MS-900 Practice Test 35 — 15 Questions

Question 1

Which cloud computing characteristic allows users to be billed only for the resources they consume, such as processing power, storage, or bandwidth?

Accepted Answer

Measured service. Measured service is the cloud computing characteristic that enables usage-based billing by monitoring, controlling, and reporting resource consumption (e.g., CPU hours, GB of storage, or data transfer) at a granular level. This metering capability allows providers to charge customers only for what they actually use, rather than a flat fee, and is typically implemented via telemetry and billing APIs.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 2

A company with 120 users needs desktop Office apps, Intune device management, and enhanced security. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium includes desktop Office apps (Office 365 E3 equivalent), Intune for device management, and advanced security features such as Microsoft Defender for Office 365, Azure Information Protection, and Conditional Access. This bundle directly satisfies all three requirements for a 120-user organization without needing separate subscriptions.

Answer

Microsoft Defender for Cloud only

Answer

Azure Virtual Desktop only

Answer

A free personal Microsoft account only

Question 3

A compliance officer needs to automatically detect when employees share customers' personal data (e.g., social security numbers) via email and block such sharing. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct solution because it is specifically designed to identify, monitor, and automatically protect sensitive data—such as social security numbers—across Microsoft 365 services, including Exchange Online. DLP policies can be configured with conditions that detect sensitive information types (e.g., U.S. Social Security Number) in email messages and apply actions like blocking the email from being sent. This directly meets the compliance officer's requirement to automatically detect and block sharing of customers' personal data via email.

Answer

Microsoft Purview Insider Risk Management

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Audit

Question 4

A company deploys a custom application on a cloud platform where they manage the operating system and runtime environment, but the cloud provider manages the underlying physical infrastructure, storage, and networking. Which cloud service model is being used?

Accepted Answer

Infrastructure as a Service (IaaS). The scenario describes a model where the customer manages the operating system and runtime environment, while the cloud provider handles the physical infrastructure, storage, and networking. This aligns precisely with Infrastructure as a Service (IaaS), as IaaS provides virtualized computing resources (e.g., virtual machines) where the customer retains control over the OS, middleware, and applications, but the provider manages the underlying hardware, hypervisor, and physical network.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Question 5

A security administrator needs to ensure that all users accessing Microsoft 365 resources from unmanaged devices are prompted to sign in using multi-factor authentication (MFA) and are blocked from downloading sensitive files. Which conditional access policy should be configured?

Accepted Answer

Conditional Access policy with device compliance and session controls. A Conditional Access policy with device compliance and session controls allows the administrator to require MFA for sign-ins from unmanaged devices and use session controls (e.g., Microsoft Defender for Cloud Apps session policies) to block downloading sensitive files. This policy targets specific conditions (unmanaged devices) and applies granular access controls, meeting both requirements precisely.

Answer

Require MFA for all users

Answer

Block access from unknown locations

Answer

App protection policies

Question 6

Your organization has 500 users and uses Microsoft 365 Business Basic. The sales team frequently works remotely and needs to access their work files on mobile devices. They also need to conduct video meetings with customers. The IT department has been asked to recommend additional Microsoft 365 services to meet these needs without upgrading the existing plan if possible. Which action should the IT department take?

Accepted Answer

Use the existing OneDrive and SharePoint mobile apps for file access and use Microsoft Teams for video meetings.. Microsoft 365 Business Basic already includes OneDrive and SharePoint for mobile file access via their respective apps, and Microsoft Teams for video meetings. These services meet the sales team's requirements without any additional licensing or plan upgrade, as Teams supports video conferencing and OneDrive/SharePoint provide secure remote file access on mobile devices.

Answer

Subscribe to a Microsoft Teams Rooms license for each user.

Answer

Upgrade all users to Microsoft 365 Business Standard to get desktop Office and additional features.

Answer

Deploy a third-party VPN solution to secure remote access to files.

Question 7

A project team needs a centralized workspace that includes a shared calendar for deadlines, a document library for storing deliverables, and a task list with assignments. They also want threaded discussions about each item. Which Microsoft 365 service provides this integrated experience out of the box?

Accepted Answer

Microsoft 365 Groups. Microsoft 365 Groups is the correct answer because it provides a unified, out-of-the-box workspace that includes a shared calendar, document library (via connected SharePoint), task list (via Planner or To Do), and a group mailbox with threaded conversations. Unlike standalone services, a Microsoft 365 Group bundles these resources together automatically when created, offering the integrated experience described without requiring manual configuration.

