MS-900 Practice Test 2 — 25 Questions

Question 1

A non-profit organization with 15 employees needs business-grade email, desktop versions of Office apps, and 1 TB of cloud storage per user. They are eligible for Microsoft's non-profit program. Which plan provides these features at the lowest cost?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft 365 Business Standard for Nonprofits. Microsoft 365 Business Standard for Nonprofits is the correct choice because it includes business-grade email (Exchange Online), desktop versions of Office apps (Word, Excel, PowerPoint, etc.), and 1 TB of OneDrive cloud storage per user, all at a significantly reduced cost (or free for qualifying organizations) under the nonprofit program. Business Basic only provides web and mobile Office apps, not desktop versions, and E3/Enterprise plans are more expensive and include advanced security and compliance features not required by this 15-employee organization.

Answer

Microsoft 365 Business Basic for Nonprofits

Answer

Microsoft 365 E3 for Nonprofits

Answer

Microsoft 365 Enterprise for Nonprofits

Question 2

A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID passwordless authentication. Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 3

You are the compliance officer for Fabrikam, a medium-sized company with 500 users on Microsoft 365 Business Premium. Fabrikam must comply with the California Consumer Privacy Act (CCPA). The legal team has identified that they need to be able to respond to consumer requests to delete personal data within 45 days. They also need to ensure that personal data is not retained longer than necessary. You have been asked to configure Microsoft Purview to meet these requirements. Specifically, you need to search for and delete personal data when a deletion request is received, and set up a data retention policy to automatically delete personal data after 2 years. What should you do?

Accepted Answer

Use Content Search to find personal data, then use eDiscovery to delete it for deletion requests. Create a retention policy with a retention period of 2 years for all SharePoint sites and OneDrive accounts.. To delete personal data for a specific user, you need to use Content Search to find the data and then eDiscovery to delete it. A retention policy can be set to automatically delete data after 2 years. Option A is incorrect because a retention label is for manual application, not automatic deletion. Option C is incorrect because DLP does not delete data. Option D is incorrect because auto-labeling does not delete data.

Answer

Implement auto-labeling to label personal data and configure a retention label to delete after 2 years.

Answer

Create a retention label that deletes data after 2 years and apply it manually to all documents containing personal data.

Answer

Configure a DLP policy to block sharing of personal data and set a retention policy for 2 years.

Question 4

Drag and drop the steps to set up a Microsoft Teams meeting with external participants into the correct order.

Accepted Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees (including external participants). Step 3: Configure meeting options (e.g., bypass lobby for external). Step 4: Send the meeting invitation.. Creating a Teams meeting involves scheduling, adding attendees, setting options, and sending the invite.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Configure meeting options. Step 3: Add attendees. Step 4: Send the meeting invitation.

Answer

Step 1: Add attendees. Step 2: Open Teams calendar and schedule a new meeting. Step 3: Configure meeting options. Step 4: Send the meeting invitation.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees. Step 3: Send the meeting invitation. Step 4: Configure meeting options.

Question 5

Drag and drop the steps to deploy Microsoft 365 Apps for enterprise to a Windows device using the Microsoft 365 Apps admin center into the correct order.

Accepted Answer

Step 1: Sign in to the Microsoft 365 Apps admin center. Step 2: Create a configuration for deployment. Step 3: Download the Office Deployment Tool and the configuration file. Step 4: Run the Office Deployment Tool on the client device.. Deploying Office uses the admin center to create a config, then ODT to install based on that config.

Answer

Step 1: Download the Office Deployment Tool. Step 2: Sign in to the Microsoft 365 Apps admin center. Step 3: Create a configuration. Step 4: Run the ODT on the client device.

Answer

Step 1: Run the Office Deployment Tool on the client device. Step 2: Sign in to the admin center. Step 3: Create a configuration. Step 4: Download the configuration file.

Answer

Step 1: Sign in to the admin center. Step 2: Download the ODT. Step 3: Create a configuration. Step 4: Run ODT with the configuration.

Question 6

A compliance team needs to ensure that any email sent from the Finance department that contains a bank account number is automatically encrypted. External recipients must be able to reply securely without needing to sign up for any service. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (B) is the correct solution because it allows the organization to automatically encrypt emails based on conditions (e.g., emails from Finance containing bank account numbers) and enables external recipients to reply securely using the encrypted reply portal without requiring any sign-up or additional software. This is achieved through Azure Rights Management (Azure RMS) and the Office 365 Message Encryption (OME) portal, which provides a seamless, browser-based experience for external users.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Information Protection (sensitivity labels)

Answer

Microsoft Defender for Office 365

Question 7

A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?

