MS-900 Practice Test 37 — 15 Questions

Question 1

A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?

Accepted Answer

IaaS (Infrastructure as a Service). This scenario describes Infrastructure as a Service (IaaS), where the cloud provider supplies virtualized computing resources such as virtual machines, storage, and networking, but the customer retains full control over the operating system, middleware, and applications. In IaaS, the provider manages only the physical infrastructure (hypervisor, servers, storage, and network), while the customer is responsible for OS installation, configuration, patching, and application management. This aligns directly with the question's description of customer-managed OS and applications on provider-hosted VMs.

Answer

PaaS (Platform as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 2

Which TWO Microsoft 365 apps can be used to create and share forms for surveys? (Select exactly 2.)

Accepted Answer

Microsoft Forms. Microsoft Forms is a dedicated survey and quiz creation tool within Microsoft 365, allowing users to design forms, collect responses, and export data to Excel. It integrates with Teams and SharePoint for sharing, but the core creation and sharing capability for surveys is native to Forms itself. Microsoft Excel can also be used to create forms via the 'Insert > Forms' option, which leverages the same underlying Forms service to generate and share surveys directly from a spreadsheet.

Answer

Microsoft Teams

Answer

Microsoft Outlook

Answer

OneNote

Question 3

Refer to the exhibit. A Contoso user tries to send an email containing a credit card number to an external recipient. What will happen?

Accepted Answer

The email is blocked and the user receives a notification.. The DLP policy enforces blocking of credit card numbers. Option B is wrong because the policy is enforced, not just audit. Option C is wrong because it blocks, not removes. Option D is wrong because it blocks, not quarantines.

Answer

The credit card number is removed and the email is sent.

Answer

The email is sent and an alert is generated for admin.

Answer

The email is delivered to the external recipient but placed in quarantine.

Question 4

A development team uses a cloud service to run applications where the provider manages the runtime environment, operating system, and middleware. The team only writes and uploads code. Which service model are they using?

Accepted Answer

PaaS (Platform as a Service). The scenario describes the team writing and uploading code while the provider manages the runtime environment, operating system, and middleware. This is the defining characteristic of Platform as a Service (PaaS), where the cloud provider abstracts the underlying infrastructure and platform layers, allowing developers to focus solely on application code. In PaaS, the provider handles OS patching, runtime updates, and middleware configuration, which matches the description exactly.

Answer

IaaS (Infrastructure as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 5

You need to provide external partners access to a single document without giving them access to your entire SharePoint site. What should you do?

Accepted Answer

Share a direct link to the document with specific permissions. Sharing a direct link with specific permissions allows you to grant external partners access to a single document without giving them broader access to the entire SharePoint site. This method uses SharePoint's granular permission model, where you can set the link to 'Specific people' and restrict permissions to 'View' or 'Edit' only on that document, ensuring no unintended access to other site content.

Answer

Add the partners as guests to the SharePoint site

Answer

Email the document as an attachment

Answer

Create a Microsoft 365 group and add them

Question 6

A company wants to ensure that all Microsoft 365 users authenticate using multi-factor authentication (MFA). Which Microsoft 365 security feature should they configure?

Accepted Answer

Microsoft Entra ID Conditional Access. Microsoft Entra ID Conditional Access is the policy engine that evaluates signals (user, device, location, application, risk) and enforces access decisions, including requiring MFA. To ensure all Microsoft 365 users authenticate with MFA, an administrator creates a Conditional Access policy targeting all users and all cloud apps (or the Office 365 app suite) with a grant control of 'Require multifactor authentication.' This is the native, centralized mechanism for enforcing MFA across Microsoft 365 workloads.

Answer

Microsoft Intune compliance policies

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Defender XDR

Question 7

Which cloud deployment model provides the highest level of control over resources and infrastructure?

Accepted Answer

Private cloud. The private cloud deployment model provides the highest level of control over resources and infrastructure because it is dedicated to a single organization, allowing full customization of hardware, networking, and security policies. Unlike public or hybrid models, the organization retains exclusive administrative access and can enforce strict compliance requirements without sharing underlying physical resources with other tenants.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 8

A company migrates its database to Azure SQL Database (PaaS). According to the shared responsibility model, which of the following is the customer's responsibility?

Accepted Answer

Managing user access and authentication. In the shared responsibility model for Azure SQL Database (PaaS), the customer is responsible for managing user access and authentication because the customer controls who can connect to the database and what permissions they have. Microsoft manages the underlying infrastructure, including the operating system, physical hardware, and virtualization layer, while the customer must secure data access through Microsoft Entra ID or SQL authentication, configure firewall rules, and manage logins and users.

