable for a newsletter.

Answer

Microsoft PowerPoint

Answer

Microsoft SharePoint

Answer

Microsoft Stream

Question 2

A company has a mix of full-time employees and contractors. Full-time employees need Microsoft 365 desktop apps, email, and cloud storage. Contractors only need email and cloud storage. Which licensing approach is the most cost-effective?

Accepted Answer

Assign Microsoft 365 Business Basic to contractors and Microsoft 365 Business Standard to full-time employees. Microsoft 365 Business Basic provides web and mobile versions of Office apps, email (Exchange Online), and cloud storage (OneDrive/SharePoint) — sufficient for contractors who don't need desktop apps. Microsoft 365 Business Standard includes the full desktop Office suite plus the same email and storage, meeting the needs of full-time employees. This pairing avoids paying for desktop app licenses for contractors, making it the most cost-effective approach.

Answer

Assign Microsoft 365 Business Standard to both groups

Answer

Assign Microsoft 365 Apps for business to contractors and Microsoft 365 Business Standard to full-time employees

Answer

Assign Microsoft 365 Business Premium to full-time employees and Microsoft 365 Business Basic to contractors

Question 3

A company wants to run a critical application that requires dedicated hardware to comply with regulatory isolation requirements. However, they want to avoid the upfront cost of building their own data center. Which cloud deployment model meets these needs?

Accepted Answer

Private cloud. A private cloud is the correct deployment model because it provides dedicated hardware and infrastructure for a single organization, ensuring regulatory isolation without requiring the company to build and maintain its own on-premises data center. In Azure, a private cloud can be implemented via Azure Stack Hub or Azure VMware Solution, which run in the customer's own environment or a dedicated hosted environment, meeting compliance needs while avoiding upfront capital expenditure.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 4

A company has 150 users with Microsoft 365 Business Basic licenses. They now need to manage mobile devices using Microsoft Intune for all users. They want to keep costs as low as possible and do not want to upgrade to a more expensive plan if an add-on is available. What is the most cost-effective licensing strategy?

Accepted Answer

Add Microsoft Intune licenses for all users. Microsoft Intune is available as a standalone add-on license for Microsoft 365 Business Basic, Business Standard, and other plans. By purchasing the Microsoft Intune license per user, the company can add device management capabilities to their existing Business Basic subscriptions without paying for other unnecessary features. Upgrading to Business Premium or E3 would include Intune but also many other features, increasing cost.

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Upgrade all users to Microsoft 365 E3

Answer

Purchase Microsoft 365 Enterprise Mobility + Security E3 add-on

Question 5

A company wants to move its IT infrastructure to the cloud but must keep all customer data within a specific geographic region due to data residency laws. They also want to avoid paying for large upfront hardware costs. Which cloud characteristic best supports this need?

Accepted Answer

Geographic distribution (regional data centers). Option A is correct because geographic distribution refers to cloud providers operating multiple data centers across different regions, enabling customers to choose a specific region to store data and comply with data residency laws. This characteristic directly addresses the requirement to keep customer data within a specific geographic region while avoiding upfront hardware costs, as the cloud provider owns and manages the infrastructure.

Answer

Elasticity

Answer

High availability

Answer

Self-service

Question 6

A compliance-aware administrator is selecting the right Microsoft 365 capability to check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and historical incident information for all Microsoft 365 services, including known incidents, advisories, and post-incident reports. This is the correct tool for a compliance-aware administrator to check known incidents affecting services, as it directly aligns with monitoring service availability and reliability under the support domain.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 7

A company with 75 users needs desktop Office apps and cloud services but has no advanced security requirement. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Standard. The correct option matches the stated licensing, administration, or support requirement.