Accepted Answer

Microsoft Viva Engage. Microsoft Viva Engage (formerly Yammer) is designed as a social networking and employee communication hub that provides company-wide announcements, topic-based communities, and seamless integration with SharePoint and Power BI dashboards. It focuses on fostering open communication across the organization, unlike collaboration tools that are team-centric.

Answer

Microsoft Teams

Answer

SharePoint Online

Answer

Outlook

Question 8

A company with 300 Microsoft 365 E3 users needs to add advanced identity protection features: Microsoft Entra ID Premium P2 and Microsoft Defender for Identity. They want to add these capabilities without upgrading all users to E5. What is the most cost-effective licensing strategy?

Accepted Answer

Add the Microsoft 365 E5 Security add-on for each user.. The Microsoft 365 E5 Security add-on bundles Microsoft Entra ID Premium P2 and Microsoft Defender for Identity (along with other security features) at a lower per-user cost than purchasing them separately, and it can be added to an existing E3 subscription without upgrading the entire license. This provides the required identity protection capabilities cost-effectively for all 300 users.

Answer

Upgrade all users to Microsoft 365 E5.

Answer

Add Microsoft Entra ID Premium P2 and Microsoft Defender for Identity as standalone add-ons.

Answer

Add Enterprise Mobility + Security E5 add-on.

Question 9

A company with 500 Microsoft 365 E3 users wants to add the highest level of threat protection and advanced investigation capabilities for their security team. Which licensing add-on should they purchase?

Accepted Answer

Microsoft 365 E5 Security. Microsoft 365 E5 Security is the correct add-on because it bundles the highest level of threat protection (Microsoft Defender for Office 365 Plan 2, Microsoft Defender for Endpoint Plan 2, and Microsoft Defender for Identity) along with advanced investigation capabilities like automated investigation and response (AIR), threat analytics, and advanced hunting in Microsoft 365 Defender. This meets the requirement for top-tier threat protection and advanced investigation without upgrading the entire E3 base license to E5.

Answer

Microsoft 365 E5 Compliance

Answer

Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 2 only

Question 10

An organization needs to prevent users from sharing documents that contain credit card numbers via email and Microsoft Teams. When a user attempts to share such a document, they should see a policy tip explaining the restriction. Which Microsoft Purview solution should the compliance team configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect sensitive information types—such as credit card numbers—in documents and communications. DLP policies can be configured to block or warn users via policy tips when they attempt to share such content through email or Microsoft Teams, enforcing compliance without disrupting legitimate work.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Retention Policies

Answer

Microsoft Purview Sensitivity Labels

Question 11

A company needs a dedicated, private network connection between its on-premises data center and Microsoft's cloud infrastructure to support a hybrid deployment with low latency and high reliability. The connection must not traverse the public internet. Which service should they use?

Accepted Answer

Azure ExpressRoute. Azure ExpressRoute is the correct choice because it provides a dedicated, private network connection from an on-premises data center directly into Microsoft's cloud infrastructure, bypassing the public internet entirely. This ensures low latency, high reliability, and consistent performance for hybrid deployments, as the traffic traverses a private MPLS or Ethernet link rather than the unpredictable internet.

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Microsoft Entra ID Application Proxy

Question 12

A sales team wants to build a custom inventory tracking application with minimal code. They need a cloud-based database that can securely store structured data and integrate with the low-code app builder. Which Microsoft 365 service should they use as the database backend?

Accepted Answer

Microsoft Dataverse. Microsoft Dataverse is the correct choice because it provides a scalable, cloud-based relational database that securely stores structured data and integrates natively with Power Apps, the low-code app builder. Unlike simpler list-based storage, Dataverse supports rich data types, relationships, business logic, and role-based security, making it ideal for custom inventory tracking applications built with minimal code.

Answer

Microsoft Lists

Answer

Power Apps

Answer

Power Automate

Question 13

A sales manager wants to track customer interactions, manage leads, and automate follow-up emails from a single platform. Which Microsoft 365 service is specifically designed for customer relationship management (CRM)?

Accepted Answer

Microsoft Dynamics 365 Sales. Microsoft Dynamics 365 Sales is the dedicated CRM service within the Microsoft 365 ecosystem, purpose-built for tracking customer interactions, managing leads, and automating follow-up emails. Unlike general productivity tools, it provides a unified platform with lead scoring, opportunity management, and workflow automation specifically for sales processes.

Answer

Microsoft Bookings

Answer

Microsoft Power Automate

Answer

Microsoft To Do

Question 14

A company uses a third-party Human Resources (HR) system. Whenever a new employee is added to the HR system, they want to automatically create a user account in Microsoft 365, assign the appropriate license, and send a welcome email. Which Microsoft 365 service should be used to orchestrate this automation?

