MS-900 Practice Test 2 — 30 Questions

Question 1

A security administrator needs to automatically restrict access to documents that contain 'PII' (personally identifiable information) so that only employees in the 'Data Privacy' security group can view them. Additionally, editing and printing of these documents must be disabled. Which combination of Microsoft Purview features should be used?

Accepted Answer

Sensitivity labels with auto-labeling and encryption that restricts permissions to the 'Data Privacy' group. Option A is correct because sensitivity labels in Microsoft Purview can be configured with auto-labeling to automatically detect and classify documents containing PII, and then apply encryption that restricts access to only the 'Data Privacy' security group. Additionally, the label can enforce usage rights such as 'View Only' to disable editing and printing, meeting all requirements.

Answer

Data Loss Prevention (DLP) policy with a block action

Answer

Retention policy with a restrict action

Answer

Privileged Identity Management (PIM)

Question 2

A business stakeholder asks how Microsoft 365 can help them use hosted email without managing mail servers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Software as a Service (SaaS). Microsoft 365 delivers hosted email (Exchange Online) as a Software as a Service (SaaS) offering, where Microsoft manages the mail servers, patches, and infrastructure. The stakeholder simply uses the service via a web browser or client without any server administration. This aligns with the SaaS model, which provides ready-to-use applications over the internet.

Answer

Platform as a Service (PaaS)

Answer

Community cloud

Answer

Infrastructure as a Service (IaaS)

Question 3

An organization wants to automatically detect when a user attempts to share a document containing a customer's credit card number via email. The system should block the sharing and display a warning to the user. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is designed to identify, monitor, and automatically protect sensitive information—such as credit card numbers—across Exchange Online, SharePoint, OneDrive, and Teams. When a user attempts to share a document containing a credit card number via email, DLP can inspect the content using built-in sensitive information types (e.g., Credit Card Number), block the email, and display a policy tip warning to the user. This matches the requirement exactly.

Answer

Sensitivity labels

Answer

Retention policies

Answer

eDiscovery

Question 4

A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?

Accepted Answer

IaaS (Infrastructure as a Service). This scenario describes Infrastructure as a Service (IaaS), where the cloud provider supplies virtualized computing resources such as virtual machines, storage, and networking, but the customer retains full control over the operating system, middleware, and applications. In IaaS, the provider manages only the physical infrastructure (hypervisor, servers, storage, and network), while the customer is responsible for OS installation, configuration, patching, and application management. This aligns directly with the question's description of customer-managed OS and applications on provider-hosted VMs.

Answer

PaaS (Platform as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 5

A charitable organization with 50 employees wants to use Microsoft 365 for email and collaboration but has a very limited budget. What should they do first to obtain licenses at a reduced cost?

Accepted Answer

Apply for Microsoft 365 Nonprofit eligibility. Microsoft offers discounted and donated Microsoft 365 plans for eligible nonprofit organizations. The first step is to apply for nonprofit eligibility through the Microsoft nonprofit portal. Once approved, the organization can purchase Microsoft 365 Nonprofit plans at a significantly reduced cost or even receive donations. Simply purchasing Business Basic or other plans without nonprofit status would not provide the discount.

Answer

Purchase Microsoft 365 Business Basic licenses

Answer

Use the free web versions of Office apps

Answer

Purchase Microsoft 365 E3 licenses

Question 6

A 500-user organization is licensed with Microsoft 365 E3. They need to comply with a regulation that requires retaining all Exchange Online mailbox content for 10 years and providing unlimited archive storage for users. Which add-on license or service should they acquire to meet this requirement most cost-effectively?

Accepted Answer

Exchange Online Archiving for Exchange Online Plan 2. Option B is correct because Exchange Online Archiving for Exchange Online Plan 2 provides unlimited archive storage and retention policies that can enforce a 10-year hold on mailbox content. This add-on is the most cost-effective way to meet the regulatory requirements without upgrading to E5, as it directly extends the archiving and retention capabilities of the existing E3 license.

