MS-900 Practice Test 38 — 15 Questions

Question 1

A multinational corporation uses Microsoft 365 E5 and wants to implement a retention policy that automatically deletes emails in users' mailboxes after 7 years, except for emails from the legal department which must be retained indefinitely. Which approach should the admin use?

Accepted Answer

Create a default retention policy for 7 years and use auto-labeling for legal department emails. Option C is correct because it uses a retention policy with a 7-year deletion period for all content, then overrides that for legal department emails via auto-labeling with a 'retain indefinitely' label. This ensures that only legal emails are preserved forever while all other emails are automatically purged after 7 years, meeting the compliance requirement without manual intervention.

Answer

Apply a litigation hold to all mailboxes and a retention policy to delete after 7 years

Answer

Configure Exchange Online archive policies to move emails after 7 years

Answer

Use Microsoft Purview eDiscovery to manually delete emails after 7 years

Question 2

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Answer

SharePoint Online

Answer

Microsoft Lists

Answer

Excel Online

Question 3

You are configuring Microsoft Entra ID Protection policies for your organization. The exhibit shows a configuration snippet. Which behavior will occur when a user signs in from a known malicious IP address?

Accepted Answer

The sign-in will be blocked immediately.. Option A is correct because the sign-in risk policy is enabled with risk level 'high' and blockAccess set to true, so a sign-in from a malicious IP (high risk) will be blocked. Option B is wrong because the user risk policy does not block (blockAccess false). Option C is wrong because the policy is configured to block, not just require MFA. Option D is wrong because no password reset is triggered.

Answer

The user's account will be disabled.

Answer

The user will be prompted to change their password.

Answer

The sign-in will be allowed but a multi-factor authentication challenge will be required.

Question 4

A company uses Microsoft 365 Business Premium. A user reports that when they try to access a file in SharePoint Online, they receive an error that the file is blocked by policy. The IT admin needs to identify which policy is blocking the file. Which tool should the admin use?

Accepted Answer

Microsoft Purview Data Loss Prevention policies. Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to detect and block the sharing or access of sensitive information, such as credit card numbers or personally identifiable information, in Microsoft 365 services like SharePoint Online. When a file is blocked with a 'blocked by policy' error, it is typically because a DLP rule has matched the file's content and applied an action to restrict access. The admin can use the Microsoft Purview compliance portal to review DLP policy matches and identify the exact rule that triggered the block.

Answer

Microsoft Intune compliance policies

Answer

Microsoft Entra ID Conditional Access policies

Answer

Microsoft Defender for Cloud Apps session policies

Question 5

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Accepted Answer

Microsoft Defender for Office 365 Plan 2. Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Defender for Office 365 Plan 1

Question 6

A user needs to collaborate on a document with colleagues in real time, but the document must be stored on a local network server due to regulatory requirements. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft OneDrive. Option C is correct because Microsoft OneDrive supports real-time co-authoring via its sync client and web interface, but crucially, when used with 'Files On-Demand' and local sync, the actual file can be stored on a local network server if the user syncs a SharePoint document library that resides on-premises via a cloud hybrid configuration. However, the question specifies the document must be stored on a local network server due to regulatory requirements; OneDrive for Business can sync files from a local server if the organization uses a cloud hybrid setup with SharePoint Server, but the core scenario is that OneDrive allows offline access and real-time collaboration while the authoritative copy remains on-premises. This meets the regulatory need for local storage while enabling real-time co-authoring.

Answer

Microsoft SharePoint

Answer

Microsoft Word (desktop)

Answer

Microsoft Teams

Question 7

A company wants to enable its sales team to automatically generate meeting summaries and action items from Microsoft Teams conversations. Which Microsoft 365 app or feature provides this capability?

Accepted Answer

Microsoft Copilot for Microsoft 365. Option A is correct because Microsoft Copilot for Microsoft 365 uses AI to summarize meetings and generate action items. Option B is wrong because Microsoft Viva Insights provides productivity analytics but not meeting summaries. Option C is wrong because Microsoft Stream hosts videos. Option D is wrong because Microsoft Forms creates surveys.

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 8

Your organization is migrating from on-premises Exchange to Exchange Online. You need to ensure that users can access their mailboxes using Outlook for Windows without re-entering credentials each time. Which Microsoft 365 service should you configure to enable single sign-on (SSO) and modern authentication?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides single sign-on (SSO) and modern authentication (OAuth 2.0, OpenID Connect) for Exchange Online. When configured, Outlook for Windows can use the Microsoft Entra ID token to authenticate silently, eliminating the need for users to re-enter credentials each time they access their mailbox.