Accepted Answer

Microsoft Power Automate. Microsoft Power Automate is the correct service because it provides a low-code workflow automation platform that can trigger actions based on events in external systems (e.g., a new employee record in a third-party HR system) and then orchestrate a sequence of tasks in Microsoft 365, such as creating a user account via the Microsoft Graph API, assigning a license, and sending a welcome email. It integrates seamlessly with hundreds of connectors, including HR systems and Microsoft 365 services, making it the ideal tool for this cross-system automation scenario.

Answer

Microsoft Identity Manager

Answer

Microsoft Entra ID Connect

Answer

Microsoft Graph API

Question 15

A manager wants to quickly create a survey to collect employee feedback on a new policy. The survey must automatically store responses in an Excel spreadsheet and trigger an email notification when a response is submitted. Which Microsoft 365 service should the manager use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct choice because it is designed specifically for creating surveys and quizzes, and it natively integrates with Excel to automatically store responses in a spreadsheet. Additionally, Forms supports Power Automate flows out of the box, allowing you to trigger an email notification whenever a new response is submitted, meeting both requirements without custom development.

Answer

Microsoft Lists

Answer

Microsoft Power Apps

Answer

Microsoft SharePoint

Question 16

A small business with 50 users currently has Microsoft 365 Business Basic subscriptions. They need the desktop versions of Office apps (Word, Excel, PowerPoint) for each user, in addition to the web and mobile versions they already have. What should they purchase for each user?

Accepted Answer

Microsoft 365 Business Standard license. Microsoft 365 Business Standard includes the desktop versions of Office apps (Word, Excel, PowerPoint) plus web and mobile access, making it the correct upgrade from Business Basic. The customer already has web and mobile apps via Business Basic, so adding Business Standard provides the missing desktop apps without over-provisioning.

Answer

Microsoft 365 F3 license

Answer

Office 365 E1 license

Answer

Microsoft 365 Business Voice add-on

Question 17

A compliance officer needs to automatically encrypt any outgoing email that contains a customer's credit card number. The solution should work without requiring the sender to take any manual action. Which Microsoft Purview feature should be configured?

Accepted Answer

Data Loss Prevention (DLP) policy. A Data Loss Prevention (DLP) policy in Microsoft Purview can be configured to automatically detect sensitive information types, such as credit card numbers, in outgoing email. When a match is found, the policy can enforce an action like 'Encrypt the message' without requiring any manual action from the sender, fulfilling the compliance officer's requirement for automatic, sender-transparent encryption.

Answer

Microsoft Purview Message Encryption

Answer

Sensitivity labels

Answer

Retention policies

Question 18

A legal team needs to preserve all data belonging to a former employee who is involved in litigation. The preservation must cover Exchange Online email, SharePoint sites, Teams messages, and OneDrive files. Which Microsoft Purview solution should they use to enforce the preservation?

Accepted Answer

eDiscovery (Standard) case hold. eDiscovery (Standard) case hold is the correct solution because it allows legal teams to place a legal hold on all data sources associated with a specific user, including Exchange Online mailboxes, SharePoint sites, OneDrive accounts, and Teams messages. This preserves the data in its current state, preventing modification or deletion, which is essential for litigation. Unlike other options, eDiscovery holds are designed specifically for legal preservation scenarios and can target multiple workloads simultaneously.

Answer

Data Lifecycle Management retention policy

Answer

Sensitivity label with retention marking

Answer

Audit log search

Question 19

A small business with 10 users needs Microsoft 365 desktop versions of Office apps (Word, Excel, PowerPoint), business-grade email, and 1 TB of cloud storage per user. They do not need advanced security or compliance features. Which Microsoft 365 plan is the most cost-effective choice?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is the most cost-effective plan that includes desktop versions of Office apps (Word, Excel, PowerPoint), business-grade email (Exchange Online), and 1 TB of OneDrive cloud storage per user. Business Basic only provides web and mobile apps, not desktop versions. Business Premium adds advanced security and compliance features (e.g., Microsoft Defender for Office 365, Azure Information Protection) that the customer explicitly does not need. E3 is an enterprise plan with similar features but at a higher per-user cost, making it overkill for a 10-user small business.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Premium

Answer

Microsoft 365 E3

Question 20

A compliance officer needs to automatically retain all emails in Exchange Online for exactly 7 years, and then permanently delete them. Which Microsoft Purview solution should they configure?

Accepted Answer

Retention policy. A retention policy in Microsoft Purview is designed to retain data for a specified period and then automatically delete it. By configuring a retention policy with a retention period of 7 years and an action to permanently delete the content at the end of that period, the compliance officer can meet the requirement for Exchange Online emails. This policy applies at the mailbox level and ensures that all emails are retained for exactly 7 years before being irreversibly removed.

Answer

Data Loss Prevention (DLP) policy

Answer

Sensitivity label

Answer

eDiscovery case