MS-900 Practice Test 22 — 15 Questions

Question 1

A company's e-commerce website experiences a sudden surge in traffic during a promotional event. The cloud infrastructure automatically adds additional virtual servers to handle the load and removes them when traffic subsides, without any manual intervention from the IT team. Which cloud computing characteristic does this demonstrate?

Accepted Answer

Rapid elasticity. The scenario describes the cloud infrastructure automatically scaling virtual servers up and down in response to traffic changes, which is the defining characteristic of rapid elasticity. This capability allows resources to be provisioned and released elastically, often automatically, to match demand at any given time, as defined by NIST SP 800-145.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Measured service

Question 2

A company deploys a custom application on a cloud platform where they manage the operating system and runtime environment, but the cloud provider manages the underlying physical infrastructure, storage, and networking. Which cloud service model is being used?

Accepted Answer

Infrastructure as a Service (IaaS). The scenario describes a model where the customer manages the operating system and runtime environment, while the cloud provider handles the physical infrastructure, storage, and networking. This aligns precisely with Infrastructure as a Service (IaaS), as IaaS provides virtualized computing resources (e.g., virtual machines) where the customer retains control over the OS, middleware, and applications, but the provider manages the underlying hardware, hypervisor, and physical network.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Question 3

A company runs a legacy application that requires a fixed amount of dedicated hardware resources for compliance reasons. However, they want to benefit from cloud-based backup and disaster recovery to reduce on-premises hardware costs. Which cloud deployment model best aligns with this requirement?

Accepted Answer

Hybrid cloud. Hybrid cloud is correct because it allows the company to keep the legacy application on dedicated on-premises hardware for compliance, while leveraging cloud-based backup and disaster recovery services (e.g., Azure Backup and Azure Site Recovery) to reduce on-premises hardware costs. This model combines private cloud (or on-premises infrastructure) with public cloud resources, enabling data replication and failover to the cloud without migrating the application itself.

Answer

Public cloud

Answer

Private cloud

Answer

Community cloud

Question 4

A company migrates its database to Azure SQL Database (PaaS). According to the shared responsibility model, which of the following is the customer's responsibility?

Accepted Answer

Managing user access and authentication. In the shared responsibility model for Azure SQL Database (PaaS), the customer is responsible for managing user access and authentication because the customer controls who can connect to the database and what permissions they have. Microsoft manages the underlying infrastructure, including the operating system, physical hardware, and virtualization layer, while the customer must secure data access through Azure Active Directory or SQL authentication, configure firewall rules, and manage logins and users.

Answer

Patching the operating system of the database server

Answer

Maintaining the physical infrastructure

Answer

Managing the virtualization layer

Question 5

A company uses a cloud provider that hosts multiple customers on the same physical servers. Each customer's data and applications are isolated, but customers have no knowledge or control over the exact physical location of their resources. Which cloud characteristic does this describe?

Accepted Answer

Resource pooling. Resource pooling is the correct answer because the scenario describes a multi-tenant model where the cloud provider's physical and virtual resources are pooled to serve multiple customers, with isolation between tenants. Customers have no knowledge or control over the exact physical location of their resources, which is a defining characteristic of resource pooling as defined by NIST SP 800-145.

Answer

Rapid elasticity

Answer

On-demand self-service

Answer

Measured service

Question 6

A business stakeholder asks how Microsoft 365 can help them manage laptops and mobile devices with compliance policies and app protection. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct answer because it is a cloud-based endpoint management solution that provides mobile device management (MDM) and mobile application management (MAM) capabilities. It allows administrators to enforce compliance policies (e.g., require PIN, encrypt device) and app protection policies (e.g., restrict copy/paste, prevent data leakage) on laptops and mobile devices, directly addressing the stakeholder's request.

Answer

Microsoft Stream

Answer

Microsoft Planner

Answer

Microsoft Forms

Question 7

A company uses a cloud provider that charges them only for the actual storage and compute resources they consume each month. They can start or stop machines at any time and are billed precisely for what they use. Which cloud computing characteristic does this billing model demonstrate?

Accepted Answer

Measured service. The billing model described—paying only for actual storage and compute resources consumed, with the ability to start/stop machines at any time—directly demonstrates 'Measured service'. This characteristic, defined by NIST SP 800-145, means cloud systems automatically control and optimize resource usage by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, active user accounts). Usage is monitored, controlled, and reported, providing transparency for both the provider and consumer.

Answer

Rapid elasticity

Answer

On-demand self-service

Answer

Resource pooling

Question 8

A compliance administrator needs to ensure that any document containing a patient's health information (e.g., medical record number) is automatically encrypted and restricted to authorized users. The encryption should be enforced regardless of where the document is saved (SharePoint, OneDrive, or email). Which Microsoft Purview feature should they configure?

