MS-900 Practice Test 30 — 15 Questions

Question 1

While preparing a Microsoft 365 adoption plan, a consultant is asked to let users report suspicious phishing messages from Outlook for investigation. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Defender for Office 365 user submissions. Microsoft Defender for Office 365 user submissions (Option A) is the correct capability because it allows users to report suspicious phishing messages directly from Outlook, which are then routed to the Microsoft 365 Defender portal for investigation and analysis. This feature integrates with the built-in Report Message or Report Phishing add-ins, enabling security teams to review and act on user-reported threats within the unified security operations framework.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 2

While preparing a Microsoft 365 adoption plan, a consultant is asked to compare Business Premium with Business Standard at a high level. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Business Premium adds advanced security and management capabilities. Option C is correct because the primary differentiator between Microsoft 365 Business Premium and Business Standard is that Business Premium includes advanced security and management capabilities such as Microsoft Defender for Business, Azure Information Protection (AIP), and Intune for mobile device management (MDM). These features are not available in Business Standard, which focuses on productivity apps and cloud services without the same level of security and compliance controls.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 3

A tenant administrator is advising a department that wants to avoid service disruption before subscription renewal. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Subscription status, renewal dates, billing information, and payment methods. Option B is correct because the scenario involves avoiding service disruption before subscription renewal, which directly relates to managing subscription status, renewal dates, billing information, and payment methods. These are core billing and subscription management concepts within Microsoft 365 administration, ensuring continuous service access by preventing lapses in payment or renewal.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 4

A small business with 50 users currently has Microsoft 365 Business Basic subscriptions. They need the desktop versions of Office apps (Word, Excel, PowerPoint) for each user, in addition to the web and mobile versions they already have. What should they purchase for each user?

Accepted Answer

Microsoft 365 Business Standard license. Microsoft 365 Business Standard includes the desktop versions of Office apps (Word, Excel, PowerPoint) plus web and mobile access, making it the correct upgrade from Business Basic. The customer already has web and mobile apps via Business Basic, so adding Business Standard provides the missing desktop apps without over-provisioning.

Answer

Microsoft 365 F3 license

Answer

Office 365 E1 license

Answer

Microsoft 365 Business Voice add-on

Question 5

A help desk lead is documenting the correct Microsoft 365 approach to use hosted email without managing mail servers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Software as a Service (SaaS). Option C is correct because Microsoft 365's Exchange Online delivers hosted email as a Software as a Service (SaaS) offering. This means Microsoft manages the mail servers, software updates, and infrastructure, while the help desk lead simply configures user mailboxes and policies via the admin center. SaaS is the cloud model where the provider hosts and manages the entire application, aligning perfectly with the requirement to avoid managing mail servers.

Answer

Platform as a Service (PaaS)

Answer

Community cloud

Answer

Infrastructure as a Service (IaaS)

Question 6

During requirements gathering, an IT manager says the organization must compare service models and identify where the customer manages the most layers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). The IT manager's requirement is to identify the service model where the customer manages the most layers. In Infrastructure as a Service (IaaS), the cloud provider manages only the physical infrastructure (servers, storage, networking), while the customer is responsible for managing the operating system, middleware, runtime, data, and applications. This gives the customer the highest degree of control and management responsibility compared to PaaS or SaaS.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Hybrid cloud

Question 7

During requirements gathering, an IT manager says the organization must keep services available during a hardware failure. Cloud concept or benefit best matches this requirement?

Accepted Answer

High availability. High availability (C) is the correct cloud concept because it directly addresses the requirement to keep services operational during hardware failure. In Microsoft 365, high availability is achieved through redundant infrastructure, such as multiple server instances across different Azure availability zones, and automatic failover mechanisms that ensure service continuity without manual intervention.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 8

A project manager needs to create a visual timeline of project tasks, dependencies, and milestones to share with stakeholders. The timeline should be embedded in the project team's SharePoint site. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Project for the web. Microsoft Project for the web is the correct choice because it is designed specifically for creating Gantt charts that visualize project tasks, dependencies, and milestones over a timeline. It integrates directly with SharePoint, allowing the timeline to be embedded as a web part on a team site for stakeholder viewing.

Answer

Microsoft Planner

Answer

Microsoft To Do

Answer

Microsoft Lists

Question 9

A legal team needs to preserve all data belonging to a former employee who is involved in litigation. The preservation must cover Exchange Online email, SharePoint sites, Teams messages, and OneDrive files. Which Microsoft Purview solution should they use to enforce the preservation?

