MS-900 Practice Test 23 — 15 Questions

Question 1

While preparing a Microsoft 365 adoption plan, a consultant is asked to identify risky user behaviour such as unusual downloads or policy violations. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management is the correct capability because it is specifically designed to identify, detect, and act on risky user behaviors such as unusual downloads, data leaks, and policy violations. It uses machine learning models and predefined indicators to correlate user activities (e.g., mass file downloads, unauthorized sharing) with risk signals, enabling organizations to investigate and mitigate insider threats. This aligns directly with the consultant's need to monitor and address risky behavior in a Microsoft 365 adoption plan.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 2

A company with 1,000 users currently has Microsoft 365 E3 licenses. They need to add advanced threat protection for email (including anti-phishing and anti-malware) and endpoint detection and response (EDR) for all devices. What is the most cost-effective licensing addition?

Accepted Answer

Microsoft 365 E5 Security add-on. Option A is correct because the Microsoft 365 E5 Security add-on provides advanced threat protection (including anti-phishing and anti-malware for email via Defender for Office 365 Plan 2) and endpoint detection and response (EDR) via Microsoft Defender for Endpoint Plan 2, all without requiring a full E5 license upgrade. This is the most cost-effective solution for adding these specific security capabilities to existing E3 users.

Answer

Microsoft 365 E5 Compliance add-on

Answer

Upgrade all users to Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 1 standalone

Question 3

A business stakeholder asks how Microsoft 365 can help them access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

Accepted Answer

Broad network access. Broad network access is a core NIST cloud computing characteristic that enables resources to be accessed over the network by standard mechanisms (e.g., mobile phones, tablets, laptops, and workstations). This directly matches the stakeholder's requirement for accessing cloud resources from various devices over the internet, as Microsoft 365 leverages HTTPS and standard protocols to provide ubiquitous access.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Question 4

A company uses cloud resources and notices that their monthly bill is based on the exact amount of storage and compute hours they consumed. They did not pay for any fixed, unused capacity. Which cloud characteristic does this describe?

Accepted Answer

Measured service. Measured service is the cloud characteristic that enables usage-based billing, where customers pay only for the resources they actually consume (e.g., storage GB-hours, compute vCPU-hours) without any upfront or fixed costs for idle capacity. This is implemented through metering capabilities at the hypervisor or resource provider level, which track consumption in granular units and feed into billing systems. The scenario explicitly describes paying for exact consumption, which aligns directly with the pay-per-use model of measured service.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 5

A compliance-aware administrator is selecting the right Microsoft 365 capability to add and remove capacity quickly when demand changes. Cloud concept or benefit best matches this requirement?

Accepted Answer

Rapid elasticity. Rapid elasticity is a core cloud computing concept defined by NIST (SP 800-145) that allows resources to be provisioned and released automatically in response to demand. In Microsoft 365, this is demonstrated by the ability to add or remove user licenses (e.g., via the Microsoft 365 admin center or PowerShell) on a per-seat basis, scaling capacity up or down almost instantly without manual infrastructure changes.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 6

A company wants to ensure that all administrative actions in Microsoft 365 are logged and that any changes to roles and permissions are reviewed on a monthly basis. Which Microsoft Purview solution should the compliance team use?

Accepted Answer

Privileged Identity Management. Privileged Identity Management (PIM) is the correct solution because it provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions. PIM also generates audit logs for role activations and changes, and supports periodic access reviews (e.g., monthly reviews of role assignments) through Microsoft Entra ID access reviews, directly meeting the requirement to review changes to roles and permissions on a monthly basis.

Answer

Audit (Standard)

Answer

Audit (Premium)

Answer

Privileged Access Management

Question 7

A company wants to ensure that only IT administrators can install browser extensions in Microsoft Edge. Which Microsoft 365 security feature should be used?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct choice because it provides mobile device management (MDM) and mobile application management (MAM) capabilities that allow administrators to configure Microsoft Edge settings via configuration profiles. Specifically, Intune can enforce the 'Installation of browser extensions' policy to restrict extension installation to IT administrators only, using the Administrative Templates for Edge within the Settings Catalog.

Answer

Conditional Access

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Entra ID Identity Protection

Question 8

A company uses a cloud provider that offers compute power as a service. The provider manages the physical servers, storage, and networking, but the company has full control over the operating system, applications, and configurations. Which cloud service model is being used?

Accepted Answer

Infrastructure as a Service (IaaS). The scenario describes Infrastructure as a Service (IaaS), where the cloud provider manages the underlying physical infrastructure (servers, storage, networking), but the customer retains full control over the operating system, applications, and configurations. This aligns with the IaaS model as defined by NIST SP 800-145, which provides virtualized computing resources over the internet.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 9

A company is deploying a cloud solution where they have the ability to quickly scale up resources during peak demand and scale down during off-peak hours, paying only for what they use. They also need the provider to automatically manage the underlying platform, including patching the operating system. Which combination of cloud characteristics and service model best describes this scenario?