Answer

Microsoft 365 E5 Compliance add-on

Answer

Microsoft Purview eDiscovery add-on

Answer

Microsoft 365 E5 Security add-on

Question 7

A company uses a cloud service where they pay only for the compute hours their virtual machines run. They can increase or decrease the number of VMs instantly based on demand. Which two cloud computing characteristics are demonstrated? (Choose two.)

Accepted Answer

Rapid elasticity. B is correct because rapid elasticity allows the company to instantly increase or decrease the number of virtual machines based on demand, scaling resources up or down automatically. C is correct because measured service ensures that the company pays only for the compute hours their VMs run, with usage metered and billed accordingly.

Answer

On-demand self-service

Answer

Resource pooling

Question 8

A business stakeholder asks how Microsoft 365 can help them check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and incident information for all Microsoft 365 services. It allows administrators and stakeholders to check known incidents, advisories, and historical uptime data, directly addressing the need to monitor service availability.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 9

A company has 150 users with Microsoft 365 Business Basic licenses. They need to add Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for device management, but they want to retain their existing Basic subscriptions to minimize costs. What is the most cost-effective licensing strategy to meet these requirements?

Accepted Answer

Purchase add-on subscriptions for Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for all users.. Microsoft 365 Business Basic supports purchasing add-on licenses such as Microsoft Defender for Office 365 Plan 1 and Microsoft Intune. Upgrading all users to Business Premium would include these features but at a higher per-user cost if only these two add-ons are needed. Business Standard does not include Intune or Defender. Purchasing add-ons for all 150 users is the most cost-effective way to add the specific capabilities without changing the base license.

Answer

Upgrade all users to Microsoft 365 Business Premium.

Answer

Upgrade all users to Microsoft 365 Business Standard.

Answer

Purchase Microsoft 365 E3 licenses for all users.

Question 10

A company has 10 users who need only Exchange Online mailboxes and Microsoft Teams. They do not need desktop versions of Office apps. What is the most cost-effective Microsoft 365 plan for this requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online mailboxes and Microsoft Teams, along with web and mobile versions of Office apps, without including desktop Office installations. This makes it the most cost-effective plan for the 10 users who need only email and Teams, as it offers the required services at the lowest per-user price among the options.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 Business Standard

Answer

Office 365 E1

Question 11

A company runs a critical application on-premises but wants to extend capacity to the cloud during peak demand without purchasing additional hardware. Which cloud deployment model best describes this strategy?

Accepted Answer

Hybrid cloud. A hybrid cloud model combines on-premises infrastructure (private cloud) with public cloud resources, enabling a company to 'burst' into the public cloud during peak demand without purchasing additional hardware. This strategy, often called cloud bursting, allows the critical application to run locally under normal conditions and seamlessly extend capacity to a public cloud provider like Azure during spikes.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 12

A company currently has Microsoft 365 E5 licenses for all users. They need to perform advanced threat hunting using queries across email, endpoints, and identities to investigate a potential security incident. Which of the following capabilities is already included in their existing license?

Accepted Answer

Microsoft 365 Defender (including advanced hunting). Microsoft 365 Defender (formerly Microsoft Threat Protection) includes advanced hunting capabilities that allow security teams to run Kusto Query Language (KQL) queries across email, endpoints, identities, and cloud apps. Since the company already has Microsoft 365 E5 licenses, this capability is included without any additional purchase.

Answer

Microsoft Defender for Microsoft 365 Plan 1

Answer

Microsoft Entra ID Premium P1

Answer

Microsoft Cloud App Security

Question 13

A company must comply with a regulation that requires all data stored in Microsoft 365 to remain within the European Union. Which Microsoft 365 feature should an administrator configure to enforce this geographic restriction?

Accepted Answer

Data Residency policies. Option C is correct because Data Residency policies in Microsoft 365 allow administrators to define the geographic location where data at rest is stored. By configuring a Data Residency policy for the European Union, the administrator ensures that all data remains within EU data centers, meeting regulatory requirements.

