MS-900 Practice Test 37 — 15 Questions

Question 1

Refer to the exhibit. An administrator creates a Conditional Access policy in Microsoft Entra ID. The AppId 00000003-0000-0ff1-ce00-000000000000 corresponds to Microsoft Graph. The policy requires MFA for all users accessing Microsoft Graph. However, users report that they are not prompted for MFA when using Microsoft Teams. What is the most likely reason?

Accepted Answer

The policy applies only to Microsoft Graph, not to the Teams service itself.. Teams does not exclusively use Microsoft Graph for all operations; it also uses other endpoints. The policy only applies to Microsoft Graph, not Teams service endpoints. Option B is correct. Options A, C, and D are incorrect.

Answer

The policy is not enabled.

Answer

The policy should include the app ID for Office 365 Exchange Online.

Answer

The GrantControls should be set to RequireMFA for all resources.

Question 2

Refer to the exhibit. A compliance admin runs the PowerShell command. What is the purpose of this command?

Accepted Answer

To find tags that keep and then delete content after more than 365 days.. Option C is correct: The command filters compliance tags where retention action is 'KeepAndDelete' and retention duration is greater than 365 days. Option A is incorrect because it mentions 'Delete' action only, not 'KeepAndDelete'. Option B is incorrect because it mentions 'Keep' only. Option D is incorrect because it mentions 'Review' which is not a retention action.

Answer

To find tags that require a review after 365 days.

Answer

To find tags that delete content after more than 365 days.

Answer

To find tags that keep content indefinitely.

Question 3

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Accepted Answer

Microsoft Outlook. Option A (Microsoft Outlook) is correct because Outlook has Copilot to summarize email threads. Option D (Microsoft Word) is correct because Word has Copilot to summarize documents. Option B is wrong because Excel Copilot analyzes data, not summarization. Option C is wrong because PowerPoint Copilot creates presentations. Option E is wrong because OneNote Copilot helps with notes.

Answer

Microsoft Excel

Answer

Microsoft OneNote

Answer

Microsoft PowerPoint

Question 4

A marketing department uses Microsoft 365 Copilot to generate content. The compliance officer is concerned about data leakage when users interact with Copilot. Which Microsoft Purview feature should the admin implement to prevent sensitive data from being used in Copilot prompts?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) for Copilot. Microsoft Purview Data Loss Prevention (DLP) for Copilot is the correct feature because it specifically inspects and blocks sensitive data (e.g., credit card numbers, PII) from being included in Copilot prompts or generated content. DLP policies can be applied to Copilot interactions to prevent data leakage by evaluating the content in real time against sensitive information types and enforcing actions like blocking or warning the user.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Purview Information Rights Management (IRM)

Answer

Microsoft Purview Sensitivity labels

Question 5

Which TWO Microsoft 365 apps can be used to create and share forms for surveys? (Select exactly 2.)

Accepted Answer

Microsoft Forms. Microsoft Forms and Microsoft Excel (with Forms integration) can be used to create surveys. Options A and D are correct. Option B is for email, C for notes, E for collaboration.

Answer

Microsoft Teams

Answer

Microsoft Outlook

Answer

OneNote

Question 6

A sales team uses Microsoft Copilot for Sales to draft emails. To ensure Copilot uses the most relevant customer data from Dynamics 365, what must be configured?

Accepted Answer

Dynamics 365 records. Copilot for Sales relies on Dynamics 365 records to access customer data such as contacts, accounts, and opportunities. By configuring the appropriate Dynamics 365 records, Copilot can retrieve the most relevant information to draft personalized emails. Without this configuration, Copilot lacks the necessary data source to generate context-aware content.

Answer

Microsoft Teams channels

Answer

Exchange Online mailboxes

Answer

Microsoft Viva Topics

Question 7

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

Accepted Answer

Microsoft 365 Copilot. Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Answer

Microsoft Viva Insights

Answer

Microsoft Editor

Answer

Microsoft Power Automate

Question 8

Your company has deployed Microsoft Defender XDR. A security analyst needs to investigate a suspicious email that was reported by a user. Which Microsoft 365 service should the analyst use to view the email's details and analyze threats?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct service because it provides a unified investigation and response experience across email, endpoints, identities, and cloud apps. The security analyst can use the Microsoft Defender portal (security.microsoft.com) to view the full email details, including headers, attachments, URLs, and threat analysis results from automated investigation and advanced hunting queries.

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 9

Refer to the exhibit. A SharePoint admin is reviewing a policy JSON snippet. Which statement accurately describes the effect of this policy?

