MS-900 Practice Test 25 — 15 Questions

Question 1

A company with 500 Microsoft 365 Business Premium users encounters a critical service outage that prevents all users from accessing email. They need to report the incident and expect a response within 1 hour. Which support option should they use to achieve this while keeping additional costs as low as possible?

Accepted Answer

Purchase a Microsoft Professional Direct support subscription and submit a Severity A incident.. Microsoft 365 Business Premium includes only standard support incidents with no guaranteed response time. To achieve a 1-hour response for a critical outage (Severity A), you need a paid support plan. The Professional Direct support subscription is the most cost-effective option that provides a 1-hour response for Severity A incidents, making option B correct.

Answer

Create a service request through the Microsoft 365 admin center, which includes a standard support incident.

Answer

Purchase a Microsoft Premier Support plan and submit a critical incident.

Answer

Post the issue in the Microsoft 365 Tech Community forum.

Question 2

A 200-user company needs desktop Office apps, Exchange Online mailboxes, Microsoft Teams, and Intune-based device management. Which Microsoft 365 plan is the best fit from the listed options?

Accepted Answer

Microsoft 365 Business Premium.. Microsoft 365 Business Premium is the correct choice because it bundles desktop Office apps (e.g., Word, Excel, Outlook), Exchange Online mailboxes, Microsoft Teams, and Intune-based device management into a single subscription. This plan is specifically designed for small-to-medium businesses needing full productivity, communication, and security/compliance capabilities, including mobile device management (MDM) via Intune.

Answer

Microsoft 365 Business Basic.

Answer

Exchange Online Plan 1.

Answer

Microsoft Teams Essentials.

Question 3

A compliance officer needs to ensure that all emails and documents in Exchange Online and SharePoint are automatically retained for five years. After five years, the data should be automatically deleted. Which Microsoft Purview solution should they configure?

Accepted Answer

Retention policies. Retention policies in Microsoft Purview are designed to automatically retain data for a specified period and then delete it, meeting the compliance officer's requirement for Exchange Online and SharePoint. This solution applies at the container level (e.g., mailboxes, sites) and can enforce a five-year retention followed by automatic deletion without user intervention.

Answer

Data loss prevention (DLP) policies

Answer

Sensitivity labels

Answer

eDiscovery (Standard)

Question 4

A multinational organization with 5,000 users currently has Microsoft 365 E3 licenses. They need to meet a regulatory requirement that all user activity logs must be retained for 7 years. They also require the ability to place litigation holds on all mailboxes. Which licensing approach meets the compliance requirements at the lowest additional cost?

Accepted Answer

Add Microsoft 365 E5 Compliance add-on for all users. Option B is correct because the Microsoft 365 E5 Compliance add-on provides the required 7-year audit log retention (via Unified Audit Log retention policies) and litigation hold capabilities for mailboxes, without upgrading the entire license to E5. This add-on is the most cost-effective way to meet these specific compliance needs for all 5,000 users while retaining their existing E3 base licenses.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Add Microsoft 365 E5 eDiscovery and Audit add-on for all users

Answer

Add Microsoft 365 Communications Compliance add-on for all users

Question 5

A company with 500 Microsoft 365 Business Premium users needs to add Microsoft Defender for Office 365 Plan 2 (advanced threat protection) and eDiscovery (Premium) for legal investigations. They want to keep their existing Business Premium subscriptions to retain current features. Which add-on licenses are required?

Accepted Answer

Both Microsoft 365 E5 Security and Microsoft 365 E5 Compliance add-ons. Microsoft 365 Business Premium includes basic security and compliance features, but Microsoft Defender for Office 365 Plan 2 requires the Microsoft 365 E5 Security add-on, and eDiscovery (Premium) requires the Microsoft 365 E5 Compliance add-on. Since both advanced capabilities are needed, both add-ons are required to supplement the existing Business Premium subscriptions without upgrading to full E5.

Answer

Microsoft 365 E5 Security add-on only

Answer

Microsoft 365 E5 Compliance add-on only

Answer

Upgrade all users to Microsoft 365 E5

Question 6

A company has 250 users with Microsoft 365 E3 licenses. They need to add Microsoft Defender for Microsoft 365 Plan 2 (for advanced threat protection and automated investigation) and Microsoft 365 E5 eDiscovery and Audit capabilities for legal investigations. They want to keep their existing E3 subscriptions and minimize additional costs. What is the most cost-effective licensing approach?

Accepted Answer

Purchase the Microsoft Defender for Microsoft 365 Plan 2 add-on and the Microsoft 365 E5 eDiscovery and Audit add-on separately. Option D is correct because it allows the company to keep their existing Microsoft 365 E3 licenses and purchase only the specific add-ons needed: Microsoft Defender for Office 365 Plan 2 (for advanced threat protection and automated investigation) and the Microsoft 365 E5 eDiscovery and Audit add-on (which provides advanced eDiscovery and audit capabilities). This avoids the cost of upgrading all users to E5 or purchasing broader suites like E5 Security or E5 Compliance, which include features not required.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase the Microsoft 365 E5 Security add-on for all users

Answer

Purchase the Microsoft 365 E5 Compliance add-on for all users

Question 7

A help desk lead is documenting the correct Microsoft 365 approach to track compliance assessments and improvement actions. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Compliance Manager. Microsoft Purview Compliance Manager is the correct tool because it provides a centralized dashboard for tracking compliance assessments, managing improvement actions, and monitoring regulatory compliance posture. It integrates with Microsoft 365 services to automate risk assessments and generate detailed reports for standards like ISO 27001, SOC 2, and GDPR.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 8

A company runs a custom application on a cloud provider's infrastructure. The provider manages the physical servers, networking, and storage, but the company installs, configures, and patches the operating system and application. Which cloud service model is this?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the cloud provider manages the underlying physical infrastructure (servers, networking, storage), while the customer retains control over the operating system, middleware, and application. In IaaS, the customer is responsible for OS patching, configuration, and application management, which matches the given responsibilities.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 9

A company has 100 Microsoft 365 E3 users. They need to add advanced threat protection (Microsoft Defender for Microsoft 365 Plan 2) and advanced compliance (eDiscovery Premium) for all users. They want to minimize additional costs while keeping their existing E3 subscriptions. What is the most cost-effective licensing strategy?

