MS-900 Practice Test 31 — 15 Questions

Question 1

Match each Microsoft 365 deployment model to its description.

Accepted Answer

Hybrid deployment: Combination of cloud and on-premises services.. Correct matches: Hybrid deployment uses both cloud and on-premises resources; GCC is tailored for US government compliance. Common confusions: mixing up cloud-only and on-premises definitions, and assuming 21Vianet operates globally when it is specific to China.

Answer

Cloud-only deployment: All services run on local servers within the organization.

Answer

On-premises deployment: All services hosted in Microsoft's cloud.

Answer

Microsoft 365 operated by 21Vianet: Cloud services hosted in Microsoft's data centers worldwide.

Question 2

Match each Microsoft 365 workload to its associated AI feature.

Accepted Answer

Microsoft Word: AI-powered Editor that improves grammar and style.. AI features in Microsoft 365 enhance productivity: Word uses Editor, Excel uses Ideas, Outlook uses Focused Inbox, PowerPoint uses Designer, and Teams uses Live Captions. Common confusions arise from swapping features across workloads.

Answer

Microsoft Word: Ideas that analyzes data patterns.

Answer

Microsoft Excel: Designer that suggests slide layouts.

Answer

Microsoft Outlook: Live Captions that generates subtitles.

Question 3

Match each Microsoft 365 service to its primary purpose.

Accepted Answer

Microsoft Teams: Chat-based collaboration platform for real-time communication and teamwork.. Microsoft Teams is for chat and collaboration, SharePoint for document management and intranets, Exchange Online for email, and OneDrive for personal file storage. Common confusions include mixing Teams with SharePoint or Exchange with SharePoint.

Answer

Exchange Online: Platform for creating intranet sites and managing documents.

Question 4

Match each Microsoft 365 subscription plan to its description.

Accepted Answer

Microsoft 365 Business Basic: Includes web and mobile versions of Office apps, business email, and 1 TB cloud storage.. Microsoft 365 Business Basic provides web and mobile Office apps only; Business Standard adds desktop apps; Business Premium adds advanced security and device management.

Answer

Microsoft 365 Business Basic: Includes desktop versions of Office apps, business email, and 1 TB cloud storage.

Answer

Microsoft 365 Business Standard: Includes all features of Business Basic plus advanced security and device management.

Question 5

Which three of the following are core components of Microsoft’s Zero Trust security model as implemented in Microsoft 365? (Choose three.)

Accepted Answer

Verify explicitly. The Zero Trust security model is built on three foundational principles: verify explicitly, use least privileged access, and assume breach. In Microsoft 365, 'verify explicitly' means authenticating and authorizing every access request based on all available data points (user identity, device health, location, etc.). 'Use least privileged access' limits user permissions to only what is necessary, enforced through tools like Privileged Identity Management (PIM) and Conditional Access. 'Assume breach' designs the environment to minimize blast radius and segment access, assuming an attacker is already present, which drives practices like micro-segmentation and continuous monitoring.

Answer

Encrypt all data at rest only

Answer

Deploy a single firewall for all traffic

Answer

Require on-premises identity provider

Question 6

A security analyst receives an alert about a user who downloaded a large number of files from a SharePoint document library in a short period. The analyst needs to investigate the user's activities across Exchange, SharePoint, and Teams to determine if data exfiltration is occurring. Which Microsoft Purview solution should the analyst use to review detailed activity logs?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) provides detailed, searchable activity logs for user actions across Exchange, SharePoint, and Teams, including file downloads, access events, and admin operations. The analyst can use the Audit log search to filter by user, date range, and activity type (e.g., 'FileDownloaded') to identify potential data exfiltration patterns. Audit (Premium) also offers longer retention (up to 1 year by default, extendable to 10 years) and higher-bandwidth APIs for large-scale investigations.

Answer

Microsoft Purview eDiscovery (Premium)

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Data Loss Prevention (DLP)

Question 7

A multinational organization has a Microsoft 365 E5 subscription for 10,000 users. Some users in a subsidiary require only email and basic office apps. The IT department wants to reduce costs by reassigning licenses without losing any existing functionality for those users. What is the most cost-effective licensing strategy?

Accepted Answer

Downgrade those users to Microsoft 365 E3 licenses. Microsoft 365 E3 provides the same core functionality as E5—Exchange Online, SharePoint, Teams, and desktop Office apps—but lacks E5's advanced security and analytics features (e.g., Microsoft Defender for Office 365 Plan 2, Microsoft Purview, Power BI Pro). Downgrading users who need only email and basic Office apps to E3 reduces per-user licensing cost while preserving all required functionality, making it the most cost-effective strategy.

Answer

Keep all users on E5 but reduce the number of licenses

Answer

Switch to Microsoft 365 E1 licenses for those users

Answer

Assign Microsoft 365 Business Basic licenses to those users

Question 8

A company is evaluating a move to the cloud. Which three of the following are advantages of using a public cloud model compared to a private cloud? (Choose three.)

