MS-900 Practice Test 24 — 15 Questions

Question 1

A compliance-aware administrator is selecting the right Microsoft 365 capability to desktop Office apps plus business email and collaboration services without advanced security management. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is the correct choice because it includes desktop versions of Office apps (Word, Excel, PowerPoint, Outlook) plus business-class email (Exchange Online) and collaboration services (Teams, SharePoint, OneDrive) without advanced security features like Microsoft Defender for Office 365 or Azure Information Protection. This plan is designed for organizations needing core productivity and communication tools but not the higher-tier security management found in Business Premium or Enterprise plans.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 2

A company with 500 Microsoft 365 E3 users wants to add the highest level of threat protection and advanced investigation capabilities for their security team. Which licensing add-on should they purchase?

Accepted Answer

Microsoft 365 E5 Security. Microsoft 365 E5 Security is the correct add-on because it bundles the highest level of threat protection (Microsoft Defender for Office 365 Plan 2, Microsoft Defender for Endpoint Plan 2, and Microsoft Defender for Identity) along with advanced investigation capabilities like automated investigation and response (AIR), threat analytics, and advanced hunting in Microsoft 365 Defender. This meets the requirement for top-tier threat protection and advanced investigation without upgrading the entire E3 base license to E5.

Answer

Microsoft 365 E5 Compliance

Answer

Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 2 only

Question 3

A company with 500 users currently has Microsoft 365 Business Basic licenses. They need to provide all users with the desktop versions of Office apps and increase email storage to 100 GB per user. What is the most cost-effective licensing upgrade from the options below?

Accepted Answer

Upgrade to Microsoft 365 E3. Microsoft 365 Business Basic provides only web and mobile versions of Office apps and 50 GB of email storage. The requirement for desktop Office apps and 100 GB email storage per user is met by Microsoft 365 E3, which includes both the full desktop Office suite and Exchange Online Plan 2 (100 GB mailbox). Among the options, E3 is the most cost-effective upgrade because it bundles these features without the additional security and device management costs of Business Premium or the inefficiency of stacking add-ons on Business Basic.

Answer

Upgrade all users to Microsoft 365 Business Standard

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Keep Business Basic and purchase Exchange Online Plan 2 add-on for each user

Question 4

A compliance-aware administrator is selecting the right Microsoft 365 capability to encrypt email messages sent to internal or external recipients. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (B) is the correct choice because it is the dedicated Microsoft 365 service that provides encryption for email messages sent to both internal and external recipients. It leverages Azure Rights Management (Azure RMS) to protect messages, ensuring only intended recipients can decrypt and read them, which directly meets the compliance requirement for email encryption.

Answer

Microsoft Stream

Answer

Microsoft Planner

Answer

Microsoft Forms

Question 5

A company with 200 users currently has Microsoft 365 Business Premium licenses. They need to implement advanced compliance features, including communication compliance and eDiscovery (Premium). They want to keep their existing Business Premium licenses to avoid losing other features. What is the most cost-effective licensing strategy to add these capabilities?

Accepted Answer

Purchase the Microsoft 365 E5 Compliance add-on for all users. Option C is correct because the Microsoft 365 E5 Compliance add-on provides the advanced compliance features (communication compliance and eDiscovery Premium) required, while allowing the company to retain their existing Business Premium licenses. This is the most cost-effective approach, as it adds only the needed compliance capabilities without upgrading the entire suite or purchasing unnecessary security add-ons.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase the Microsoft 365 E5 Security add-on for all users

Answer

Purchase the Microsoft 365 E5 suite for all users

Question 6

A compliance administrator needs to assess compliance posture against standards and improvement actions. Which Microsoft 365 capability is the best fit?

Accepted Answer

Microsoft Purview Compliance Manager. Microsoft Purview Compliance Manager is the correct choice because it provides a comprehensive dashboard for assessing an organization's compliance posture against standards like ISO 27001, NIST, and GDPR, and it offers actionable improvement actions with step-by-step guidance. It automatically tracks controls, assigns scores, and integrates with Microsoft Secure Score to help administrators prioritize remediation efforts.

Answer

OneDrive sync client

Answer

Microsoft Teams live events

Answer

Microsoft Bookings

Question 7

A company wants monthly billing based on the number of Microsoft 365 users assigned licenses. Which cloud characteristic does this represent?

Accepted Answer

Measured service. Measured service is a cloud characteristic where usage is metered and billed based on consumption. In this scenario, the company is billed monthly based on the number of Microsoft 365 users assigned licenses, which directly reflects metered usage of the service. This aligns with the pay-per-use model defined by NIST SP 800-145 for cloud computing.

Answer

Fault tolerance

Answer

Resource pooling

Answer

Rapid elasticity

Question 8

A company uses a cloud service where they can provision virtual machines, install any operating system, and manage all software on those machines. The cloud provider is responsible for the physical hardware, data center security, and network infrastructure. Which cloud service model does this represent?

Accepted Answer

IaaS (Infrastructure as a Service). This scenario describes Infrastructure as a Service (IaaS) because the customer has full control over virtual machines, including the operating system and all installed software, while the cloud provider manages the underlying physical hardware, data center security, and network infrastructure. In IaaS, the provider offers virtualized computing resources over the internet, and the customer is responsible for everything above the hypervisor layer, such as OS patches, application configuration, and middleware.

