MS-900 Practice Test 38 — 15 Questions

Question 1

Your organization uses Microsoft 365 E5 licenses and wants to implement a data loss prevention (DLP) policy that blocks sharing of credit card numbers in email. Which Microsoft 365 admin center should you use to create and manage this DLP policy?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Purview compliance portal. The Microsoft Purview compliance portal is the correct admin center for creating and managing Data Loss Prevention (DLP) policies because it provides the unified compliance management interface for data protection, including DLP for Exchange Online email. DLP policies that block sharing of sensitive information like credit card numbers are configured under the 'Data loss prevention' section within the Purview portal, which leverages built-in sensitive information types and rules to enforce actions such as blocking email transmission.

Answer

Microsoft Security Center

Answer

Microsoft Entra admin center

Answer

Microsoft 365 admin center

Question 2

Which TWO of the following are features of Microsoft Purview Information Protection?

Accepted Answer

Sensitivity labels. Sensitivity labels are a core feature of Microsoft Purview Information Protection, allowing organizations to classify and protect sensitive data by applying labels that enforce encryption, access restrictions, and visual markings (e.g., headers/footers). These labels can be automatically applied based on content patterns or manually by users, and they persist with the data even when it leaves Microsoft 365, ensuring consistent protection across emails, documents, and other content.

Answer

Data Loss Prevention (DLP) policies

Answer

eDiscovery (Premium)

Answer

Azure Information Protection (AIP) scanner

Question 3

A compliance officer wants to proactively prevent users from sending emails that contain sensitive personal data (e.g., credit card numbers) to external recipients. When a user attempts to send such an email, they should see a policy tip explaining the restriction and be blocked from sending. Which Microsoft Purview feature should be configured?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) policy. Microsoft Purview Data Loss Prevention (DLP) policy is the correct feature because it is specifically designed to detect sensitive data (e.g., credit card numbers) in transit and enforce actions such as showing a policy tip and blocking the email. DLP policies use sensitive information types (e.g., Credit Card Number) and conditions to inspect email content in Exchange Online, triggering a block action with an end-user notification when a match occurs.

Answer

Microsoft Purview Information Barriers

Answer

Microsoft Purview Records Management

Answer

Microsoft Purview Communication Compliance

Question 4

A company wants monthly billing based on the number of Microsoft 365 users assigned licenses. Which cloud characteristic does this represent?

Accepted Answer

Measured service. Measured service is a cloud characteristic where usage is metered and billed based on consumption. In this scenario, the company is billed monthly based on the number of Microsoft 365 users assigned licenses, which directly reflects metered usage of the service. This aligns with the pay-per-use model defined by NIST SP 800-145 for cloud computing.

Answer

Fault tolerance

Answer

Resource pooling

Answer

Rapid elasticity

Question 5

A company with 200 users currently has Microsoft 365 Business Basic licenses. They need to add Microsoft Defender for Office 365 (Plan 1) and device management capabilities using Microsoft Intune. What is the most cost-effective licensing upgrade to obtain these features?

Accepted Answer

Upgrade to Microsoft 365 Business Premium. Microsoft 365 Business Premium includes both Microsoft Defender for Office 365 (Plan 1) and Microsoft Intune device management, making it the most cost-effective upgrade from Business Basic. Purchasing these as standalone add-ons would cost more per user than the bundled Business Premium license, which also provides additional security and productivity features.

Answer

Add standalone Microsoft Defender for Office 365 Plan 1

Answer

Add standalone Microsoft Intune

Answer

Upgrade to Microsoft 365 E3

Question 6

A department head asks which Microsoft 365 option should be used to review uptime commitments for Microsoft cloud services. Cloud concept or benefit best matches this requirement?

Accepted Answer

Service Level Agreement (SLA). The Service Level Agreement (SLA) is the correct choice because it is the formal document published by Microsoft that defines the uptime commitments, availability guarantees, and financial remedies for Microsoft cloud services. The department head needs to review uptime commitments, which is exactly what the SLA covers, not a security or project management feature.

Answer

Data Loss Prevention (DLP)

Answer

Microsoft Planner

Answer

Sensitivity labels

Question 7

A company wants to ensure that only IT administrators can install browser extensions in Microsoft Edge. Which Microsoft 365 security feature should be used?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct choice because it provides mobile device management (MDM) and mobile application management (MAM) capabilities that allow administrators to configure Microsoft Edge settings via configuration profiles. Specifically, Intune can enforce the 'Installation of browser extensions' policy to restrict extension installation to IT administrators only, using the Administrative Templates for Edge within the Settings Catalog.

Answer

Conditional Access

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Entra ID Identity Protection

Question 8

A tenant administrator is advising a department that wants to automatically apply a label when sensitive customer identifiers are detected. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Auto-labeling for sensitivity labels. Auto-labeling for sensitivity labels in Microsoft Purview (formerly Microsoft 365 Compliance) can automatically apply a sensitivity label when sensitive customer identifiers are detected. It uses trainable classifiers or sensitive information types to identify content and then applies the label based on policies. This helps organizations protect data without manual intervention.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 9

A company is preparing for a merger and wants to prevent communication between the Human Resources and Research departments regarding sensitive salary data during the due diligence period. They need a Microsoft Purview solution that can block all email and chat between users in these two groups, as well as prevent file sharing in Teams and SharePoint. Which solution should they configure?

