MS-900 Practice Test 30 — 15 Questions

Question 1

Which TWO Microsoft 365 subscription plans include the Microsoft 365 Copilot add-on as an optional purchase?

Accepted Answer

Microsoft 365 E3. Microsoft 365 Copilot is an AI-powered productivity add-on that requires a qualifying base subscription. Microsoft 365 E3 and E5 are enterprise-grade plans that include the necessary security, compliance, and identity features to support Copilot, making them eligible for the optional Copilot add-on purchase.

Answer

Microsoft 365 Education A1

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 F3

Question 2

Which THREE Microsoft 365 services can be used to store and manage files in the cloud?

Accepted Answer

OneDrive for Business. OneDrive for Business is a cloud storage service that allows users to store, sync, and share files individually. It is part of Microsoft 365 and provides personal storage with up to 1 TB per user, integrating with Office apps for real-time co-authoring.

Answer

Power BI

Answer

Exchange Online

Question 3

A company is expanding globally and needs to meet data residency and compliance requirements in multiple regions. Which three Microsoft 365 compliance and privacy features should they consider? (Choose three.)

Accepted Answer

Customer Lockbox. Data Loss Prevention (DLP) policies help organizations identify, monitor, and protect sensitive data across Microsoft 365 services, ensuring compliance with regional data residency requirements by preventing unauthorized sharing or leakage. Compliance Manager provides a centralized dashboard to assess compliance posture against regulations like GDPR, ISO 27001, and local data residency laws, offering actionable recommendations. Customer Lockbox ensures that Microsoft support engineers cannot access customer data without explicit approval, addressing privacy and data sovereignty concerns in multi-region deployments.

Answer

Exchange Online archival mailboxes

Answer

Microsoft 365 Copilot

Answer

Azure Active Directory (Azure AD) Connect

Question 4

Match each Microsoft 365 license type to its typical audience.

Accepted Answer

Microsoft 365 Business Basic: Ideal for small businesses needing web and mobile access to email, file storage, and Teams.. Microsoft 365 licensing varies by organization size and needs. Business Basic and Business Premium target small to medium businesses, while E5 targets large enterprises. Distractors confuse the feature sets across different plans.

Answer

Microsoft 365 Business Basic: Designed for large enterprises requiring advanced compliance and analytics.

Answer

Microsoft 365 Business Standard: Best for small businesses needing only web and mobile access.

Answer

Microsoft 365 E3: Ideal for small businesses needing basic productivity tools.

Question 5

Refer to the exhibit. An admin runs the PowerShell command shown. What is the implication for the user's mailbox?

Accepted Answer

The mailbox is on litigation hold. The PowerShell command `Set-Mailbox -LitigationHoldEnabled $true` places the user's mailbox on litigation hold. This preserves all mailbox content, including deleted items and original versions of modified items, for eDiscovery purposes. The hold overrides any retention policy that would otherwise delete or archive items, ensuring data is retained indefinitely until the hold is removed.

Answer

The retention policy is not effective

Answer

The mailbox has no retention policy applied

Answer

The mailbox will automatically delete items after 30 days

Question 6

An organisation wants to identify documents containing credit card numbers and prevent users from sharing them externally from SharePoint Online and Exchange Online. Which two Microsoft Purview capabilities are most relevant? (Choose 2.)

Accepted Answer

Sensitive information types.. Sensitive information types (A) are predefined or custom patterns that detect sensitive data like credit card numbers using regex and checksum validation. Data Loss Prevention policies (B) use these sensitive information types to enforce rules that block external sharing of documents containing credit card numbers in SharePoint Online and Exchange Online. Together, they identify the sensitive content and prevent its unauthorized external distribution.

Answer

Microsoft Bookings.

Answer

Windows Autopilot.

Question 7

Refer to the exhibit. A Microsoft Graph PowerShell command is run. What does this command retrieve about user jdoe?

Accepted Answer

Display name, user principal name, assigned licenses, and usage location.. The command `Get-MgUser -UserId jdoe -Property DisplayName, UserPrincipalName, AssignedLicenses, UsageLocation` explicitly specifies only those four properties in the `-Property` parameter. Microsoft Graph PowerShell by default returns a subset of properties, but when you list specific properties, it retrieves only those requested. Therefore, the output includes exactly the display name, user principal name, assigned licenses, and usage location.

