MS-900 Practice Test 34 — 15 Questions

Question 1

A user wants to schedule a meeting with colleagues and automatically record the meeting for later viewing. Which Microsoft 365 apps should they use?

Accepted Answer

Microsoft Outlook and Microsoft Teams. Microsoft Outlook is used to schedule the meeting and send invitations, while Microsoft Teams provides the platform to conduct the online meeting with the capability to automatically record the session. The recording is saved to Microsoft Stream (or OneDrive/SharePoint depending on the version), but the core apps for scheduling and recording are Outlook and Teams.

Answer

Microsoft SharePoint and Microsoft Viva Topics

Answer

Microsoft Viva Engage and Microsoft Forms

Answer

Microsoft OneDrive and Microsoft Stream

Question 2

During a Microsoft 365 planning workshop, allow access to Exchange Online only from compliant devices. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Intune compliance policies with Conditional Access. Microsoft Intune compliance policies define the security requirements (e.g., device encryption, jailbreak detection, minimum OS version) that a device must meet. When combined with Conditional Access in Microsoft Entra ID, you can create a policy that blocks access to Exchange Online unless the device is marked as compliant by Intune. This ensures only compliant devices can connect, directly meeting the requirement.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft Planner

Question 3

Your organization needs to provide access to Microsoft 365 for 50 temporary contractors who will work for 6 months. They require email and Teams. Which licensing approach is most cost-effective?

Accepted Answer

Purchase Microsoft 365 Business Basic licenses. Microsoft 365 Business Basic is the most cost-effective option for temporary contractors needing only email (Exchange Online) and Teams, as it provides these core services at the lowest per-user price. It is designed for small and medium businesses (up to 300 users) and includes web and mobile versions of Office apps, which are sufficient for basic communication needs. F3, E3, and E5 licenses include additional features (e.g., desktop Office apps, advanced security, compliance) that are unnecessary for short-term contractors, making them more expensive.

Answer

Purchase Microsoft 365 F3 licenses

Answer

Purchase Microsoft 365 E5 licenses

Answer

Purchase Microsoft 365 E3 licenses

Question 4

A company uses Microsoft 365 E3. They want to upgrade to include advanced compliance features like communication compliance and insider risk management. Which add-on license do they need?

Accepted Answer

Microsoft 365 E5 Compliance. Microsoft 365 E5 Compliance is the correct add-on license because it includes advanced compliance features such as Communication Compliance (for monitoring and detecting inappropriate messages) and Insider Risk Management (for identifying and mitigating internal data risks). These features are not available in the base Microsoft 365 E3 subscription and require the E5 Compliance SKU to unlock.

Answer

Microsoft 365 E5 Security

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Cloud Apps

Question 5

Contoso Ltd. is a mid-sized company with 1,200 employees. They currently use on-premises Exchange and SharePoint. They plan to migrate to Microsoft 365 and have decided to use Microsoft 365 E3 for all users. The IT department is concerned about the cost of add-on services. The CFO wants to minimize monthly expenses while ensuring that users have access to Exchange Online, SharePoint Online, Teams, and OneDrive. Additionally, the company needs to meet basic compliance requirements such as retention policies and eDiscovery. They do not require advanced security features like Microsoft Defender for Office 365 P2 or Microsoft Purview Data Loss Prevention. Which approach should the IT department recommend to meet these requirements at the lowest cost?

Accepted Answer

Use Microsoft 365 E3 without any add-ons. Microsoft 365 E3 includes Exchange Online, SharePoint Online, Teams, and OneDrive, as well as core compliance features like retention policies and eDiscovery (via Microsoft Purview). Since the company does not require advanced security add-ons, no additional purchases are needed, making E3 the lowest-cost option that meets all stated requirements.

Answer

Use Microsoft 365 E3 and add Microsoft Purview Compliance Manager

Answer

Use Microsoft 365 Business Premium for all users

Answer

Use Microsoft 365 E5 for all users

Question 6

A global financial services firm needs to protect highly confidential documents containing trade secrets. The protection must restrict access to a specific group of employees, prevent editing and printing, and remain enforced even if the document is downloaded and saved to an external device. Which Microsoft Purview solution should be used?

Accepted Answer

Sensitivity labels (Azure Information Protection). Sensitivity labels from Azure Information Protection (AIP) allow you to classify and protect documents with persistent protection that travels with the file, even when it is downloaded to an external device. By configuring a sensitivity label with encryption, you can restrict access to a specific group of employees, disable editing and printing, and enforce these restrictions regardless of where the file is stored. This meets all the requirements of the scenario, including persistent protection after download.

Answer

Data Loss Prevention (DLP) policy

Answer

Information Barriers

Answer

Advanced Audit

Question 7

A company wants to ensure that all Microsoft 365 admin actions are recorded and searchable for at least 180 days. They also need to create custom alert rules to notify the security team when critical events occur, such as a user being added to the Global Admin role. Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview Audit. Microsoft Purview Audit (specifically Audit (Standard) or Audit (Premium)) is the correct solution because it records all admin actions from Microsoft 365 services into the unified audit log, retains those logs for at least 180 days (Audit Standard) or up to 10 years (Audit Premium), and allows you to create custom alert policies that trigger notifications when specific events like 'Added member to role' (e.g., Global Admin) occur. This directly meets the requirement for recording, searchability, and custom alerting on critical admin events.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Information Protection

Answer

Microsoft Purview eDiscovery

Question 8

A company has 50 users with Microsoft 365 Business Basic licenses. They want to allow dial-in access to their online meetings for participants who cannot use VoIP. They need to minimize additional licensing costs. What should they purchase?