Accepted Answer

External sharing is completely disabled.. The policy JSON snippet sets the 'sharingCapability' to 'Disabled', which completely disables external sharing for the SharePoint environment. This means no external users can be invited, and any existing external sharing links will cease to function. The 'expirationTime' value of 30 days is irrelevant because sharing is disabled entirely.

Answer

External sharing is allowed only for existing guests who expire in 30 days.

Answer

External sharing is allowed but guests expire after 30 days.

Answer

External sharing is allowed but only for users in the same tenant.

Question 10

A sales team uses Microsoft 365 and wants to automatically capture and store email signatures for all outgoing messages. Which Microsoft 365 app should the administrator configure?

Accepted Answer

Microsoft Exchange Online. Option A (Microsoft Exchange Online) is correct because email signatures are managed via Exchange mail flow rules or the Exchange admin center. Option B is wrong because Microsoft Teams is for collaboration, not email signatures. Option C is wrong because Microsoft SharePoint is for document management. Option D is wrong because Microsoft Viva Insights focuses on productivity analytics.

Answer

Microsoft Teams

Answer

Microsoft Viva Insights

Answer

Microsoft SharePoint Online

Question 11

An organization uses Microsoft Teams for collaboration. The security team wants to ensure that external guests cannot download files shared in Teams channels. Compliance requirements also demand that all communication in Teams be encrypted at rest and in transit. Which built-in Teams capabilities address these requirements?

Accepted Answer

Teams information barriers and default encryption. Option D is correct because Teams information barriers can be configured to restrict external guest actions, such as preventing file downloads, while default encryption (Microsoft 365 uses BitLocker for disk-level encryption and TLS 1.2+ for data in transit) ensures all communication is encrypted at rest and in transit. These are built-in capabilities that directly address both the guest download restriction and encryption compliance requirements without additional licensing or complex configuration.

Answer

Sensitivity labels applied to the Teams site

Answer

Microsoft Purview Data Loss Prevention policies

Answer

Microsoft Entra Conditional Access policies

Question 12

Which TWO Microsoft 365 services can be used to create and manage business process automation workflows?

Accepted Answer

Power Automate. Options B and D are correct: Power Automate is the primary workflow automation tool, and Microsoft Lists can be used with Power Automate to create approval workflows. Option A is incorrect because Power BI is for analytics. Option C is incorrect because Forms is for surveys. Option E is incorrect because Stream is for video.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Power BI

Question 13

The exhibit shows a mail flow rule in an Exchange Online environment. An administrator notices that emails from a trusted partner domain are being marked with [External]. The partner domain is configured as a domain in Microsoft 365. What should the administrator do to prevent this while maintaining the rule for other external senders?

Accepted Answer

Add an exception to the rule to exclude the partner domain.. The mail flow rule is configured to mark all external senders with [External]. Since the partner domain is already configured as an accepted domain in Microsoft 365, Exchange Online treats it as internal, but the rule still applies because it matches the sender domain pattern. Adding an exception for the partner domain explicitly excludes it from the rule, ensuring emails from that domain are not marked [External] while the rule continues to apply to all other external senders.

Answer

Disable the rule.

Answer

Change the rule priority to a lower number.

Answer

Change the rule mode to 'Test' and review the results.

Question 14

A company is deploying Microsoft 365 Apps for Enterprise to 500 users. The IT team wants to minimize network traffic during installation by downloading only the apps that users need, instead of the full Office suite. Which deployment tool should they use?

Accepted Answer

Office Deployment Tool (ODT). The Office Deployment Tool (ODT) allows IT administrators to download and deploy only the specific Microsoft 365 Apps (e.g., Word, Excel) needed by users, using an XML configuration file to control which products and languages are installed. This minimizes network traffic by avoiding the download of the full suite, making it the correct choice for this scenario.

Answer

Microsoft Store for Business

Answer

Microsoft Configuration Manager

Answer

Microsoft Intune

Question 15

A user wants to create a custom dashboard that displays key performance indicators from multiple data sources, such as Excel files and SharePoint lists. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct choice because it is a business analytics service designed to connect to multiple data sources—including Excel files and SharePoint lists—and create interactive, custom dashboards with key performance indicators (KPIs). Unlike the other options, Power BI provides built-in data modeling, visualization, and real-time refresh capabilities, making it the only app in this list that fulfills the requirement for a multi-source KPI dashboard.

Answer

Microsoft Excel

Answer

Microsoft Lists

Answer

Microsoft Forms

MS-900 Practice Test 37 — 15 Questions

Exhibit

MS-900 Practice Test 37 — 15 Questions

Exhibit