Answer

Only the user's display name and email.

Answer

All properties of the user.

Answer

Only the user's display name.

Question 8

Which THREE Microsoft 365 services are part of Microsoft Purview compliance suite?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (C) is part of Microsoft Purview because it provides automated retention and deletion policies for sensitive data across Exchange, SharePoint, OneDrive, and Teams. It helps organizations comply with regulatory requirements by governing data from creation to disposal, directly supporting the Purview compliance portal's governance capabilities.

Answer

Microsoft Entra ID

Answer

Microsoft Defender for Cloud Apps

Question 9

Refer to the exhibit. The JSON shows Microsoft Entra ID role assignments using Privileged Identity Management (PIM). Which statement about user2@contoso.com is correct?

Accepted Answer

user2 must activate the Global Administrator role before using it. The JSON shows that user2@contoso.com has an eligible assignment for the Global Administrator role via Microsoft Entra ID PIM. In PIM, an eligible assignment means the user must activate the role (e.g., through the PIM portal or API) before gaining administrative privileges. The JSON snippet includes a property like "assignmentType": "Eligible" (implied by the context), which requires activation to elevate permissions temporarily.

Answer

user2 is not assigned any administrative role

Answer

user2 cannot access any administrative features

Answer

user2 is permanently assigned the Global Administrator role

Question 10

Which TWO Microsoft 365 services allow users to collaborate in real-time on the same document?

Accepted Answer

SharePoint Online. SharePoint Online and OneDrive for Business both support real-time co-authoring, allowing multiple users to edit the same document simultaneously. This is enabled by the Office Online Server infrastructure and the use of WebDAV and REST APIs to synchronize changes in near real-time. Co-authoring works in Word, Excel, and PowerPoint files stored in these services, with conflict resolution handled by the application.

Answer

Microsoft Viva

Answer

Yammer

Answer

Microsoft Teams

Question 11

Which TWO Microsoft 365 apps are included in the Microsoft 365 Business Basic subscription?

Accepted Answer

Microsoft Teams. Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop installations. Microsoft Teams is included as the core collaboration hub for chat, meetings, and file sharing. Microsoft Outlook (web) is also included, providing email, calendar, and contacts via a browser interface.

Answer

Microsoft Power BI Pro

Answer

Microsoft Word (desktop app)

Answer

Microsoft Purview Compliance Portal

Question 12

Which four of the following are key components of the Microsoft 365 defense-in-depth security strategy? (Choose all that apply. There are four correct answers.)

Accepted Answer

Advanced Threat Protection (ATP) for email, SharePoint, and Teams, including anti-malware and anti-phishing.. The Microsoft 365 defense-in-depth strategy relies on multiple layers of security controls. Physical security of datacenters (biometric access, 24/7 monitoring) is the foundational layer. User identity protection via Microsoft Entra ID MFA and Conditional Access secures the authentication layer. Data encryption at rest (BitLocker) and in transit (TLS) protects data confidentiality. Advanced Threat Protection (ATP) for email, SharePoint, and Teams defends against malware and phishing at the workload layer. These four components collectively implement a layered security model.

Answer

Unrestricted access for Microsoft engineers to all customer data for continuous security scanning.

Answer

Automated rollback of all user changes to previous versions within 24 hours.

Question 13

Match each Microsoft 365 security feature to its function.

Accepted Answer

Azure AD Identity Protection: Detects and responds to identity-based risks like compromised credentials.. Microsoft Entra ID Protection focuses on identity risks; Microsoft Defender for Office 365 secures email and documents; Microsoft Defender for Endpoint protects devices; Microsoft Information Protection handles data classification and protection. The distractors swap functions between these features.

Answer

Azure AD Identity Protection: Provides advanced threat protection for devices.

Answer

Microsoft Defender for Office 365: Helps classify and protect sensitive data.

Question 14

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Answer

SharePoint Online

Answer

Microsoft Lists

Answer

Excel Online

Question 15

Which THREE Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage data lifecycle and retention?

Accepted Answer

Records Management. Records Management (B) is correct because it enables organizations to declare records, apply retention labels, and manage the disposition of content in a defensible manner. It is a core Purview feature for managing the data lifecycle, ensuring that records are retained for the required period and then disposed of appropriately.

Answer

Sensitivity Labels

Answer

Data Loss Prevention