MS-900 Practice Test 1 — 30 Questions

Question 1

A hospital uses Microsoft 365 and wants to enable secure messaging between doctors and nurses that supports compliance with health data regulations. Which Microsoft 365 service provides encrypted, compliant messaging?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Teams. Microsoft Teams supports encrypted messaging and compliance with health data regulations like HIPAA through features such as data encryption at rest and in transit, Data Loss Prevention (DLP) policies, and eDiscovery. It provides secure communication channels for healthcare professionals while meeting regulatory requirements for protected health information (PHI).

Answer

Microsoft Yammer

Answer

Microsoft Viva

Answer

Microsoft Bookings

Question 2

During requirements gathering, an IT manager says the organization must compare service models and identify where the customer manages the most layers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). The IT manager's requirement is to identify the service model where the customer manages the most layers. In Infrastructure as a Service (IaaS), the cloud provider manages only the physical infrastructure (servers, storage, networking), while the customer is responsible for managing the operating system, middleware, runtime, data, and applications. This gives the customer the highest degree of control and management responsibility compared to PaaS or SaaS.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Hybrid cloud

Question 3

Your organization is using Microsoft 365 and wants to ensure that services remain accessible even if one datacenter experiences an outage. Which concept should they rely on?

Accepted Answer

High availability. High availability is the design principle that keeps services accessible by eliminating single points of failure and distributing workloads across multiple datacenters or availability zones, so an outage in one location does not take the service down. Microsoft 365 delivers this through geo-redundant datacenter pairs and automatic failover, which is exactly the scenario described.

Answer

Scalability

Answer

Disaster recovery

Answer

Elasticity

Question 4

A business stakeholder asks how Microsoft 365 can help them host an intranet landing page with news, navigation links, and department content. Microsoft 365 app or service is the best fit?

Accepted Answer

SharePoint Online. SharePoint Online is the correct answer because it is a web-based platform specifically designed for creating intranet portals, team sites, and communication sites. It provides built-in web parts for news feeds, navigation links, and department content pages, making it the ideal service for hosting a company intranet landing page.

Answer

Microsoft Purview Audit

Answer

Microsoft Forms

Answer

Microsoft Planner

Question 5

A tenant administrator is advising a department that wants to review upcoming Microsoft 365 changes and recommended admin actions. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Message center. The Message center in the Microsoft 365 admin center is the dedicated hub for reviewing upcoming changes, new features, and recommended admin actions. It provides service advisories, planned changes, and action-required notifications, making it the most relevant concept for a tenant administrator advising a department on upcoming Microsoft 365 changes.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 6

Your organization is planning to migrate on-premises workloads to Microsoft 365. Which cloud deployment model describes using both on-premises infrastructure and Microsoft 365 services?

Accepted Answer

Hybrid cloud. Hybrid cloud is the deployment model that combines on-premises infrastructure with public cloud services like Microsoft 365. This model allows organizations to keep some resources on-premises while leveraging cloud services for others, providing flexibility and integration.

Answer

Private cloud

Answer

Community cloud

Answer

Public cloud

Question 7

Drag and drop the steps to configure a Microsoft 365 group expiration policy in the Azure AD admin center into the correct order.

Accepted Answer

Sign in to the Azure AD admin center, then navigate to Groups > Expiration, then configure the expiration policy settings, then save the policy.. To configure a Microsoft 365 group expiration policy, you must first sign in to the Microsoft Entra ID admin center, then navigate to Groups > Expiration, configure the desired expiration settings, and finally save the policy. This sequence ensures proper access and application of the configuration.

Answer

Sign in to the Azure AD admin center, then configure the expiration policy settings, then navigate to Groups > Expiration, then save the policy.

Answer

Sign in to the Azure AD admin center, then navigate to Groups > Expiration, then save the policy, then configure the expiration policy settings.

Answer

Navigate to Groups > Expiration, then sign in to the Azure AD admin center, then configure the expiration policy settings, then save the policy.