Answer

Microsoft Intune

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Question 9

A healthcare organization is adopting Microsoft 365 and must meet compliance requirements: retain all communications for 7 years, prevent accidental deletion of documents, and classify sensitive data automatically. Which THREE Microsoft Purview features should the organization use?

Accepted Answer

Auto-labeling. Auto-labeling (Option C) is correct because it enables the organization to automatically classify sensitive data based on content patterns (e.g., healthcare records, PII) without manual intervention. This aligns directly with the requirement to classify sensitive data automatically, using trainable classifiers or sensitive info types in Microsoft Purview.

Answer

Data loss prevention (DLP) policies

Answer

eDiscovery

Question 10

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection and surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes with automatic data collection into Excel Online. It provides a simple interface for designing forms, distributing them, and analyzing responses in real time, making it the primary tool for this task in Microsoft 365.

Answer

Microsoft Lists

Answer

Excel Online

Answer

SharePoint Lists

Question 11

Which THREE Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage data lifecycle and retention?

Accepted Answer

Records Management. Records Management (B) is correct because it enables organizations to declare records, apply retention labels, and manage the disposition of content in a defensible manner. It is a core Purview feature for managing the data lifecycle, ensuring that records are retained for the required period and then disposed of appropriately.

Answer

Sensitivity Labels

Answer

Data Loss Prevention

Question 12

A company is planning to deploy Microsoft 365 and needs to meet the following requirements: enable secure remote access to on-premises applications, provide a unified search experience across SharePoint and external data sources, and allow users to create custom dashboards from multiple data sources. Which TWO Microsoft 365 services should the company use?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy (option B) enables secure remote access to on-premises web applications by publishing them through Azure AD, using pre-authentication and application-layer security without requiring a VPN. Power BI (option D) allows users to create custom dashboards and reports from multiple data sources, including SharePoint, SQL databases, and cloud services, meeting the requirement for custom dashboards from diverse data.

Answer

Microsoft Loop

Answer

Microsoft Search

Answer

Microsoft Forms

Question 13

A company uses Microsoft 365 Business Premium. All users have Microsoft 365 E3 licenses, but the IT team wants to enforce conditional access policies to require multifactor authentication (MFA) for all external access to SharePoint Online. Which service should they use to create and manage these policies?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides Conditional Access policies, which can require MFA for external access to SharePoint Online. These policies are evaluated at authentication time based on signals like user location, device state, and application, and they are independent of the underlying Microsoft 365 license (E3 or Business Premium).

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 14

Tailwind Traders is a small business with 50 users. They use Microsoft 365 Business Basic. They need to: (1) Create a central repository for company news and policies that all employees can access; (2) Set up a shared calendar for company events; (3) Enable employees to participate in online meetings with screen sharing; (4) Provide a simple way to collect feedback from customers via forms. Which combination of Microsoft 365 services meets these requirements?

Accepted Answer

SharePoint Online, Exchange Online, Microsoft Teams, Microsoft Forms. SharePoint Online can host a news and policies site. Exchange Online includes shared calendars. Microsoft Teams enables online meetings with screen sharing. Microsoft Forms allows collecting customer feedback. Microsoft Stream is for video, not forms.

Answer

SharePoint Online, Exchange Online, Microsoft Stream, Microsoft Forms

Answer

OneDrive, Exchange Online, Microsoft Teams, Microsoft Forms

Answer

SharePoint Online, Microsoft Teams, Microsoft Stream, Microsoft Forms

Question 15

Adventure Works is a non-profit with 200 users. They use Microsoft 365 for Nonprofits. They need to: (1) Restrict access to sensitive donor information to only specific users; (2) Automatically archive emails older than 5 years; (3) Allow volunteers to access shared files from their personal devices without enrolling them in device management; (4) Use AI to summarize long email threads and suggest replies. Which Microsoft 365 services or features should they use?

Accepted Answer

Sensitivity labels, Exchange Online archiving, SharePoint Online, Microsoft Copilot for Microsoft 365. Microsoft Purview sensitivity labels can restrict access to sensitive data. Exchange Online archiving can archive emails older than 5 years. SharePoint Online allows external sharing with expiration and permissions, without device enrollment. Microsoft Copilot for Microsoft 365 provides AI email summaries and suggested replies. Microsoft Intune requires device enrollment, which is not desired.

Answer

Sensitivity labels, Exchange Online in-place hold, SharePoint Online, Microsoft Editor

Answer

Microsoft Purview Data Loss Prevention, Exchange Online archiving, Microsoft Teams, Microsoft Copilot for Microsoft 365

Answer

Azure Information Protection, Exchange Online retention policies, OneDrive, Microsoft Copilot for Microsoft 365