MS-900 Practice Test 36 — 15 Questions

Question 1

A company has employees who frequently work from home on personal devices. They need to ensure corporate data in Microsoft 365 is protected even if the device is lost or compromised, without managing the entire device. What should they implement?

Accepted Answer

Microsoft Intune App Protection Policies. Microsoft Intune App Protection Policies (MAM) protect data at the app level without device enrollment. Conditional Access controls access. DLP prevents data loss. MAM is the correct approach for unmanaged devices.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Entra Conditional Access

Answer

Microsoft Purview Data Loss Prevention

Question 2

A company uses Microsoft 365 Business Premium and wants to enable secure remote access for employees using personal devices. Which Microsoft 365 app should they configure to enforce conditional access policies based on device compliance?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct answer because it is the Microsoft 365 app that provides mobile device management (MDM) and mobile application management (MAM). It allows administrators to define device compliance policies (e.g., requiring encryption, PIN, or a minimum OS version) and integrate those policies with Microsoft Entra ID (formerly Azure AD) Conditional Access. When a user attempts to access corporate resources from a personal device, Conditional Access checks the device's compliance status reported by Intune before granting access.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 3

A company wants to replace its on-premises Exchange Server with a cloud-based email solution that integrates with Microsoft Teams and SharePoint Online. Which Microsoft 365 service should they subscribe to?

Accepted Answer

Exchange Online. Exchange Online is the cloud-based email solution that integrates with Teams and SharePoint. Option A is correct. Options B, C, and D are incorrect because they are not email services.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Apps

Answer

Microsoft Outlook desktop app

Question 4

An organization wants to use Microsoft 365 to automatically classify and protect sensitive data in emails and documents. Which service should they use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides data classification, labeling, and protection capabilities directly within Microsoft 365. It uses sensitivity labels to automatically classify emails and documents based on conditions like content patterns or custom keywords, and then applies encryption, rights management, or visual markings (e.g., headers/footers) to protect sensitive data both at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Defender for Office 365

Answer

Microsoft Entra ID

Question 5

Which TWO Microsoft 365 services provide capabilities for insider risk management?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management (option B) is a dedicated service that uses machine learning and behavioral analytics to detect, investigate, and respond to risky user activities such as data theft, policy violations, or unauthorized access. It correlates signals from Microsoft 365 logs, HR data, and user behavior to identify potential insider threats, making it the primary tool for insider risk management.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender XDR

Question 6

An organization uses Microsoft Teams and wants to ensure that external users from partner companies can access only specific channels and cannot initiate private chats with internal users. Which Microsoft 365 feature should they configure?

Accepted Answer

Teams External Access (Federation). B is correct because Teams External Access (Federation) allows external users from partner organizations to be added to specific channels without granting them full tenant access. It uses the Session Initiation Protocol (SIP) federation model to enable limited collaboration, and administrators can control whether federated users can initiate private chats by disabling the 'External users can contact me' policy in the Teams admin center. This meets the requirement of restricting external users to only designated channels and preventing private chat initiation.

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Entra B2B collaboration

Answer

Teams Guest Access

Question 7

A sales team needs to collaborate on documents in real time, track changes, and co-author using familiar desktop tools. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Word. Microsoft Word is the correct choice because it is the desktop app that natively supports real-time co-authoring, change tracking, and simultaneous editing by multiple users. These features are built into Word for Microsoft 365, allowing teams to collaborate on documents using the familiar desktop interface without needing to switch to a web or mobile app.

Answer

Microsoft Teams

Answer

Microsoft OneNote

Answer

Microsoft Planner

Question 8

A training department wants to create interactive learning paths and track employee progress. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Viva Learning. Option A is correct because Viva Learning is designed for learning and training. Option B is incorrect because SharePoint Online is for document management. Option C is incorrect because Stream is for videos. Option D is incorrect because Viva Topics is for knowledge management.

Answer

Microsoft Viva Topics

Answer

Microsoft Stream

Answer

SharePoint Online

Question 9

An organization wants to use AI to summarize long email threads and suggest replies in Outlook. Which Microsoft 365 feature provides this capability?

Accepted Answer

Microsoft Copilot for Microsoft 365. Microsoft Copilot for Microsoft 365 integrates AI directly into Outlook to summarize long email threads and generate suggested replies. It uses large language models and the Microsoft Graph to analyze conversation context, extract key points, and draft responses, all within the user's mailbox. This is the only Microsoft 365 feature designed specifically for these natural language processing tasks in Outlook.

Answer

Microsoft Editor

Answer

Microsoft Search

Answer

Microsoft Viva Insights

Question 10

A marketing team needs to create a dashboard that shows real-time sales data from Dynamics 365 and customer feedback from social media. Which Microsoft 365 service should they use to build this dashboard?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct service because it is designed to connect to multiple data sources, including Dynamics 365 for real-time sales data and social media APIs for customer feedback, and then create interactive, real-time dashboards. It provides built-in connectors, real-time streaming datasets, and the ability to publish dashboards for team-wide access, making it the ideal tool for this marketing requirement.

Answer

Microsoft Power Automate

Answer

Microsoft SharePoint

Answer

Microsoft Power Apps

Question 11

Which TWO Microsoft 365 services are specifically designed to help organizations manage and monitor data compliance?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview (A) provides data governance and compliance solutions. Microsoft Purview Communication Compliance (C) monitors communications for policy violations. Microsoft Defender for Office 365 (B) is for threat protection. Microsoft Intune (D) is for device management. Microsoft Sentinel (E) is a SIEM.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Question 12

A user is trying to access Microsoft 365 services but is prompted for additional verification via a phone call. Which Microsoft 365 feature is enforcing this?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that enforces Conditional Access policies. When a user is prompted for additional verification via a phone call, it means a Conditional Access policy requiring multi-factor authentication (MFA) has been triggered. Entra ID evaluates the sign-in risk, user location, or device compliance and then invokes MFA through the Microsoft Authenticator service, which can deliver a phone call as one of the verification methods.

Answer

Microsoft Purview

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Question 13

Which TWO Microsoft 365 apps are primarily used for business process automation and workflow? (Select two.)

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is a low-code application development platform that enables users to build custom business apps for process automation, while Microsoft Power Automate (formerly Flow) is a cloud-based service for creating automated workflows between apps and services. Together, they form the core of Microsoft's Power Platform for business process automation and workflow orchestration.

Answer

Microsoft Planner

Answer

Microsoft To Do

Answer

Microsoft Forms

Question 14

A user needs to access their work files from a personal device without storing a copy locally. Which Microsoft 365 app should they use?

Accepted Answer

OneDrive for Business. OneDrive for Business enables users to access work files from any device via the cloud, with the option to stream files on demand without downloading them locally. This is achieved through Files On-Demand, which uses placeholder files and syncs only metadata, ensuring no full copy is stored on the personal device unless explicitly made available offline.

Answer

Microsoft Outlook

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Question 15

An organization uses Microsoft Bookings to manage customer appointments. Staff need to see their Bookings calendar within Outlook. What must be configured?

Accepted Answer

Add staff members to the Bookings calendar.. Option C is correct because for staff to see their Bookings calendar within Outlook, they must be added as staff members in the Bookings calendar. This automatically creates a Bookings-specific calendar in their Outlook that syncs appointments. No additional sharing or scripting is required.

Answer

Configure calendar sharing between Bookings and Outlook.

Answer

Run a PowerShell script to sync calendars.

Answer

Integrate Bookings with Dynamics 365.