Answer

Microsoft Defender for Cloud only

Answer

Azure Virtual Desktop only

Answer

A free personal Microsoft account only

Question 8

A compliance officer needs to automatically classify and protect documents stored in SharePoint Online that contain personal data such as passport numbers. The classification should happen without user intervention and must apply encryption and access restrictions. Which Microsoft Purview solution should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling (Option B) are the correct solution because they can automatically classify documents based on patterns like passport numbers using trainable classifiers or exact data match (EDM), and then apply encryption and access restrictions via the label's protection settings—all without user intervention. This meets the compliance officer's requirement for automatic classification and protection of personal data in SharePoint Online.

Answer

Data Loss Prevention (DLP) policy

Answer

eDiscovery (Standard)

Answer

Communication Compliance

Question 9

A compliance officer needs to automatically classify documents stored in SharePoint Online that contain personally identifiable information (PII) such as social security numbers. The classification must apply a sensitivity label that encrypts the document and restricts access to only employees in the Legal department. The process should run without any user interaction. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Information Protection with auto-labeling. Option C is correct because Microsoft Purview Information Protection with auto-labeling can automatically detect PII (e.g., social security numbers) in documents stored in SharePoint Online and apply a sensitivity label that encrypts the content and restricts access to the Legal department. This process runs without user interaction, meeting the compliance officer's requirement for automatic classification and protection.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Insider Risk Management

Question 10

A company has 500 users with Microsoft 365 E3 licenses. They need to add Communication Compliance and Insider Risk Management for all users. They want to minimize additional costs while retaining their existing E3 subscriptions. What is the most cost-effective licensing approach?

Accepted Answer

Purchase the Microsoft 365 E5 Compliance add-on for all users. Microsoft 365 E5 Compliance is an add-on license for E3 that provides Communication Compliance, Insider Risk Management, and other advanced compliance features. Upgrading all users to E5 is more expensive if the advanced security features of E5 are not needed. The E5 eDiscovery and Audit add-on does not include Communication Compliance or Insider Risk Management. Business Premium plans are not compatible with enterprise E3 subscriptions and lack these features.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase the Microsoft 365 E5 eDiscovery and Audit add-on

Answer

Replace E3 with Microsoft 365 Business Premium

Question 11

A service owner is comparing Microsoft 365 capabilities and needs to use a dedicated environment controlled by one organization. Cloud concept or benefit best matches this requirement?

Accepted Answer

Private cloud. A private cloud is a dedicated environment controlled by a single organization, providing exclusive access and management over resources. This matches the requirement for a dedicated environment, as opposed to public cloud or hybrid models where control is shared or distributed.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 12

A compliance administrator needs to automatically protect sensitive data by applying a 'Confidential' label that encrypts documents and restricts access to a specific user group. The label must be applied when a document containing a credit card number is saved in SharePoint. Which Microsoft Purview feature should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling are the correct choice because they allow you to automatically apply a 'Confidential' label that encrypts documents and restricts access based on sensitive content (e.g., credit card numbers) when documents are saved in SharePoint. This feature uses conditions like sensitive information types to trigger label application, ensuring data protection at rest and in use.

Answer

Retention labels

Answer

Data Loss Prevention (DLP) policies

Answer

Data classification service

Question 13

A company with 500 Microsoft 365 Business Premium users wants to enable advanced identity protection features, such as risk-based conditional access and privileged identity management (PIM). These features require Microsoft Entra ID Premium P2. What is the most cost-effective licensing approach to add this capability?

Accepted Answer

Purchase Microsoft Entra ID Premium P2 as a standalone add-on. Option C is correct because Microsoft Entra ID Premium P2 is the specific license that provides risk-based conditional access and Privileged Identity Management (PIM). Purchasing it as a standalone add-on for the existing Microsoft 365 Business Premium users is the most cost-effective approach, as it adds only the required identity protection features without upgrading the entire suite or purchasing unrelated add-ons.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase Microsoft 365 E5 Security add-on