Answer

Data Loss Prevention (DLP)

Answer

Information Rights Management (IRM)

Answer

Customer Lockbox

Question 14

A company uses a cloud provider that charges them based solely on the exact number of gigabytes of storage used and the number of virtual machine hours consumed. They can increase or decrease usage at any time without any upfront commitment. Which essential characteristic of cloud computing does this billing model demonstrate?

Accepted Answer

Measured service. The billing model charges based on exact gigabytes of storage used and virtual machine hours consumed, which directly aligns with the 'measured service' characteristic of cloud computing. Measured service means cloud providers meter and bill customers precisely for the resources they consume, often using a pay-as-you-go model. This allows the company to pay only for what they use without upfront commitments, as described in the scenario.

Answer

Rapid elasticity

Answer

Resource pooling

Answer

On-demand self-service

Question 15

A company is preparing for a merger and wants to prevent communication between the Human Resources and Research departments regarding sensitive salary data during the due diligence period. They need a Microsoft Purview solution that can block all email and chat between users in these two groups, as well as prevent file sharing in Teams and SharePoint. Which solution should they configure?

Accepted Answer

Information Barriers. Information Barriers (IB) in Microsoft Purview are specifically designed to prevent communication and collaboration between defined user groups, such as HR and Research, by blocking email, Teams chat, and SharePoint/OneDrive file sharing. This solution enforces policies at the transport and service level, ensuring that sensitive salary data is not inadvertently shared during the merger due diligence period.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity Labels

Answer

eDiscovery (Premium)

Question 16

A company with 40 users needs email, Teams, web Office apps, and cloud file storage but not desktop Office apps. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides Exchange Online for email, Teams for collaboration, web versions of Office apps (Word, Excel, PowerPoint), and OneDrive for cloud file storage — all without including desktop Office apps. This plan is designed specifically for organizations that need cloud productivity tools but not locally installed Office applications, matching the 40-user requirement exactly.

Answer

A free personal Microsoft account only

Answer

Azure Virtual Desktop only

Answer

Microsoft Defender for Cloud only

Question 17

A company with 50 users currently has Microsoft 365 Business Basic licenses. They now want to give all users the desktop versions of Office apps and 1 TB of OneDrive storage per user. What is the most cost-effective licensing change?

Accepted Answer

Upgrade all users to Microsoft 365 Business Standard. Microsoft 365 Business Standard includes desktop Office apps, Exchange Online, Teams, and 1 TB OneDrive storage. Upgrading the existing subscriptions to Business Standard is more cost-effective than adding separate Microsoft 365 Apps for Business licenses because the latter does not include additional benefits like Exchange, and upgrading is typically priced per user as an incremental cost.

Answer

Purchase Microsoft 365 Apps for Business licenses for all users

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Purchase Microsoft 365 E3 licenses for all users

Question 18

A company is evaluating moving its on-premises infrastructure to a cloud environment. They want a service that provides virtual machines, storage, and networking capabilities while retaining full control over the operating system and applications. Which cloud service model best meets this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources, including virtual machines, storage, and networking, over the internet. The customer retains full administrative control over the operating system, applications, and middleware, while the cloud provider manages the underlying physical hardware. This matches the requirement for full OS and application control.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Private Cloud

Question 19

A company uses a cloud storage service that automatically increases its storage capacity without any manual intervention as new files are added. This behavior is an example of which cloud computing characteristic?

Accepted Answer

Rapid elasticity. The scenario describes storage capacity automatically increasing as new files are added, which is the essence of rapid elasticity. This cloud characteristic allows resources to scale out and in automatically, often to the point where the user perceives unlimited capacity, without requiring manual provisioning or intervention.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 20

A company wants to provide its employees with access to email, calendar, and document editing tools through a web browser without installing any software. The provider manages all maintenance, updates, and security of the applications. Which cloud service model best describes this scenario?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS) because the provider delivers fully functional applications—such as email, calendar, and document editing—over the web, with no local installation required. The provider handles all maintenance, updates, and security, which is the defining characteristic of SaaS. Examples include Microsoft 365 (Exchange Online, Outlook, Word Online) and Google Workspace.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Desktop as a Service (DaaS)