Accepted Answer

Elasticity and PaaS. Option A is correct because the scenario describes elasticity (the ability to scale resources up and down automatically based on demand) and Platform as a Service (PaaS), where the provider manages the underlying platform, including OS patching. Elasticity is a key cloud characteristic that enables dynamic scaling, and PaaS abstracts infrastructure management, aligning perfectly with the requirement for automatic platform maintenance.

Answer

Scalability and IaaS

Answer

Rapid elasticity and SaaS

Answer

Measured service and PaaS

Question 10

A company currently has Microsoft 365 E3 licenses for all 200 users. They need to add PSTN calling capabilities (Phone System and Calling Plan) for making and receiving external phone calls from Microsoft Teams. They also want to allow dial-in audio conferencing for online meetings. They want to minimize additional costs while keeping existing E3 subscriptions. What is the most cost-effective licensing strategy?

Accepted Answer

Purchase the 'Phone System + Audio Conferencing' add-on for each user. Option C is correct because the 'Phone System + Audio Conferencing' add-on is a bundled SKU specifically designed to provide both PSTN calling capabilities (Phone System and Calling Plan) and dial-in audio conferencing for Microsoft Teams at a lower combined cost than purchasing the two add-ons separately. Since the company already has Microsoft 365 E3 licenses, they only need this single add-on per user to meet all requirements without upgrading to E5 or buying individual add-ons, minimizing additional costs.

Answer

Purchase Microsoft 365 E5 add-on for each user

Answer

Purchase Phone System add-on and Audio Conferencing add-on separately for each user

Answer

Upgrade all users to Microsoft 365 E5

Question 11

A company migrates its database to a cloud service where the provider manages the database engine, patching, backups, and replication. The customer only manages the data and schema. Which cloud service model is this?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including the database engine, operating system, patching, backups, and replication. The customer is responsible only for managing the data and schema, which aligns directly with the scenario described.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises

Question 12

A company with 200 users currently has Microsoft 365 Business Basic licenses. They need to add Microsoft Defender for Office 365 (Plan 1) and device management capabilities using Microsoft Intune. What is the most cost-effective licensing upgrade to obtain these features?

Accepted Answer

Upgrade to Microsoft 365 Business Premium. Microsoft 365 Business Premium includes both Microsoft Defender for Office 365 (Plan 1) and Microsoft Intune device management, making it the most cost-effective upgrade from Business Basic. Purchasing these as standalone add-ons would cost more per user than the bundled Business Premium license, which also provides additional security and productivity features.

Answer

Add standalone Microsoft Defender for Office 365 Plan 1

Answer

Add standalone Microsoft Intune

Answer

Upgrade to Microsoft 365 E3

Question 13

A compliance officer wants to ensure that all data in Microsoft 365 is encrypted using a key that the organization manages and stores in their own Azure Key Vault. Microsoft will not have access to the key. Which solution should they implement?

Accepted Answer

Double Key Encryption (DKE). Double Key Encryption (DKE) is the correct solution because it allows an organization to use their own key stored in Azure Key Vault for encrypting sensitive Microsoft 365 data, while ensuring that Microsoft cannot access the key. With DKE, the encryption key is split into two parts: one managed by Microsoft and one managed by the customer in their own Azure Key Vault, so both parties must be compromised to decrypt the data. This meets the compliance officer's requirement for exclusive control over the encryption key.

Answer

Customer Lockbox

Answer

Information Rights Management (IRM)

Answer

Microsoft Purview Data Lifecycle Management

Question 14

A company with 300 users is choosing between Microsoft 365 Business Premium and Microsoft 365 E3. They need desktop Office apps, email, Teams, and basic device management (including Microsoft Intune). They do not need advanced compliance or analytics. Which plan is more cost-effective?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium is the most cost-effective choice because it includes desktop Office apps, Exchange Online email, Teams, and Microsoft Intune for basic device management, all for a lower per-user price than E3. The company's stated needs (no advanced compliance or analytics) align perfectly with Business Premium's feature set, making E3's additional capabilities unnecessary and more expensive.

Answer

Microsoft 365 E3

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 F3

Question 15

A company with 100 users currently has Microsoft 365 Business Standard. The IT department wants to add governance-level security features, including conditional access policies, Microsoft Defender for Microsoft 365, and compliance tools like litigation hold and eDiscovery. Which licensing upgrade should they consider?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium is the correct upgrade because it includes all the requested governance-level security features—Conditional Access, Microsoft Defender for Business (which is the Defender for Microsoft 365 offering for the Business plan), and compliance tools like litigation hold and eDiscovery—while remaining within the Business suite. It is designed for organizations with up to 300 users that need enterprise-grade security and compliance without moving to the Enterprise (E) licensing tier.

Answer

Microsoft 365 E3

Answer

Microsoft 365 F3

Answer

Microsoft 365 E1