Accepted Answer

Provider-managed infrastructure maintenance. In a public cloud model, the cloud provider owns and manages the physical hardware, eliminating the need for the customer to make capital expenditures (CapEx) on servers, storage, and networking equipment. Public clouds offer elastic scaling, allowing resources like virtual machines or containers to be automatically provisioned or deprovisioned based on real-time demand, which is a core benefit of cloud computing. Provider-managed infrastructure maintenance means the cloud vendor handles all hardware patching, firmware updates, and physical security, offloading these operational responsibilities from the customer.

Answer

Guaranteed data residency in a specific geographic location

Answer

Full control over physical security of data centers

Answer

Lower total cost for all long-term workloads

Question 9

Which three of the following are key capabilities of Microsoft 365 Apps for enterprise (formerly Office 365 ProPlus)? (Choose three.)

Accepted Answer

Real-time co-authoring in Word, Excel, and PowerPoint. Microsoft 365 Apps for enterprise provides always-up-to-date versions of core Office applications like Word, Excel, PowerPoint, and Outlook, with updates delivered via the Click-to-Run technology from the cloud. It allows installation on up to 5 PCs or Macs per user, enabling productivity across multiple devices. Real-time co-authoring in Word, Excel, and PowerPoint is a key capability, leveraging OneDrive or SharePoint to allow multiple users to edit the same document simultaneously.

Answer

Built-in video conferencing with unlimited meeting duration

Answer

Unlimited cloud storage per user in OneDrive

Answer

On-premises deployment with perpetual licensing

Question 10

Which three of the following are Microsoft 365 apps and services that are primarily designed for productivity and collaboration? (Choose three.)

Accepted Answer

Microsoft SharePoint Online. Microsoft Teams, Exchange Online, and SharePoint Online are core Microsoft 365 workloads designed to enhance productivity and collaboration. Teams provides a unified communication platform with chat, meetings, and file sharing; Exchange Online delivers enterprise-grade email and calendaring; SharePoint Online enables document management, intranet portals, and team sites for collaborative content creation.

Answer

Microsoft Azure Active Directory

Answer

Microsoft Intune

Answer

Microsoft Defender for Office 365

Question 11

Match each Microsoft 365 support channel to its description.

Accepted Answer

Phone support: Direct voice communication with a support engineer for critical issues.. Microsoft 365 offers multiple support channels: Phone support for critical issues, Online self-help for documentation, Community forums for peer assistance, and the Service health dashboard for real-time status. Common confusions involve mixing definitions of phone and self-help or community and phone.

Answer

Phone support: Access to troubleshooting articles and documentation.

Answer

Community forums: Direct voice communication with a support engineer.

Question 12

Match each Microsoft 365 compliance term to its definition.

Accepted Answer

Data Loss Prevention (DLP): Helps prevent sensitive data from being shared or exposed.. Microsoft 365 compliance features include Data Loss Prevention (prevent data leaks), eDiscovery (search and export for legal needs), Retention Policies (manage content lifecycle), and Sensitivity Labels (classify and protect). Common confusions involve mixing the definitions of these tools.

Answer

Data Loss Prevention (DLP): Used to search for and export content for legal or compliance purposes.

Answer

Retention Policies: Classify and protect data based on sensitivity.

Question 13

Match each Microsoft 365 service level agreement (SLA) term to its meaning.

Accepted Answer

Monthly Uptime Percentage: The percentage of total minutes in a month during which the service is available.. Correct matches: Monthly Uptime Percentage is the availability percentage, Service Credit is the compensation for not meeting that percentage, Downtime is the period of unavailability, and SLA is the overarching agreement. Common confusions involve swapping the definitions of Monthly Uptime Percentage and Service Credit.

Answer

Monthly Uptime Percentage: A percentage of the monthly service fee credited if SLA is not met.

Answer

Service Credit: The percentage of total minutes in a month during which the service is available.

Question 14

While preparing a Microsoft 365 adoption plan, a consultant is asked to give external partners controlled access to Teams and SharePoint resources. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra External ID / B2B collaboration. Microsoft Entra External ID (formerly Azure AD B2B collaboration) is the correct capability because it enables organizations to securely share Teams and SharePoint resources with external partners by inviting them as guest users. This feature uses identity federation to allow partners to authenticate with their own credentials, while enforcing conditional access policies and compliance controls. It directly addresses the requirement for controlled, compliant external access without exposing internal directories or requiring additional licenses for partners.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Planner

Question 15

A company uses Microsoft 365 and wants to create a custom app to automate expense report approvals without writing code. Which service should they use?

Accepted Answer

Power Apps. Power Apps is the correct choice because it enables users to build custom business applications with a low-code or no-code approach, integrating directly with Microsoft 365 data sources like SharePoint and Outlook. For automating expense report approvals, Power Apps can create a custom app that triggers approval workflows via Power Automate, all without writing traditional code.

Answer

SharePoint Designer

Answer

Azure Logic Apps

Answer

Power Automate