Question 8

A help desk lead is documenting the correct Microsoft 365 approach to view usage reports without changing configuration. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Reports Reader. The Reports Reader role in Microsoft 365 is specifically designed to allow users to view usage reports and adoption metrics without requiring any administrative permissions or configuration changes. This role provides read-only access to the Reports section in the Microsoft 365 admin center, enabling help desk leads to monitor usage data without altering settings or licensing. The other options (Whiteboard, Stream, Forms) are unrelated to viewing usage reports.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 9

Your organization uses Microsoft 365 and wants to ensure that only managed devices can access corporate email in Exchange Online. Which conditional access policy setting should you configure?

Accepted Answer

Require device to be marked as compliant. The 'Require device to be marked as compliant' setting in a Conditional Access policy integrates with Microsoft Intune to enforce that only devices meeting compliance policies (e.g., encryption, OS version, jailbreak detection) can access Exchange Online. This ensures corporate email is accessible only from managed, trusted devices, directly addressing the requirement.

Answer

Require approved client app

Answer

Require device to be joined to Azure AD

Answer

Require multi-factor authentication

Question 10

A project manager wants a shared workspace where team members can create and track tasks, set deadlines, and collaborate on documents. This workspace should integrate with Microsoft Teams for quick access. Which Microsoft 365 service is best suited for this purpose?

Accepted Answer

Microsoft Planner. Microsoft Planner is the correct choice because it provides a shared workspace (Plan) where team members can create and track tasks, set deadlines, and collaborate on documents. It integrates natively with Microsoft Teams via the Planner tab, allowing quick access within a Teams channel, and supports file attachments from SharePoint/OneDrive for collaboration.

Answer

Microsoft Lists

Answer

Microsoft To Do

Answer

Microsoft Project Online

Question 11

A company runs its customer relationship management (CRM) system using a cloud provider's SaaS offering. They also use virtual machines (IaaS) from the same provider to host a legacy application. In this scenario, who is responsible for patching the operating system of the virtual machines?

Accepted Answer

The customer is responsible for patching the operating system of the virtual machines.. In an IaaS model, the cloud provider is responsible for the security of the physical infrastructure, hypervisor, and network, but the customer retains responsibility for the guest operating system and applications. Since the virtual machines are IaaS resources, the customer must manage OS patches, updates, and configuration. This follows the shared responsibility model, where the customer is accountable for anything they configure or deploy within the virtual machine.

Answer

The cloud provider is fully responsible for patching all components.

Answer

The cloud provider patches the OS for all services equally.

Answer

No patching is needed because the cloud handles everything.

Question 12

A sales team needs a centralized repository for customer proposals that multiple team members can edit simultaneously and that maintains version history. Which Microsoft 365 service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it provides a centralized document library where multiple users can co-author documents simultaneously, with built-in version history to track changes over time. This aligns directly with the requirement for a shared repository with real-time collaboration and versioning, which OneDrive for Business lacks for team-wide access.

Answer

OneDrive for Business

Answer

Microsoft Teams

Answer

Exchange Online

Question 13

A business stakeholder asks how Microsoft 365 can help them desktop Office apps plus business email and collaboration services without advanced security management. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is the correct licensing plan because it includes desktop versions of Office apps (e.g., Word, Excel, PowerPoint), business-class email via Exchange Online, and collaboration services like Microsoft Teams and SharePoint—all without requiring advanced security management features such as Microsoft Defender for Office 365 or Azure Information Protection. This plan is designed for businesses that need core productivity and communication tools without the complexity of enterprise-grade security controls.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 14

A growing company with 120 users currently holds Microsoft 365 Business Basic licenses. They need to add endpoint management (Microsoft Intune) and advanced threat protection (Microsoft Defender for Office 365 Plan 1). They also want to keep their existing Business Basic subscriptions. What is the most cost-effective way to add these capabilities?