Accepted Answer

Information Barriers. Information Barriers (IB) in Microsoft Purview are specifically designed to prevent communication and collaboration between defined user groups, such as HR and Research, by blocking email, Teams chat, and SharePoint/OneDrive file sharing. This solution enforces policies at the transport and service level, ensuring that sensitive salary data is not inadvertently shared during the merger due diligence period.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity Labels

Answer

eDiscovery (Premium)

Question 10

A sales team frequently collaborates on proposals stored in Microsoft 365. They want to use an AI-powered tool to draft sections based on previous winning proposals. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Copilot for Microsoft 365. Microsoft Copilot for Microsoft 365 is the correct choice because it integrates large language models directly into the Microsoft 365 productivity apps, including Word, Excel, and PowerPoint. It can analyze existing content—such as previous winning proposals stored in SharePoint or OneDrive—and generate new draft sections based on that data, using natural language prompts. This makes it the ideal AI-powered tool for collaborative proposal writing.

Answer

Microsoft Syntex

Answer

Microsoft Viva Topics

Answer

Microsoft Power Automate

Question 11

A service owner is comparing Microsoft 365 capabilities and needs to provide desktop Office apps when email is hosted elsewhere. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Apps plan. The Microsoft 365 Apps plan (formerly Office 365 ProPlus) is a subscription-based licensing model that provides the full desktop versions of Office applications (Word, Excel, PowerPoint, etc.) without requiring email hosting from Microsoft. This makes it the correct choice for a service owner who needs desktop Office apps while email is hosted elsewhere, as it decouples Office from Exchange Online.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 12

A company uses a cloud service where they can provision virtual machines, install any operating system, and manage all software on those machines. The cloud provider is responsible for the physical hardware, data center security, and network infrastructure. Which cloud service model does this represent?

Accepted Answer

IaaS (Infrastructure as a Service). This scenario describes Infrastructure as a Service (IaaS) because the customer has full control over virtual machines, including the operating system and all installed software, while the cloud provider manages the underlying physical hardware, data center security, and network infrastructure. In IaaS, the provider offers virtualized computing resources over the internet, and the customer is responsible for everything above the hypervisor layer, such as OS patches, application configuration, and middleware.

Answer

PaaS (Platform as a Service)

Answer

SaaS (Software as a Service)

Answer

FaaS (Function as a Service)

Question 13

Which TWO Microsoft 365 apps can be used to create and edit documents collaboratively in real time? (Select exactly 2.)

Accepted Answer

Word for the web. Word for the web and OneNote for the web are both part of the Microsoft 365 web apps suite that support real-time co-authoring. They leverage the Office Online Server infrastructure and the Fluid Framework to allow multiple users to edit the same document simultaneously, with changes syncing via WebSocket connections and operational transforms.

Answer

Microsoft Teams

Answer

Outlook on the web

Answer

Access for the web

Question 14

Your company is adopting Microsoft 365 Copilot and wants to ensure that data security and compliance requirements are met. Which THREE considerations should be addressed? (Choose three.)

Accepted Answer

Configure policies in the Microsoft 365 admin center to manage Copilot features.. Option A is correct because the Microsoft 365 admin center is where administrators configure Copilot policies and controls, such as which users can access Copilot and how its features behave, which is essential for meeting security and compliance requirements. Option C is correct because sensitivity labels from Microsoft Purview Information Protection are honored by Microsoft 365 Copilot, so labeling content helps govern what data Copilot can surface and process, directly supporting data security and compliance. Option E is correct because Microsoft 365 Copilot does not have a separate compliance boundary; it inherits the compliance, security, and data-handling settings of the underlying Microsoft 365 services (for example, Purview, DLP, retention, and eDiscovery), so verifying this inheritance is a key consideration. Option B is not correct because disabling Copilot for all users is a drastic, non-granular response rather than a proper compliance consideration, and Copilot can be scoped or governed through policies instead. Option D is not correct because Copilot data is processed within the Microsoft 365 service boundary and follows the tenant's existing data residency commitments; there is no separate requirement to verify that Copilot stores data in the same geographic region as the tenant.

Answer

Disable Copilot for all users if any compliance requirement cannot be met.

Answer

Verify that data processed by Copilot is stored in the same geographic region as the tenant.

Question 15

A user receives a phishing email that bypasses the spam filter. The security team wants to report the email to Microsoft for analysis. Which Microsoft 365 Defender portal should they use?

Accepted Answer

Microsoft 365 Defender portal. The Microsoft 365 Defender portal (security.microsoft.com) is the correct destination for submitting user-reported phishing emails for analysis. It provides the Submissions page under Email & collaboration, where security teams can send suspicious messages directly to Microsoft for review, bypassing the spam filter's failure. This portal consolidates threat intelligence and automated investigation capabilities for email threats.

Answer

Exchange admin center

Answer

Azure portal

Answer

Microsoft Purview compliance portal