MS-900 Practice Test 22 — 15 Questions

Question 1

Refer to the exhibit. You are reviewing a Conditional Access policy in Microsoft Entra ID. What will this policy do?

Accepted Answer

Blocks access to Office 365 apps when the sign-in risk is high. The exhibit shows a Conditional Access policy configured with the condition 'Sign-in risk: High' and the control 'Block access'. This combination means that when Microsoft Entra ID detects a high-risk sign-in (e.g., from an anonymous IP address or compromised credentials), access to the targeted cloud apps is denied. The policy specifically targets Office 365 apps (as indicated in the 'Cloud apps or actions' assignment), so it blocks access to those apps when the sign-in risk is high.

Answer

Allows access but logs the sign-in risk

Answer

Requires multi-factor authentication for high-risk sign-ins

Answer

Blocks access to all cloud apps when sign-in risk is high

Question 2

A business wants predictable annual subscription pricing and centralized license assignment. Which option best matches the requirement?

Accepted Answer

Microsoft 365 admin center license management. The Microsoft 365 admin center provides centralized license assignment and management, allowing administrators to assign, revoke, and track licenses across users. It also supports predictable annual subscription pricing through Enterprise Agreement or CSP annual commitments, ensuring fixed costs for the billing period.

Answer

Microsoft Defender for Cloud only

Answer

A free personal Microsoft account only

Answer

Azure Virtual Desktop only

Question 3

Your organization is a non-profit. How can you obtain Microsoft 365 licenses at a reduced cost?

Accepted Answer

Apply for Microsoft’s non-profit program and purchase Microsoft 365 Business Premium at a discounted rate. Microsoft offers a Nonprofit Program that provides eligible organizations with discounted or donated Microsoft 365 licenses. After applying and being approved, nonprofits can purchase Microsoft 365 Business Premium at a significantly reduced rate, which includes advanced security and compliance features beyond the basic plans.

Answer

Purchase Microsoft 365 Business Basic from the Microsoft 365 admin center

Answer

Purchase Microsoft 365 Nonprofit Business Basic from the Microsoft 365 admin center

Answer

Use volume licensing through a Microsoft partner

Question 4

A company wants to use a cloud service where they can develop and run applications without managing the underlying infrastructure, including servers, operating systems, or storage. They only need to upload their code and the provider handles scaling and availability. Which cloud service model best describes this approach?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed hosting environment where developers can deploy applications without worrying about the underlying infrastructure. The provider automatically handles server provisioning, OS patching, storage management, and scaling based on demand. In this scenario, the company only needs to upload code, which is the defining characteristic of PaaS.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 5

Fabrikam Inc. has 5,000 users and is currently using Microsoft 365 E3. They want to enable Microsoft Copilot for Microsoft 365 for all users. The finance team is concerned about the additional cost and wants to explore if any existing licenses include Copilot or if they can use a lower-cost option. The IT team has determined that Copilot requires a qualifying license such as E3 or E5. Fabrikam also needs to maintain their current level of service for Exchange, SharePoint, Teams, and OneDrive. They do not need any additional security or compliance features beyond what E3 provides. Which licensing strategy should they implement to enable Copilot for all users while minimizing total cost?

Accepted Answer

Keep Microsoft 365 E3 and purchase Copilot add-on licenses for all users. Microsoft 365 E3 is a qualifying base license for Copilot for Microsoft 365, and the Copilot add-on can be purchased per user without changing the existing plan. This allows Fabrikam to retain their current E3 service levels for Exchange, SharePoint, Teams, and OneDrive while adding Copilot functionality at the lowest incremental cost, as they do not need the extra security or compliance features of E5.

Answer

Switch to Microsoft 365 Business Premium and add Copilot

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase standalone Copilot licenses without changing the base plan

Question 6

While preparing a Microsoft 365 adoption plan, a consultant is asked to reduce maintenance of power, cooling, and server replacement. Cloud concept or benefit best matches this requirement?

Accepted Answer

Reduced data center management. Reduced data center management is the correct answer because the requirement to reduce maintenance of power, cooling, and server replacement directly maps to the cloud benefit of offloading physical infrastructure responsibilities to the cloud provider. In Microsoft 365, this is realized through the shared responsibility model where Microsoft manages the underlying hardware, facilities, and environmental controls, allowing the organization to focus on application and data management rather than data center operations.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 7

A department head asks which Microsoft 365 option should be used to confirm whether a feature is included in a Microsoft 365 plan. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Official Microsoft plan comparison and licensing documentation. The official Microsoft plan comparison and licensing documentation (available at the Microsoft 365 admin center and the Microsoft 365 for business or enterprise plans page) provides the definitive, up-to-date list of features included in each subscription tier. This is the primary resource for confirming feature availability, as it directly maps service names (e.g., Exchange Online, Teams, SharePoint) to specific licensing SKUs, such as Microsoft 365 Business Basic or Microsoft 365 E5.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 8

A non-profit organization with 150 employees needs business-grade email, online and desktop versions of Office apps, 1 TB cloud storage per user, and the ability to manage user permissions on mobile devices. They are eligible for non-profit licensing. Which plan should they choose to meet all requirements most cost-effectively?