Answer

Microsoft Teams

Answer

SharePoint Online

Answer

Microsoft Outlook

Question 8

An organization needs to securely store and manage user identities for Microsoft 365. Which Microsoft service should they use?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the correct choice because it is Microsoft's cloud-based identity and access management service, specifically designed to store and manage user identities for Microsoft 365. It provides authentication, single sign-on (SSO), and conditional access policies, ensuring secure access to Microsoft 365 resources. Other options focus on data protection, security monitoring, or device management, not identity storage.

Answer

Microsoft Purview

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Intune

Question 9

A compliance team needs to prevent employees from copying sensitive data (such as financial records or customer PII) to USB drives and other removable media from their Windows 10/11 devices. When a user attempts to copy data to an unapproved USB device, the action should be blocked and an alert should be generated. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) with device policies. Microsoft Purview Data Loss Prevention (DLP) with device policies is the correct solution because it is specifically designed to monitor and control actions like copying sensitive data to removable media on Windows 10/11 endpoints. DLP device policies can block the copy action to unapproved USB devices and generate alerts when a policy violation occurs, directly addressing the compliance team's requirement to prevent data exfiltration via USB drives.

Answer

Microsoft Purview Data Lifecycle Management (retention policies)

Answer

Microsoft Purview Information Protection (sensitivity labels)

Answer

Microsoft Purview eDiscovery (Standard or Premium)

Question 10

Which TWO of the following are examples of Microsoft's commitments to data privacy as outlined in the Microsoft Privacy Statement and related agreements? (Choose two.)

Accepted Answer

Customers can access and export their data.. The Microsoft Privacy Statement explicitly grants customers the right to access, export, and delete their data, aligning with data portability and control principles under regulations like GDPR. This commitment ensures that customers maintain ownership and control over their data stored in Microsoft 365 services.

Answer

Microsoft uses customer data to train AI models by default.

Answer

Microsoft may share customer data with third parties for marketing purposes.

Answer

Microsoft allows third parties to access customer data without consent.

Question 11

A company uses Microsoft Purview Communication Compliance to detect inappropriate messages. Which action can an administrator take after reviewing a flagged message?

Accepted Answer

Resolve the case with a notification to the sender. In Microsoft Purview Communication Compliance, after a reviewer investigates a flagged message, they can resolve the case by taking actions such as notifying the sender, escalating, or marking as false positive. Resolving with a notification to the sender is a standard remediation action. Retention policies and DLP policies are separate Purview solutions and cannot be applied directly from a Communication Compliance case.

Answer

Apply a retention policy to the message

Answer

Create a DLP policy based on the message

Answer

Recall the message from the recipient

Question 12

A tenant administrator is advising a department that wants to let users sign in once and access connected Microsoft 365 and SaaS apps. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Single sign-on (SSO). Single sign-on (SSO) enables users to authenticate once and gain access to multiple applications, including Microsoft 365 and third-party SaaS apps, without re-entering credentials. This is achieved through federation protocols such as SAML 2.0 or OpenID Connect, which allow the identity provider (Microsoft Entra ID) to issue security tokens to relying party applications. SSO is the correct Microsoft security and identity capability for this requirement.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 13

A product design team wants to conduct remote brainstorming sessions where participants can draw, write sticky notes, and add images on a shared canvas in real time. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Whiteboard. Microsoft Whiteboard is the correct choice because it provides a free-form digital canvas that supports real-time collaboration, including drawing, sticky notes, and image insertion. This directly meets the requirement for remote brainstorming sessions where participants need to interact on a shared canvas simultaneously.

Answer

Microsoft To Do

Answer

Microsoft Forms

Answer

Microsoft Planner

Question 14

Which TWO of the following support options are available for Microsoft 365?

Accepted Answer

Phone support. Phone support (B) is a standard support channel for Microsoft 365, available to all subscribers with a qualifying support plan, allowing users to call Microsoft directly for technical assistance. Online support via the Microsoft 365 admin center (D) is the primary self-service and ticket-based support portal where administrators can submit service requests, access health dashboards, and manage support cases.

Answer

On-site support

Answer

Chat support

Answer

Email support

Question 15

An organization uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across identities, endpoints, and email. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically correlates alerts and orchestrates remediation across identities, endpoints, email, and cloud apps. This aligns directly with the requirement to detect and remediate security incidents across identities, endpoints, and email, leveraging the Microsoft 365 Defender portal to break down silos between individual security products.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Sentinel

Answer

Microsoft Entra ID Protection