Accepted Answer

Audio Conferencing add-on. Audio Conferencing is the correct add-on because it provides dial-in (PSTN) access to Microsoft Teams meetings, allowing participants to join via phone when VoIP is unavailable. Since the company already has Microsoft 365 Business Basic licenses, which include Teams but not dial-in capabilities, purchasing the Audio Conferencing add-on per user is the most cost-effective way to enable this feature without upgrading the entire license.

Answer

Phone System add-on

Answer

Microsoft 365 Business Voice

Answer

Upgrade to Microsoft 365 Business Standard

Question 9

A healthcare organization uses Microsoft 365 E5 and must comply with HIPAA. They need to ensure that all emails containing protected health information (PHI) are encrypted both in transit and at rest. They also need to prevent users from accidentally sending PHI to external recipients. What should they implement?

Accepted Answer

Implement Microsoft Purview Message Encryption and create DLP policies to detect and block PHI sent externally.. Microsoft Purview Message Encryption (MPME) provides the necessary encryption for PHI in transit and at rest by using Azure Rights Management (RMS) to protect emails. Data Loss Prevention (DLP) policies in Microsoft Purview can be configured to detect patterns like social security numbers or medical record numbers and automatically block or warn users before sending such emails externally, preventing accidental PHI exposure.

Answer

Use Microsoft Entra ID Conditional Access to require MFA for all email access.

Answer

Configure Microsoft Defender for Office 365 Safe Attachments and Safe Links policies.

Answer

Deploy Microsoft Purview Compliance Manager to assess compliance with HIPAA.

Question 10

A company with 500 users is planning to adopt Microsoft 365. They need to ensure that all users have access to Microsoft Teams, Exchange Online, and SharePoint Online, as well as the latest desktop versions of Office apps. They also require advanced compliance features such as litigation hold and eDiscovery. Which Microsoft 365 licensing plan best meets these requirements?

Accepted Answer

Microsoft 365 E3. Microsoft 365 E3 is the correct choice because it includes all required services: Microsoft Teams, Exchange Online, SharePoint Online, and the latest desktop versions of Office apps (Office 365 ProPlus). It also provides advanced compliance features such as litigation hold and eDiscovery (via the Microsoft Purview compliance portal), which are not available in lower-tier plans like Business Basic or Business Premium.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Premium

Answer

Microsoft 365 E5

Question 11

Which TWO Microsoft 365 services can be used to create and manage corporate training content and track employee completion?

Accepted Answer

Microsoft Viva Learning. Microsoft Viva Learning (A) is a centralized learning hub within Microsoft Teams that allows organizations to create, assign, and track corporate training content from internal sources (like SharePoint) and external providers (like LinkedIn Learning). SharePoint Online (E) enables the creation and management of training materials as documents, pages, or custom learning portals, and can integrate with Viva Learning to track employee completion via list-based progress tracking or Power Automate workflows.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft To Do

Question 12

A company uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across endpoints, email, and identities. Which service should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically detects, investigates, and remediates threats across endpoints, email, and identities. It leverages AI and automation to correlate signals from Microsoft Defender for Endpoint, Defender for Office 365, and Defender for Identity, enabling coordinated incident response without manual intervention.

Answer

Microsoft Purview

Answer

Microsoft Defender for Cloud

Answer

Microsoft Sentinel

Question 13

Refer to the exhibit. A Teams administrator runs the PowerShell commands to enable meeting transcription and recording for all users. After running the commands, users still cannot start transcription in their meetings. What is the most likely cause?

Accepted Answer

Users may have a custom meeting policy that overrides the global policy.. In Microsoft Teams, meeting policies are applied hierarchically: a custom policy assigned directly to a user overrides the global policy. Even if the global policy has transcription enabled, users with a custom meeting policy that has AllowTranscription set to False will not be able to start transcription. The admin must either modify the custom policy or assign the global policy to those users.

Answer

The admin does not have the correct permissions.

Answer

The admin forgot to run a Grant-CsTeamsMeetingPolicy command.

Answer

The AllowTranscription property is misnamed.

Question 14

Refer to the exhibit. An admin configures these two Conditional Access policies in Microsoft Entra ID. A user signs in from a new location with a device that is not compliant and is assigned a high risk level by identity protection. What will happen to the user's sign-in?

Accepted Answer

The user is blocked from signing in.. The first Conditional Access policy blocks all access for users assigned a high risk level. Since the user is assigned a high risk level by Identity Protection, this policy is triggered first, and because Conditional Access policies are evaluated in order and the first applicable policy that results in a block will prevent further evaluation, the user is blocked from signing in. The second policy requiring MFA for non-compliant devices is never evaluated because the block policy takes precedence.

Answer

The user is granted access because the second policy requires MFA.

Answer

The user is prompted for MFA due to the second policy.

Answer

The user is allowed access but with session restrictions.

Question 15

A company with 100 users has Microsoft 365 Business Basic licenses. They want to add Phone System and Audio Conferencing for all users to enable PSTN calling and dial-in capabilities. They wish to minimize additional costs. What is the most cost-effective licensing approach?

Accepted Answer

Add the Microsoft 365 Business Voice add-on for each user.. Microsoft 365 Business Voice is a cost-effective add-on specifically designed for Business Basic, Standard, or Premium subscribers to add Phone System and Audio Conferencing capabilities. It bundles both PSTN calling and dial-in features into a single license, avoiding the higher cost of upgrading to E3 or purchasing separate add-ons.

Answer

Upgrade all users to Microsoft 365 E3 and add Phone System and Audio Conferencing.

Answer

Purchase Phone System and Audio Conferencing as standalone add-ons separately.

Answer

Add the Microsoft Teams Phone Standard add-on.