Answer

Purchase Microsoft 365 E5 Compliance add-on

Question 14

A development team wants to deploy a custom web application to the cloud. They want to upload their code and let the cloud provider handle server infrastructure, operating system updates, and automatic scaling. Which cloud service model best fits this requirement?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) is the correct choice because it provides a managed hosting environment where the development team can upload their custom web application code without managing the underlying server infrastructure, operating system updates, or scaling. Azure App Service, a PaaS offering, automatically handles OS patching, load balancing, and auto-scaling based on demand, aligning perfectly with the requirement to let the cloud provider handle these tasks.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 15

A company wants to ensure that sensitive documents classified as 'Confidential' are automatically encrypted and have restricted access permissions applied when they are shared via email. The protection must persist even if the email is forwarded to external parties. Which Microsoft Purview solution should be used?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (A) is correct because it enables classification and labeling of documents (e.g., 'Confidential'), with built-in encryption and rights management that persists regardless of where the document is shared or forwarded. This is achieved through Azure Rights Management (Azure RMS), which enforces access restrictions even when the email is forwarded to external parties, ensuring the protection travels with the content.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Message Encryption

Answer

Microsoft Purview Compliance Manager

Question 16

A help desk lead is documenting the correct Microsoft 365 approach to web/mobile Office apps, business email, Teams, OneDrive, and SharePoint, but not desktop Office apps. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Basic. The question describes a scenario requiring web/mobile Office apps, business email, Teams, OneDrive, and SharePoint—but explicitly excludes desktop Office apps. Microsoft 365 Business Basic is the correct plan because it includes all these services (Exchange Online for email, Teams, SharePoint Online, OneDrive for Business, and web/mobile versions of Office apps) without including the desktop Office applications, making it the most relevant licensing concept.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 17

During a Microsoft 365 planning workshop, keep a workload on-premises while using Microsoft cloud collaboration services. Cloud concept or benefit best matches this requirement?

Accepted Answer

Hybrid cloud. A hybrid cloud model is the correct answer because it explicitly describes a scenario where an organization keeps certain workloads on-premises while integrating with Microsoft cloud collaboration services like Microsoft 365. This allows for a unified management plane, identity federation via Azure AD Connect, and seamless data synchronization between on-premises infrastructure and cloud services such as Exchange Online, SharePoint Online, or Teams.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Question 18

A compliance officer wants to proactively prevent users from sending emails that contain sensitive personal data (e.g., credit card numbers) to external recipients. When a user attempts to send such an email, they should see a policy tip explaining the restriction and be blocked from sending. Which Microsoft Purview feature should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) policy. Microsoft Purview Data Loss Prevention (DLP) policy is the correct feature because it is specifically designed to detect sensitive data (e.g., credit card numbers) in transit and enforce actions such as showing a policy tip and blocking the email. DLP policies use sensitive information types (e.g., Credit Card Number) and conditions to inspect email content in Exchange Online, triggering a block action with an end-user notification when a match occurs.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview Communication Compliance

Question 19

A service owner is comparing Microsoft 365 capabilities and needs to prevent communication and collaboration between two business groups. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Information Barriers. Information Barriers (IB) in Microsoft 365 are specifically designed to prevent communication and collaboration between defined user groups, such as two business groups that must not interact. IB policies use segment-based rules to block chat, email, and file sharing across groups, enforced at the Exchange Online, Teams, and SharePoint levels. This directly meets the service owner's requirement to isolate groups, unlike the other options which are general-purpose tools without such isolation capabilities.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Stream

Question 20

A healthcare organization must ensure that all outgoing emails containing protected health information (PHI) are automatically encrypted. External recipients must be able to read the encrypted messages without installing any software or signing up for a service. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (C) is the correct solution because it enables automatic encryption of outgoing emails based on rules (e.g., detecting PHI) and allows external recipients to read encrypted messages via a secure web portal or inline rendering in supported email clients, without requiring any software installation or account sign-up. This directly meets the requirement for seamless, no-friction decryption by external parties.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Answer

Information protection policies