MS-900 Practice Test 32 — 15 Questions

Question 1

An organization wants to use Microsoft 365 to automatically classify and protect sensitive data in emails and documents. Which service should they use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides data classification, labeling, and protection capabilities directly within Microsoft 365. It uses sensitivity labels to automatically classify emails and documents based on conditions like content patterns or custom keywords, and then applies encryption, rights management, or visual markings (e.g., headers/footers) to protect sensitive data both at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Defender for Office 365

Answer

Microsoft Entra ID

Question 2

A development team wants to deploy a custom web application to the cloud. They want to upload their code and let the cloud provider handle server infrastructure, operating system updates, and automatic scaling. Which cloud service model best fits this requirement?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) is the correct choice because it provides a managed hosting environment where the development team can upload their custom web application code without managing the underlying server infrastructure, operating system updates, or scaling. Azure App Service, a PaaS offering, automatically handles OS patching, load balancing, and auto-scaling based on demand, aligning perfectly with the requirement to let the cloud provider handle these tasks.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 3

An organization uses Microsoft 365 Copilot and wants to ensure that AI-generated content is automatically labeled with a sensitivity label. What should they configure?

Accepted Answer

Microsoft Purview auto-labeling policies. Microsoft Purview auto-labeling policies automatically apply sensitivity labels to content based on conditions such as sensitive information types or trainable classifiers. This ensures that AI-generated content, like that from Microsoft 365 Copilot, is labeled according to organizational policy without manual intervention. Auto-labeling can be configured to label content at rest or in transit.

Answer

Microsoft Defender for Cloud Apps session policies

Answer

Microsoft Intune app protection policies

Answer

Conditional Access policies in Microsoft Entra ID

Question 4

A company is deploying Microsoft 365 Apps for Enterprise to 500 users. The IT team wants to minimize network traffic during installation by downloading only the apps that users need, instead of the full Office suite. Which deployment tool should they use?

Accepted Answer

Office Deployment Tool (ODT). The Office Deployment Tool (ODT) allows IT administrators to download and deploy only the specific Microsoft 365 Apps (e.g., Word, Excel) needed by users, using an XML configuration file to control which products and languages are installed. This minimizes network traffic by avoiding the download of the full suite, making it the correct choice for this scenario.

Answer

Microsoft Store for Business

Answer

Microsoft Configuration Manager

Answer

Microsoft Intune

Question 5

A healthcare organization is adopting Microsoft 365 and must meet compliance requirements: retain all communications for 7 years, prevent accidental deletion of documents, and classify sensitive data automatically. Which THREE Microsoft Purview features should the organization use?

Accepted Answer

Auto-labeling. Auto-labeling (Option C) is correct because it enables the organization to automatically classify sensitive data based on content patterns (e.g., healthcare records, PII) without manual intervention. This aligns directly with the requirement to classify sensitive data automatically, using trainable classifiers or sensitive info types in Microsoft Purview.

Answer

Data loss prevention (DLP) policies

Answer

eDiscovery

Question 6

A legal team needs to place a hold on all data belonging to a specific user who is involved in a lawsuit. The hold must preserve Exchange Online email, SharePoint sites, and Teams chat messages. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Standard). eDiscovery (Standard) is the correct solution because it allows legal teams to place a hold on a specific user's data across Exchange Online, SharePoint, and Teams. This hold preserves all content, including email, documents, and chat messages, ensuring that data cannot be altered or deleted during litigation. eDiscovery (Standard) is designed for legal holds and integrates with Microsoft Purview to manage custodians and preserve data.

Answer

Data Lifecycle Management (retention policies)

Answer

Communication Compliance

Answer

Audit log

Question 7

Your organization is adopting Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on organizational data that the user has permission to access. Which Microsoft 365 feature ensures this?

Accepted Answer

Microsoft Graph permissions. Microsoft Graph permissions are the correct answer because Copilot uses Microsoft Graph to access organizational data. When a user asks a question, Copilot queries the Microsoft Graph API, which enforces the user's existing permissions (e.g., from Entra ID and SharePoint) to ensure responses are based only on data the user is authorized to see. This is the core mechanism that ties Copilot's responses to the user's access rights.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Question 8

A company needs to ensure that sensitive documents stored in SharePoint Online are automatically encrypted and cannot be shared with external users. Which Microsoft Purview feature should they use?

Accepted Answer

Sensitivity labels. Sensitivity labels are the correct choice because they enforce encryption and access restrictions directly on documents, including blocking external sharing. Unlike DLP policies, which detect and prevent sharing after the fact, sensitivity labels apply persistent protection that travels with the file, ensuring it remains encrypted even if downloaded or shared outside SharePoint Online.

Answer

Communication compliance

Answer

Data Loss Prevention (DLP) policies

Answer

Retention labels

Question 9

Which THREE are benefits of using cloud services compared to on-premises infrastructure?