Accepted Answer

Purchase both the Microsoft 365 E5 Compliance add-on and the Microsoft 365 E5 Security add-on. The Microsoft 365 E5 Security add-on provides Microsoft Defender for Office 365 Plan 2, and the Microsoft 365 E5 Compliance add-on provides eDiscovery Premium. Purchasing both add-ons for existing E3 users delivers the required advanced threat protection and advanced compliance capabilities without the full cost of upgrading to E5, making it the most cost-effective strategy.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase only the Microsoft 365 E5 Compliance add-on

Answer

Purchase only the Microsoft 365 E5 Security add-on

Question 10

A company with 1,000 users has Microsoft 365 E3 subscriptions. They are experiencing a major outage affecting all users and need guaranteed 1-hour response time for a critical support issue. What should they purchase?

Accepted Answer

Professional Direct Support. Professional Direct Support provides a guaranteed 1-hour response time for critical severity issues, which is required for the company's major outage affecting all 1,000 users. Standard Support, included with Microsoft 365 E3, offers a 1-hour response for critical issues only for Business-level subscriptions; for Enterprise subscriptions like E3, the critical response time is 2 hours. Professional Direct Support also includes proactive guidance and a named support engineer, making it the correct choice for guaranteed 1-hour response.

Answer

Standard Support (included)

Answer

Azure Support Basic

Answer

Partner support via a Microsoft CSP

Question 11

A company wants to ensure that sensitive documents stored in SharePoint Online are automatically classified and protected if they contain credit card numbers or social security numbers. Which Microsoft Purview feature should they implement?

Accepted Answer

Data Loss Prevention (DLP) policies. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to automatically detect, classify, and protect sensitive information such as credit card numbers and social security numbers. When a DLP policy is configured with sensitive information types (e.g., Credit Card Number, U.S. Social Security Number), it can scan documents in SharePoint Online and automatically apply protective actions like blocking access or triggering notifications. This makes DLP the correct feature for the described requirement.

Answer

Data Lifecycle Management (DLM)

Answer

Information Protection (Sensitivity labels)

Answer

Insider Risk Management

Question 12

Which three options describe key capabilities of Microsoft Purview that help organizations manage compliance and data governance in Microsoft 365? (Choose three.)

Accepted Answer

Automatically classify and label sensitive data across Microsoft 365 services. Microsoft Purview provides integrated data governance and compliance capabilities across Microsoft 365. It automatically classifies and labels sensitive data using trainable classifiers and exact data match, applies retention policies and labels to meet legal and regulatory requirements, and enables eDiscovery searches with legal hold to preserve content for litigation. These three capabilities directly address data classification, lifecycle management, and legal discovery.

Answer

Provide anti-malware and phishing protection in email

Answer

Manage user passwords and enforce multi-factor authentication

Answer

Monitor network traffic to prevent DDoS attacks

Question 13

A compliance administrator needs to apply encryption and usage restrictions to confidential documents. Which Microsoft 365 capability is the best fit? The design must avoid adding custom operational scripts.

Accepted Answer

Sensitivity labels. Sensitivity labels are the correct choice because they allow the compliance administrator to apply encryption and usage restrictions (such as 'Do Not Forward' or 'View Only') directly to confidential documents without writing any custom scripts. This capability is built into Microsoft 365 and integrates with Azure Information Protection to enforce protection policies at the file level, meeting the requirement for a no-code solution.

Answer

OneDrive sync client

Answer

Microsoft Bookings

Answer

Microsoft Teams live events

Question 14

A compliance-aware administrator is selecting the right Microsoft 365 capability to guide assignment of Microsoft 365 admin roles. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Least privilege. The principle of least privilege is the most relevant concept for guiding assignment of Microsoft 365 admin roles because it dictates that administrators should be granted only the permissions necessary to perform their job functions, minimizing security risks. This directly aligns with compliance requirements by ensuring that no user has excessive access to sensitive administrative functions. The other options (Whiteboard, Stream, Forms) are productivity or collaboration tools unrelated to role-based access control or compliance.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 15

A compliance officer wants to automatically encrypt outgoing emails containing credit card numbers and also prevent recipients from forwarding or copying the content. Which Microsoft Purview solution should be applied?

Accepted Answer

Sensitivity label with encryption and rights management. Sensitivity labels with encryption and rights management (Azure Rights Management) allow you to apply persistent protection that encrypts the email and restricts actions like forwarding, copying, or printing. This meets both requirements: automatic detection of credit card numbers via auto-labeling policies and enforcement of usage restrictions through Rights Management templates (e.g., Do Not Forward).

Answer

Data Loss Prevention (DLP) policy with encryption

Answer

Microsoft Information Bar

Answer

Azure Information Protection unified labeling client