Accepted Answer

eDiscovery (Standard) case hold. eDiscovery (Standard) case hold is the correct solution because it allows legal teams to place a legal hold on all data sources associated with a specific user, including Exchange Online mailboxes, SharePoint sites, OneDrive accounts, and Teams messages. This preserves the data in its current state, preventing modification or deletion, which is essential for litigation. Unlike other options, eDiscovery holds are designed specifically for legal preservation scenarios and can target multiple workloads simultaneously.

Answer

Data Lifecycle Management retention policy

Answer

Sensitivity label with retention marking

Answer

Audit log search

Question 10

A business stakeholder asks how Microsoft 365 can help them guide assignment of Microsoft 365 admin roles. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Least privilege. The principle of least privilege is the most relevant concept for guiding assignment of Microsoft 365 admin roles. It dictates that users should be granted only the minimum permissions necessary to perform their job functions, which directly applies to assigning admin roles to reduce security risks. This is a core security and identity concept within Microsoft 365, not a specific application or service.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 11

Which of the following are key characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose all that apply. There are four correct answers.)

Accepted Answer

Rapid elasticity. The NIST SP 800-145 definition identifies five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service allows users to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, laptops, workstations). Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. Rapid elasticity allows capabilities to be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand.

Answer

Locally installed software only

Answer

Fixed, non-scalable capacity

Question 12

Which three of the following are characteristics of Microsoft 365 subscription plans? (Choose three.)

Accepted Answer

Add-on services, such as Microsoft 365 Copilot, can be purchased to supplement existing plans.. Microsoft 365 subscription plans offer monthly and annual commitment terms, giving customers flexibility in billing. Business plans are specifically categorized as Business Basic, Business Standard, and Business Premium, each with different feature sets. Add-on services like Microsoft 365 Copilot can be purchased to enhance existing subscriptions, allowing organizations to scale capabilities without changing their base plan.

Answer

Enterprise plans are licensed on a per-user basis with a minimum of 5 seats.

Answer

All subscription plans include the full desktop version of Office applications.

Answer

Plans can be upgraded or downgraded at any time without any restrictions.

Question 13

A healthcare organization needs to automatically apply a sensitivity label to any document stored in a SharePoint document library that contains patient diagnosis codes. The label should prevent the document from being shared externally. The classification must happen after the document is saved, not during creation. Which Microsoft Purview solution should be configured?

Accepted Answer

Auto-labeling with sensitivity labels in Microsoft Purview. Auto-labeling with sensitivity labels in Microsoft Purview is correct because it automatically applies a sensitivity label to documents containing sensitive content (like patient diagnosis codes) after they are saved to SharePoint. This label can enforce protection actions such as preventing external sharing, meeting the requirement for post-save classification.

Answer

Microsoft Purview Data Loss Prevention (DLP) policies

Answer

Microsoft Purview retention labels

Answer

Microsoft Purview Information Barriers

Question 14

A multinational organization with 5,000 users is licensed with Microsoft 365 E3. They need to comply with a regulation that requires retaining all Exchange Online mailbox content for 7 years and providing advanced eDiscovery capabilities (including predictive coding) to search through that data. Which Microsoft 365 add-on license should they purchase to meet these requirements most cost-effectively?

Accepted Answer

Microsoft 365 E5 Compliance add-on. Microsoft 365 E5 Compliance add-on provides the required 7-year retention via retention policies and advanced eDiscovery (including predictive coding) without upgrading the entire E3 suite. This add-on is the most cost-effective way to meet regulatory retention and advanced search needs while keeping the existing E3 licensing.

Answer

Exchange Online Archiving for Exchange Online Plan 2

Answer

Microsoft 365 E5 (full suite upgrade)

Answer

Microsoft Purview Audit (Standard) add-on

Question 15

A multinational corporation needs to ensure that all emails containing a customer's passport number are automatically blocked from being sent externally. Additionally, the sending user should receive a policy tip explaining the block. Which Microsoft Purview solution should be configured?

Accepted Answer

Data Loss Prevention (DLP) policies. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect sensitive information, such as passport numbers, in emails and automatically block external transmission while displaying a policy tip to the user. This matches the requirement exactly, as DLP can inspect email content for sensitive data types and enforce actions like blocking and notifying the sender.

Answer

Sensitivity labels

Answer

Conditional Access policies

Answer

eDiscovery