Accepted Answer

Purchase add-on subscriptions for Microsoft Intune Plan 1 and Microsoft Defender for Office 365 Plan 1. Microsoft 365 Business Basic supports add-on subscriptions for Microsoft Intune Plan 1 and Microsoft Defender for Office 365 Plan 1, allowing the company to retain their existing licenses while adding endpoint management and advanced threat protection. This is the most cost-effective approach as it avoids the higher per-user cost of upgrading to Business Premium or switching to E3, which would include unnecessary features like desktop Office apps.

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Add Microsoft 365 Business Premium licenses as a standalone for all users

Answer

Switch to Microsoft 365 E3 and drop Business Basic

Question 15

A startup with 25 employees needs business-grade email (50 GB mailbox per user), web versions of Office apps, and 1 TB of cloud storage per user. They do not need the desktop versions of Office or advanced security features. Which Microsoft 365 plan is the most cost-effective choice?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides business-grade email with 50 GB mailboxes, web versions of Office apps (Word, Excel, PowerPoint, etc.), and 1 TB of cloud storage per user via OneDrive for Business. Since the startup does not need desktop Office apps or advanced security features, this plan meets all stated requirements at the lowest cost.

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 Business Premium

Answer

Microsoft 365 Apps for business

Question 16

A company wants to provide its employees with access to email, calendar, and document editing tools through a web browser without installing any software. The provider manages all maintenance, updates, and security of the applications. Which cloud service model best describes this scenario?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS) because the provider delivers fully functional applications—such as email, calendar, and document editing—over the web, with no local installation required. The provider handles all maintenance, updates, and security, which is the defining characteristic of SaaS. Examples include Microsoft 365 (Exchange Online, Outlook, Word Online) and Google Workspace.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Desktop as a Service (DaaS)

Question 17

A healthcare provider must ensure that patient health information (PHI) is not accidentally shared outside the organization. They want to automatically detect if an email contains PHI (such as diagnosis codes) and block it from being sent externally. Additionally, the sender should receive a notification explaining the block. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to detect sensitive information—such as patient health information (PHI) with diagnosis codes—in emails and automatically block external transmission while sending a notification to the sender. DLP policies can be configured with sensitive information types (e.g., HIPAA-defined PHI patterns) and rules to enforce actions like blocking and policy tips.

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Audit

Question 18

While preparing a Microsoft 365 adoption plan, a consultant is asked to desktop Office apps plus Intune and enhanced security capabilities for a small or medium business. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium is the correct answer because it bundles desktop Office apps, Microsoft Intune for mobile device management, and advanced security features like Microsoft Defender for Business and Microsoft Entra ID Plan 1. This plan is specifically designed for small and medium businesses needing comprehensive productivity, management, and security capabilities under a single subscription.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 19

A company uses Microsoft 365 (a SaaS offering). A security incident occurs where an employee's account is compromised because the employee reused their corporate password on a personal website. According to the shared responsibility model, who is primarily responsible for this security failure?

Accepted Answer

The customer (the company using Microsoft 365). In the Microsoft 365 shared responsibility model, the customer is responsible for securing user identities, including password hygiene and multi-factor authentication (MFA). Since the employee reused their corporate password on a personal website, this is a customer-side identity management failure, not a platform vulnerability. Microsoft secures the SaaS infrastructure, but customer-managed credentials fall under the customer's responsibility.

Answer

Microsoft, because they provide the SaaS platform

Answer

Both Microsoft and the customer share equal responsibility

Answer

It depends on the contract terms with Microsoft

Question 20

A company uses a cloud service that provides virtual machines. The company manages the operating system, middleware, and applications, while the cloud provider manages the physical hardware, networking, and data center security. Which cloud service model does this represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the customer manages the operating system, middleware, and applications, while the cloud provider is responsible for the physical hardware, networking, and data center security. In IaaS, the provider delivers virtualized computing resources over the internet, and the customer retains control over the guest OS, storage, and deployed applications, which matches the division of responsibilities given.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Desktop as a Service (DaaS)