Accepted Answer

Microsoft 365 Business Premium (Nonprofit). Microsoft 365 Business Premium (Nonprofit) is the correct choice because it includes business-grade email (Exchange Online), desktop and online Office apps, 1 TB OneDrive storage per user, and Microsoft Intune for mobile device management (MDM) to manage user permissions on mobile devices. This plan provides all required capabilities at the lowest cost among options that include desktop apps and MDM, leveraging the nonprofit discount.

Answer

Microsoft 365 Business Basic (Nonprofit)

Answer

Microsoft 365 Business Standard (Nonprofit)

Answer

Microsoft 365 E3 (Nonprofit)

Question 9

A company with 40 users needs email, Teams, web Office apps, and cloud file storage but not desktop Office apps. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online for email, Teams for collaboration, web versions of Office apps (Word, Excel, PowerPoint), and OneDrive for cloud file storage — all without including desktop Office apps. This plan is designed specifically for organizations that need cloud productivity tools but not locally installed Office applications, matching the 40-user requirement exactly.

Answer

A free personal Microsoft account only

Answer

Azure Virtual Desktop only

Answer

Microsoft Defender for Cloud only

Question 10

A legal team needs to preserve all data related to a specific user involved in litigation, including Exchange emails, SharePoint documents, OneDrive files, and Teams chats. They require a hold that cannot be removed by the user and must allow for later searching and export. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Standard). eDiscovery (Standard) is the correct solution because it allows legal teams to place a hold on all content relevant to a specific user, including Exchange emails, SharePoint documents, OneDrive files, and Teams chats. This hold is enforced at the service level, preventing the user from deleting or modifying the data, and it preserves the content in its original location for later searching and export via Content Search or eDiscovery export tools.

Answer

Retention policies

Answer

Communication Compliance

Answer

Data Loss Prevention (DLP)

Question 11

Your organization uses Microsoft 365 E5 and wants to automatically classify emails containing credit card numbers as 'Sensitive' and apply encryption when sent externally. Which Microsoft Purview feature should you use?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect sensitive data types—such as credit card numbers—via built-in sensitive info types (e.g., Credit Card Number) and automatically enforce protective actions like blocking or encrypting emails when sent externally. Unlike sensitivity labels, DLP policies can inspect content in transit (Exchange Online) and apply encryption through transport rules or Office 365 Message Encryption (OME) without requiring user-applied labels.

Answer

Sensitivity labels

Answer

Retention policies

Answer

Microsoft Purview Information Protection

Question 12

A service owner is comparing Microsoft 365 capabilities and needs to block emails containing credit card numbers from being sent externally. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) in Microsoft 365 is the correct capability because it is specifically designed to detect and protect sensitive information, such as credit card numbers, by scanning email content and attachments. DLP policies can be configured to block external transmission of emails containing sensitive data, using built-in sensitive information types like the Credit Card Number rule that matches patterns based on Luhn checksum validation. This directly addresses the service owner's requirement to prevent credit card numbers from being sent externally.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 13

A compliance officer needs to automatically classify and protect documents stored in SharePoint Online that contain personal data such as passport numbers. The classification should happen without user intervention and must apply encryption and access restrictions. Which Microsoft Purview solution should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling (Option B) are the correct solution because they can automatically classify documents based on patterns like passport numbers using trainable classifiers or exact data match (EDM), and then apply encryption and access restrictions via the label's protection settings—all without user intervention. This meets the compliance officer's requirement for automatic classification and protection of personal data in SharePoint Online.

Answer

Data Loss Prevention (DLP) policy

Answer

eDiscovery (Standard)

Answer

Communication Compliance

Question 14

A hospital uses Microsoft 365 E5 and needs to ensure that patient health information (PHI) is not accidentally shared externally. They want to block sharing of emails containing credit card numbers or medical record numbers. Which Microsoft Purview feature should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect and block the accidental sharing of sensitive data, such as credit card numbers and medical record numbers, via email. DLP uses deep content analysis with built-in sensitive information types (e.g., Credit Card Number, U.S. Medical Record Number) to scan emails and enforce policies that prevent external sharing. This directly addresses the hospital's requirement to protect PHI from being leaked externally.

Answer

Microsoft Purview Privileged Access Management

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Information Barriers

Question 15

A customer reports that their Microsoft 365 Business Basic subscription is about to expire. They want to ensure uninterrupted service. What should they do?

Accepted Answer

Ensure recurring billing is enabled. Enabling recurring billing ensures that the subscription automatically renews before the expiration date, preventing any lapse in service. Without recurring billing, the subscription will expire at the end of the billing period, and the customer would lose access to Microsoft 365 services after a short grace period. This is the direct mechanism to maintain uninterrupted service for a Microsoft 365 Business Basic subscription.

Answer

Cancel the subscription immediately

Answer

Wait for the grace period to expire

Answer

Purchase an additional add-on license