Accepted Answer

Elasticity to scale resources up or down automatically. Option B is correct because cloud providers offer elasticity, allowing resources to automatically scale up or down based on demand, which is difficult to achieve with fixed on-premises hardware. Option C is correct because cloud services are built on redundant, geographically distributed infrastructure that provides high availability and fault tolerance beyond what most on-premises environments can afford. Option D is correct because cloud providers offer built-in disaster recovery capabilities, such as cross-region replication and backup services, without requiring organizations to build and maintain a secondary site. Option A is incorrect because limited scalability due to resource constraints describes an on-premises limitation, not a cloud benefit. Option E is incorrect because cloud services shift spending to operational expenditure (OpEx), but they do not eliminate capital expenditure entirely, as organizations may still incur upfront costs for devices, migration, or reserved capacity.

Answer

Limited scalability due to resource constraints

Answer

Capital expenditure (CapEx) is eliminated

Question 10

Which TWO Microsoft 365 services are primarily used for enterprise social networking and communication within an organization?

Accepted Answer

Microsoft Teams. Microsoft Teams is correct because it serves as the primary hub for persistent chat, meetings, and collaboration, integrating enterprise social networking features such as channels, @mentions, and threaded conversations. Microsoft Viva Engage (formerly Yammer) is correct because it provides a dedicated enterprise social network for broad organizational communication, communities, and knowledge sharing, distinct from Teams' more team-focused interactions.

Answer

Microsoft SharePoint

Answer

Microsoft Stream

Answer

Exchange Online

Question 11

A company wants to reduce hardware maintenance costs by moving to the cloud. They need to maintain full control over the operating system, applications, and security configurations, but do not want to manage physical servers or data center facilities. Which cloud service model should they choose?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, allowing the company to deploy and manage their own operating systems, applications, and security configurations while offloading the physical hardware and data center management to the cloud provider. This model gives the highest level of control over the software stack without the burden of maintaining physical servers, aligning perfectly with the requirement to reduce hardware maintenance costs while retaining full administrative access.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

On-premises

Question 12

A company is planning to purchase Microsoft 365 subscriptions. They want to follow the recommended process. Which of the following sequences correctly represents the order of steps from start to finish?

Accepted Answer

Assess needs, Choose subscription, Add licenses, Assign licenses. The recommended process for purchasing Microsoft 365 subscriptions is to first assess the organization's needs, then choose the appropriate subscription, then add licenses to the tenant, and finally assign those licenses to users. This logical sequence ensures you purchase the right licenses and have them available before assignment.

Answer

Choose subscription, Assess needs, Assign licenses, Add licenses

Answer

Add licenses, Assign licenses, Assess needs, Choose subscription

Answer

Assess needs, Add licenses, Choose subscription, Assign licenses

Question 13

A service owner is comparing Microsoft 365 capabilities and needs to detect exact customer records rather than only generic data patterns. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Exact Data Match sensitive information type. Exact Data Match (EDM) sensitive information types allow a service owner to define custom sensitive information types based on exact database records, such as customer names or account numbers, rather than relying on generic pattern matching like regular expressions. This capability is part of Microsoft Purview compliance and enables precise detection of specific customer data in Microsoft 365 environments.

Answer

Microsoft Stream

Answer

Microsoft Planner

Answer

Microsoft Forms

Question 14

A charitable organization with 50 employees wants to use Microsoft 365 for business‑grade email, calendar, and online versions of Office apps. Their budget is extremely limited. What should they do first to obtain licenses at a reduced cost?

Accepted Answer

Apply for Microsoft 365 Nonprofit eligibility and then purchase discounted or donated plans. Microsoft offers discounted and donated plans specifically for eligible nonprofit organizations. By first applying for Microsoft 365 Nonprofit eligibility, the charitable organization can access Business Basic licenses at a significantly reduced cost or even receive donated subscriptions, aligning with their extremely limited budget while still obtaining business-grade email, calendar, and online Office apps.

Answer

Purchase Microsoft 365 Business Basic licenses through a volume licensing program

Answer

Use free consumer accounts like Outlook.com and Office Online

Answer

Sign up for a Microsoft 365 Business Premium trial and rely on extensions

Question 15

A company moves its on-premises servers to a cloud provider. The provider supplies the physical hardware, networking, and storage. The company installs and manages the operating system and applications on the virtual machines. Which cloud service model does this scenario represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the cloud provider supplies the physical hardware, networking, and storage, while the customer retains full control over the operating system and applications. In IaaS, the provider manages the underlying infrastructure (e.g., hypervisor, physical servers, network switches), and the customer is responsible for the guest OS, middleware, and application stack. This aligns with the shared responsibility model where the customer handles OS patching, application configuration, and data management.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)