Accepted Answer

Auto-labeling policies with sensitivity labels. Auto-labeling policies with sensitivity labels are the correct choice because they can automatically apply encryption and access restrictions to documents containing sensitive data like medical record numbers, regardless of where the document is saved (SharePoint, OneDrive, or email). Sensitivity labels support persistent protection that travels with the file, enforcing encryption and authorized user restrictions even when the file is moved or copied. This meets the requirement for automatic, location-independent encryption and access control.

Answer

Information Rights Management (IRM)

Answer

Data Loss Prevention (DLP) policies

Answer

Retention labels

Question 9

A company runs its customer relationship management (CRM) system using a cloud provider's SaaS offering. They also use virtual machines (IaaS) from the same provider to host a legacy application. In this scenario, who is responsible for patching the operating system of the virtual machines?

Accepted Answer

The customer is responsible for patching the operating system of the virtual machines.. In an IaaS model, the cloud provider is responsible for the security of the physical infrastructure, hypervisor, and network, but the customer retains responsibility for the guest operating system and applications. Since the virtual machines are IaaS resources, the customer must manage OS patches, updates, and configuration. This follows the shared responsibility model, where the customer is accountable for anything they configure or deploy within the virtual machine.

Answer

The cloud provider is fully responsible for patching all components.

Answer

The cloud provider patches the OS for all services equally.

Answer

No patching is needed because the cloud handles everything.

Question 10

A business stakeholder asks how Microsoft 365 can help them create a short-term test environment and delete it after the pilot. Cloud concept or benefit best matches this requirement?

Accepted Answer

Agility. Agility is the correct answer because it refers to the ability to rapidly provision and deprovision resources, such as creating a short-term test environment and deleting it after a pilot. Microsoft 365's cloud-based infrastructure enables on-demand scaling and resource lifecycle management, allowing organizations to spin up environments quickly and tear them down without long-term commitments or hardware procurement delays.

Answer

Sensitivity labels

Answer

Data Loss Prevention (DLP)

Answer

Microsoft Planner

Question 11

A company wants to deploy a cloud solution where they have the maximum control over the operating system, installed software, and security configurations, but they do not want to manage physical servers or data center facilities. Which cloud service model best meets this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, giving the customer full administrative control over the operating system, installed software, and security configurations (e.g., firewall rules, patch management) while the cloud provider manages the physical servers, storage, and networking hardware. This model aligns with the requirement for maximum control without managing physical infrastructure.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Hybrid cloud

Question 12

A company has 100 Microsoft 365 E3 users. They need to add advanced threat protection (Microsoft Defender for Office 365 Plan 2) and advanced compliance (eDiscovery Premium) for all users. They want to minimize additional costs while keeping their existing E3 subscriptions. What is the most cost-effective licensing strategy?

Accepted Answer

Purchase both the Microsoft 365 E5 Compliance add-on and the Microsoft 365 E5 Security add-on. Option A is correct because Microsoft 365 E5 Security and E5 Compliance add-ons provide exactly the required capabilities (Defender for Office 365 Plan 2 and eDiscovery Premium) without upgrading the base E3 license. This approach avoids the cost of a full E5 upgrade while still covering both advanced threat protection and advanced compliance needs.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase only the Microsoft 365 E5 Compliance add-on

Answer

Purchase only the Microsoft 365 E5 Security add-on

Question 13

A company with 100 Microsoft 365 E3 users needs to add cloud access security broker capabilities to monitor and control user access to SaaS applications and shadow IT. They want the most cost-effective add-on. What should they purchase?

Accepted Answer

Microsoft Defender for Cloud Apps. Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) that provides visibility into shadow IT, controls over user access to SaaS applications, and data protection policies. It is the most cost-effective add-on for this specific requirement because it can be licensed standalone without requiring higher-tier Microsoft 365 or Entra ID plans, and it directly addresses the need to monitor and control SaaS app usage.

Answer

Microsoft Defender for Microsoft 365 Plan 2

Answer

Microsoft Entra ID Premium P2

Answer

Microsoft 365 E5 Compliance

Question 14

A compliance-aware administrator is selecting the right Microsoft 365 capability to manage formal records that must be retained and disposed of according to policy. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Records Management. Records Management in Microsoft 365 (part of Microsoft Purview) is specifically designed to manage formal records by applying retention labels that enforce retention and disposition policies. It allows administrators to declare records, lock them against modification or deletion, and trigger disposal actions based on regulatory or organizational requirements. This directly addresses the need to retain and dispose of records according to policy.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Stream

Question 15

A company with 120 users needs desktop Office apps, Intune device management, and enhanced security. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium includes desktop Office apps (Office 365 E3 equivalent), Intune for device management, and advanced security features such as Microsoft Defender for Office 365, Azure Information Protection, and Conditional Access. This bundle directly satisfies all three requirements for a 120-user organization without needing separate subscriptions.

Answer

Microsoft Defender for Cloud only

Answer

Azure Virtual Desktop only

Answer

A free personal Microsoft account only