MS-900 Practice Test 27 — 15 Questions

Question 1

A multinational corporation needs to restrict access to Microsoft 365 services based on user location and device state. They have offices in countries with strict data sovereignty laws. Which combination of Microsoft Entra ID features should they use to enforce these policies?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Conditional Access with location policies and device compliance. Conditional Access in Microsoft Entra ID allows administrators to enforce granular access policies based on signals like user location and device state. By combining location policies (e.g., blocking access from specific countries or requiring trusted IPs) with device compliance policies (e.g., requiring devices to be marked as compliant via Intune or domain-joined), the organization can meet data sovereignty requirements and restrict access based on both criteria simultaneously.

Answer

Microsoft Entra ID Governance

Answer

Identity Protection and Privileged Identity Management

Answer

Conditional Access with device compliance policies only

Answer

Conditional Access with location policies only

Question 2

A service owner is comparing Microsoft 365 capabilities and needs to make sign-in decisions based on risk, location, and device compliance. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Conditional Access policy. Conditional Access policy is the correct answer because it is the Microsoft Entra ID (formerly Azure AD) feature that enforces sign-in decisions based on risk, location, and device compliance. It allows administrators to create policies that require multi-factor authentication, block access from untrusted locations, or require compliant devices before granting access to Microsoft 365 resources.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Stream

Question 3

A user reports that they cannot access their work email on their mobile device. The admin confirms the user has an Exchange Online license. What is the most likely cause?

Accepted Answer

A Conditional Access policy requires app protection policies. Conditional Access policies can require app protection policies (e.g., Intune MAM) to enforce data security on mobile devices. If the user's device does not have the required app protection policies applied, access to Exchange Online via mobile apps (including Outlook) will be blocked, even though the user has a valid Exchange Online license. This is a common scenario where licensing alone does not guarantee access when additional security controls are in place.

Answer

The user is using the Outlook mobile app

Answer

The user is trying to access Outlook on the web

Answer

Exchange ActiveSync is disabled for the user

Question 4

A department needs a shared document library with version history, permissions, and co-authoring for team files. Which service should they primarily use?

Accepted Answer

SharePoint Online.. SharePoint Online is the correct choice because it provides a centralized, team-based document library with built-in version history, granular permission management, and real-time co-authoring. Unlike OneDrive for Business, which is designed for personal file storage, SharePoint Online supports shared workspaces where multiple users can collaborate simultaneously on the same documents while maintaining full audit trails and access controls.

Answer

OneDrive for Business.

Answer

Microsoft Forms.

Answer

Microsoft Planner.

Question 5

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Answer

Microsoft Teams

Answer

Microsoft Power Apps

Answer

Microsoft OneDrive

Question 6

A service owner is comparing Microsoft 365 capabilities and needs to host custom applications on virtual machines while managing the operating system. Cloud concept or benefit best matches this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, including virtual machines where the user manages the operating system and can host custom applications. This matches the requirement because the service owner needs full control over the OS and the ability to deploy custom applications without managing physical hardware.

Answer

Platform as a Service (PaaS)

Answer

Hybrid cloud

Answer

Software as a Service (SaaS)

Question 7

A department head asks which Microsoft 365 option should be used to allow customers to book appointments online based on staff availability. Microsoft 365 app or service is the best fit?

Accepted Answer

Microsoft Bookings. Microsoft Bookings is the correct choice because it is a Microsoft 365 app specifically designed to allow customers to book appointments online based on staff availability. It integrates with Exchange Online to synchronize staff calendars, manage time slots, and send automated confirmations, making it the ideal solution for scheduling customer-facing appointments.