Answer

PaaS (Platform as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 9

A company with 500 users is currently licensed with Microsoft 365 E3. The compliance team needs to add advanced eDiscovery capabilities (including predictive coding and legal hold) and the ability to retain data for up to 7 years. What is the most cost-effective licensing addition?

Accepted Answer

Microsoft 365 E5 Compliance add-on. Option A is correct because the Microsoft 365 E5 Compliance add-on provides advanced eDiscovery capabilities (including predictive coding and legal hold) and the ability to retain data for up to 7 years via retention policies. This add-on is the most cost-effective way to add these specific compliance features to an existing Microsoft 365 E3 subscription, as it avoids the higher cost of upgrading the entire suite to E5.

Answer

Microsoft 365 E5 Security add-on

Answer

Microsoft 365 E5

Answer

Office 365 E5

Question 10

A compliance-aware administrator is selecting the right Microsoft 365 capability to delegate Exchange Online mailbox and mail flow administration. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Exchange Administrator. The Exchange Administrator role in Microsoft 365 is specifically designed to delegate management of Exchange Online mailboxes, mail flow rules, and related settings. This built-in admin role provides granular permissions for tasks like creating shared mailboxes, configuring transport rules, and managing message trace, without granting broader tenant-wide access. It directly addresses the compliance-aware administrator's need to delegate Exchange-specific administration securely.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Question 11

A company with 250 users has Microsoft 365 E3 licenses. They want to add advanced anti-phishing and anti-malware protection for email and also deploy endpoint detection and response (EDR) for all devices. What is the most cost-effective licensing add-on?

Accepted Answer

Microsoft 365 E5 Security add-on. Microsoft 365 E5 Security add-on provides advanced anti-phishing and anti-malware protection via Microsoft Defender for Office 365 Plan 2 and includes Microsoft Defender for Endpoint Plan 2 for EDR capabilities. This is the most cost-effective option because it adds exactly the required security features to existing E3 licenses without the higher cost of a full E5 upgrade or the redundancy of separate plan 1 add-ons.

Answer

Microsoft Defender for Microsoft 365 Plan 1 and Microsoft Defender for Endpoint Plan 1 add-ons

Answer

Microsoft 365 E5 Compliance add-on

Answer

Upgrade all users to Microsoft 365 E5

Question 12

A company with 300 Microsoft 365 E3 users needs to add advanced identity protection features: Microsoft Entra ID Premium P2 and Microsoft Defender for Identity. They want to add these capabilities without upgrading all users to E5. What is the most cost-effective licensing strategy?

Accepted Answer

Add the Microsoft 365 E5 Security add-on for each user.. Option C is correct because the Microsoft 365 E5 Security add-on bundles Microsoft Entra ID Premium P2 and Microsoft Defender for Identity (along with other security features) at a lower per-user cost than purchasing them separately, and it can be added to an existing E3 subscription without upgrading the entire license. This provides the required identity protection capabilities cost-effectively for all 300 users.

Answer

Upgrade all users to Microsoft 365 E5.

Answer

Add Microsoft Entra ID Premium P2 and Microsoft Defender for Identity as standalone add-ons.

Answer

Add Enterprise Mobility + Security E5 add-on.

Question 13

A company with 50 users currently has Microsoft 365 Business Basic licenses. They now need to use desktop versions of Office apps (Word, Excel, PowerPoint) for all users. They also want to keep their existing business email and online meeting features. What is the most cost-effective licensing strategy?

Accepted Answer

Upgrade all users to Microsoft 365 Business Standard. Microsoft 365 Business Basic includes only web and mobile versions of Office apps, not the desktop versions. Upgrading to Microsoft 365 Business Standard provides the full desktop Office suite (Word, Excel, PowerPoint) while retaining the existing business email (Exchange Online) and online meeting features (Teams), making it the most cost-effective option for 50 users.

Answer

Purchase Microsoft 365 Apps for business for all users

Answer

Purchase Microsoft 365 E3 for all users

Answer

No change needed – Business Basic already includes desktop apps

Question 14

A department head asks which Microsoft 365 option should be used to access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

Accepted Answer

Broad network access. Broad network access is a core NIST cloud characteristic that enables resources to be accessed over the internet by standard protocols (e.g., HTTPS, TLS) from a wide range of client devices such as laptops, tablets, and phones. This directly matches the requirement for accessing cloud resources from multiple device types over the internet.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Question 15

A compliance administrator needs to investigate emails that may be part of a phishing campaign. Which Microsoft 365 capability is the best fit?

Accepted Answer

Threat Explorer in Microsoft Defender for Office 365. Threat Explorer in Microsoft Defender for Office 365 is the correct tool because it provides security teams with a powerful, real-time investigation interface to search, filter, and analyze email threats, including phishing campaigns. It allows administrators to view detailed email metadata, delivery actions, and threat types (e.g., phishing, malware) across the organization, making it the best fit for investigating suspected phishing emails.

Answer

Microsoft Bookings

Answer

Microsoft Teams live events

Answer

OneDrive sync client