Answer

Patching the operating system of the database server

Answer

Maintaining the physical infrastructure

Answer

Managing the virtualization layer

Question 9

A mid-sized company, Fabrikam, uses Microsoft 365 Business Premium. The company has 500 users and wants to implement a solution to protect against phishing attacks that target user credentials. The solution must: 1. Automatically detect and block malicious links in emails and Teams messages. 2. Provide real-time protection when users click on links in emails. 3. Allow users to report suspicious emails to the security team. 4. Integrate with Microsoft Entra ID to enforce conditional access policies based on user risk. Which combination of Microsoft 365 services should Fabrikam deploy?

Accepted Answer

Deploy Microsoft Defender for Office 365 and enable Microsoft Defender XDR.. Microsoft Defender for Office 365 (formerly Office 365 ATP) provides Safe Links and Safe Attachments to automatically detect and block malicious links in email and Teams messages, and offers real-time protection when users click links. Microsoft Defender XDR (Extended Detection and Response) correlates signals across Defender for Office 365, Defender for Endpoint, and Microsoft Entra ID to enforce conditional access policies based on user risk, fulfilling all four requirements.

Answer

Deploy Microsoft Intune and enforce conditional access policies that require compliant devices.

Answer

Deploy Microsoft Sentinel and configure analytics rules for phishing.

Answer

Deploy Microsoft Purview Data Loss Prevention and set up an email policy.

Question 10

A small company with 15 employees needs business-grade email, desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user. They do not need advanced security or compliance features. Which Microsoft 365 plan is the most cost-effective choice?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is the most cost-effective choice because it includes business-grade email (Exchange Online), desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user via OneDrive. It meets all stated requirements without the added cost of advanced security or compliance features found in higher-tier plans.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Premium

Answer

Microsoft 365 E3

Question 11

A company uses Microsoft 365 E5. The security team wants to automatically investigate and remediate advanced threats across email, endpoints, and identities. Which Microsoft 365 Defender workload should they enable?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (option D) is the correct answer because it is the unified, cross-domain security solution that correlates signals across email, endpoints, identities, and cloud apps to automatically investigate and remediate advanced threats. Unlike the individual Defender workloads, Defender XDR provides integrated incident response and automated actions across all these domains, which directly matches the requirement for automatic investigation and remediation across email, endpoints, and identities.

Answer

Microsoft Defender for Identity

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Defender for Office 365

Question 12

A colleague says, 'The public cloud is cheaper because you only pay for the resources you use, like compute hours or storage space.' Which cloud computing characteristic directly supports this pay-as-you-go model?

Accepted Answer

Measured service. Measured service is the cloud computing characteristic that enables a pay-as-you-go model by metering resource usage (e.g., compute hours, storage GB-months, outbound data transfer) and providing transparent billing based on actual consumption. This allows providers like Azure to charge only for what is used, directly supporting the colleague's statement that the public cloud is cheaper because you pay only for resources consumed.

Answer

Rapid elasticity

Answer

Broad network access

Answer

On-demand self-service

Question 13

A sales manager wants to streamline the process of generating follow-up emails after customer meetings. Which Microsoft 365 app allows them to automatically create email drafts based on meeting notes using AI?

Accepted Answer

Copilot in Outlook. Copilot in Outlook leverages AI to automatically generate email drafts based on meeting notes, transcripts, or summaries, directly within the Outlook interface. This allows the sales manager to streamline follow-up emails without manual composition, using natural language processing to extract key points and action items from the meeting context.

Answer

SharePoint Online

Answer

Microsoft Viva Insights

Answer

Microsoft Teams Premium

Question 14

Which THREE of the following are security features included in Microsoft 365 Business Premium? (Choose three.)

Accepted Answer

Microsoft Entra ID Plan 1. Microsoft Entra ID Plan 1 is included in Microsoft 365 Business Premium. It provides identity and access management capabilities such as single sign-on (SSO), multi-factor authentication (MFA), and conditional access policies. These features help secure user identities and control access to cloud resources, which is a core security requirement for business environments.

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 15

An organization wants to block sharing of documents containing credit card numbers. Which two statements are accurate about the Microsoft 365 capability involved?

Accepted Answer

Data Loss Prevention policies. Data Loss Prevention (DLP) policies in Microsoft 365 are specifically designed to detect and block the sharing of sensitive information, such as credit card numbers, by scanning content for predefined or custom sensitive information types. When a match is found, DLP can enforce actions like blocking the share or sending a notification, directly addressing the organization's requirement. This capability operates across Exchange Online, SharePoint, OneDrive, and Teams, providing comprehensive protection against accidental or malicious data leaks.

Answer

It replaces the need for identity and access management

Answer

It requires every document to be made public