Answer

Microsoft Planner

Answer

Microsoft Purview Audit

Answer

Microsoft Forms

Question 8

A compliance-aware administrator is selecting the right Microsoft 365 capability to evaluate Microsoft 365 before purchasing. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

A Microsoft 365 trial subscription. A Microsoft 365 trial subscription is the correct choice because it allows an administrator to evaluate the full functionality of Microsoft 365 before making a purchase, directly addressing the requirement to 'evaluate Microsoft 365 before purchasing.' This aligns with the 'Describe Microsoft 365 pricing and support' domain, as trial subscriptions are a key licensing and evaluation concept. Other options like Stream, Whiteboard, and Forms are individual services within Microsoft 365, not mechanisms for pre-purchase evaluation.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 9

While preparing a Microsoft 365 adoption plan, a consultant is asked to compare Business Premium with Business Standard at a high level. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Business Premium adds advanced security and management capabilities. The primary differentiator between Microsoft 365 Business Premium and Business Standard is that Business Premium includes advanced security and management capabilities such as Microsoft Defender for Business, Azure Information Protection (AIP), and Intune for mobile device management (MDM). These features are not available in Business Standard, which focuses on productivity apps and cloud services without the same level of security and compliance controls.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 10

A compliance administrator needs to manage user sign-in risk and require MFA for risky sign-ins. Which Microsoft 365 capability is the best fit?

Accepted Answer

Microsoft Entra ID Protection with Conditional Access. Microsoft Entra ID Protection (formerly Azure AD Identity Protection) detects sign-in risks such as anonymous IP addresses, atypical travel, or leaked credentials. When combined with Conditional Access policies, it can automatically require MFA for risky sign-ins, giving the compliance administrator precise control over user authentication based on real-time risk signals.

Answer

OneDrive sync client

Answer

Microsoft Bookings

Answer

Microsoft Teams live events

Question 11

During requirements gathering, an IT manager says the organization must keep services available during a hardware failure. Cloud concept or benefit best matches this requirement?

Accepted Answer

High availability. High availability (C) is the correct cloud concept because it directly addresses the requirement to keep services operational during hardware failure. In Microsoft 365, high availability is achieved through redundant infrastructure, such as multiple server instances across different Azure availability zones, and automatic failover mechanisms that ensure service continuity without manual intervention.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 12

A user needs to create a form to collect feedback from customers. The responses should be automatically stored in an Excel spreadsheet in OneDrive. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct app because it is specifically designed for creating surveys, quizzes, and feedback forms, and it natively integrates with Excel to automatically store responses in a spreadsheet hosted on OneDrive. This meets the user's requirement without additional configuration or custom development.

Answer

Microsoft Lists

Answer

Microsoft Power Apps

Answer

Microsoft Sway

Question 13

A department head asks which Microsoft 365 option should be used to provide a cloud identity platform for Microsoft 365 and approved SaaS applications. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure Active Directory) is the correct choice because it is the cloud-based identity and access management service that provides authentication, single sign-on (SSO), and conditional access for Microsoft 365 and thousands of pre-integrated SaaS applications. It acts as the identity platform, managing user identities and controlling access to resources, which directly aligns with the department head's requirement for a cloud identity platform.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 14

A company uses Microsoft 365 E5 and wants to automatically classify sensitive emails containing credit card numbers and then apply encryption. Which solution should they use in combination with Microsoft Purview?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) enables automatic classification of sensitive data, such as credit card numbers, using built-in sensitive information types and exact data match (EDM) classifiers. When combined with sensitivity labels, it can automatically apply encryption (e.g., via Azure Rights Management) to emails containing that data, meeting the requirement without additional services.

Answer

Microsoft 365 Copilot

Answer

Microsoft Intune

Answer

Microsoft Defender for Office 365

Question 15

An organization is reconciling their Microsoft 365 invoice and notices charges for 'Microsoft 365 Copilot' that they did not expect. The administrator suspects that users may have inadvertently enabled Copilot via self-service purchase. How should they prevent this in the future?

Accepted Answer

Disable self-service purchasing in the Microsoft 365 admin center. Disabling self-service purchasing in the Microsoft 365 admin center is the direct method to prevent users from acquiring Copilot licenses on their own. Self-service purchasing allows users to buy subscriptions like Microsoft 365 Copilot without admin approval, leading to unexpected charges. By disabling this feature, the administrator regains control over license procurement, ensuring no future inadvertent Copilot activations occur.

Answer

Remove Copilot licenses from all users

Answer

Cancel the Copilot subscription

Answer

Set up billing alerts for unexpected charges