MS-900 Practice Test 40 — 15 Questions

Question 1

An organization uses Microsoft 365 and wants to automatically classify and protect sensitive data in SharePoint Online based on content patterns. Which Microsoft Purview solution should they implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Auto-labeling policies. Auto-labeling policies in Microsoft Purview can automatically apply sensitivity labels to documents in SharePoint Online based on sensitive information types or patterns, classifying and protecting data without manual intervention. Option B (Retention policies) is incorrect because they manage data retention and deletion, not classification. Option C (DLP policies) is incorrect because they detect and prevent data loss but do not automatically classify content. Option D (Trainable classifiers) is incorrect because they use AI to identify content based on examples, not automatic pattern-based classification.

Answer

Retention policies

Answer

Data Loss Prevention (DLP) policies

Answer

Trainable classifiers

Question 2

Your company wants to ensure that only managed and compliant devices can access Microsoft 365 resources. Which Microsoft 365 security feature enforces conditional access based on device compliance?

Accepted Answer

Microsoft Intune with Conditional Access in Microsoft Entra ID. Microsoft Intune manages device compliance policies (e.g., requiring encryption, antivirus, or a minimum OS version), and when integrated with Conditional Access in Microsoft Entra ID (formerly Azure AD), it enforces access decisions based on the device's compliance status. This ensures only managed and compliant devices can access Microsoft 365 resources, blocking or granting limited access to non-compliant devices.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Sentinel

Question 3

A company uses Microsoft 365 and wants to ensure that sensitive customer data in emails and documents is automatically classified and protected based on content. Which service should they implement?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides automated classification, labeling, and protection of sensitive data based on content inspection, such as credit card numbers or social security numbers, using trainable classifiers and sensitivity labels. This directly addresses the requirement to automatically classify and protect sensitive customer data in emails and documents within Microsoft 365.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender for Cloud Apps

Question 4

A company wants to use a cloud service that provides ready-to-use business applications such as email, collaboration, and customer relationship management without managing the underlying infrastructure. Which cloud service model is this?

Accepted Answer

Software as a Service (SaaS). (SaaS) is correct because Software as a Service delivers ready-to-use business applications like Microsoft 365 (Exchange Online for email, Teams for collaboration, Dynamics 365 for CRM) over the internet, with the provider managing all underlying infrastructure, including servers, storage, and networking. The customer simply accesses the software via a web browser or client app without any responsibility for patching, scaling, or hardware maintenance.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

Private cloud

Question 5

A company with 300 users currently has Microsoft 365 Business Premium licenses. They want to add the highest level of automated threat investigation and response capabilities for all users. Which licensing option should they purchase?

Accepted Answer

Add the Microsoft 365 Defender for Office 365 Plan 2 add-on for each user. Microsoft 365 Defender for Office 365 Plan 2 provides the highest level of automated investigation and response (AIR) capabilities, including threat hunting, automated remediation, and simulation training. Since the company already has Microsoft 365 Business Premium, which includes Defender for Office 365 Plan 1, adding Plan 2 as an add-on is the most cost-effective way to achieve the desired capabilities without upgrading to E5.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Add the Microsoft 365 E5 Security add-on for each user

Answer

Add the Microsoft 365 Business Premium Threat Protection add-on

Question 6

A sales manager needs a visual tool to track the sales pipeline with stages, deal values, and assigned team members. The team should be able to update the board in real time and see changes instantly. Which Microsoft 365 app is most suitable?

Accepted Answer

Microsoft Lists. Microsoft Lists is the most suitable app because it provides a customizable, real-time collaborative board view that can track sales pipeline stages, deal values, and assigned team members. Lists supports real-time co-authoring and instant updates via SharePoint, making it ideal for a visual, always-current sales tracking tool without requiring a full CRM system.

Answer

Microsoft Dynamics 365 Sales

Answer

Microsoft Planner

Answer

Microsoft Excel

Question 7

An administrator is reviewing a request from users who need to allocate Microsoft 365 license costs by department. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

User department attributes and license assignment records. User department attributes (e.g., the 'Department' field in Microsoft Entra ID) combined with license assignment records allow administrators to filter and report on license consumption by department. This is the standard method for cost allocation, as Microsoft 365 does not natively track license costs per department without custom reporting or PowerShell scripts that query the Get-AzureADUser and Get-MsolUser cmdlets.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Question 8

Which THREE Microsoft 365 services are part of the Microsoft Viva employee experience platform?

Accepted Answer

Viva Insights. Viva Insights (A) is a core Microsoft Viva module that uses Workplace Analytics and MyAnalytics data to surface productivity, wellbeing, and collaboration insights within Microsoft 365. Viva Connections (C) is the Viva gateway experience that surfaces company news, resources, and communities through a Teams app and SharePoint home site. Viva Learning (E) is the Viva module that aggregates learning content from LinkedIn Learning, Microsoft Learn, and third-party providers directly into the flow of work. SharePoint (B) and Microsoft Teams (D) are underlying Microsoft 365 services that Viva builds upon and integrates with, but they are not themselves Viva modules.

Answer

Microsoft SharePoint

Answer

Microsoft Teams

Question 9

A graphic designer needs to create a professional printed brochure with custom page layouts, text wrapping around images, and precise control over typography. Which Microsoft 365 app is designed for this type of desktop publishing task?

Accepted Answer

Microsoft Publisher. Microsoft Publisher is the correct choice because it is specifically designed for desktop publishing tasks such as creating professional brochures with custom page layouts, text wrapping around images, and precise typography control. Unlike general-purpose apps, Publisher offers advanced layout tools like master pages, baseline guides, and typographic controls that are essential for print-ready documents.

Answer

Microsoft Sway

Answer

Microsoft Word

Answer

Microsoft PowerPoint

Question 10

During a Microsoft 365 planning workshop, explain why Microsoft 365 is cloud-based despite local Office apps. Cloud concept or benefit best matches this requirement?

Accepted Answer

Cloud-hosted service backend. Microsoft 365 is considered cloud-based because its core services—such as Exchange Online, SharePoint Online, and the Microsoft 365 admin portal—are hosted and managed in Microsoft's cloud datacenters. Even though local Office apps (e.g., Word, Excel) run on the client device, they rely on a cloud-hosted service backend for licensing validation, data synchronization, and feature updates. This backend enables centralized management, automatic updates, and seamless integration with cloud services like OneDrive and Teams, which is the defining characteristic of a cloud-based platform.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 11

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Accepted Answer

Viva Learning. Viva Learning (A) is a core Microsoft Viva module that aggregates training content from LinkedIn Learning, Microsoft Learn, and other providers directly into the flow of work, so it is correctly part of the employee experience platform. Viva Insights (B) is also a Viva module, delivering productivity and wellbeing analytics, personal insights, and manager/leader insights derived from Microsoft Graph and collaboration data. Viva Connections (C) is the Viva gateway/experience app that surfaces company news, resources, and communities through a customizable dashboard in Microsoft Teams, making it a genuine Viva service. Microsoft Teams (D) is not part of Viva; it is the collaboration platform that hosts Viva Connections and other apps, but it is a separate Microsoft 365 service. Microsoft Stream (E) is likewise not a Viva module; it is Microsoft 365's enterprise video service, and while video content may appear within Viva Learning or Connections, Stream itself is not one of the Viva services.

Answer

Microsoft Teams

Answer

Microsoft Stream

Question 12

An administrator is reviewing a request from users who need to discover cloud apps being used by employees and assess their risk. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Defender for Cloud Apps. Microsoft Defender for Cloud Apps is the correct choice because it is a Cloud Access Security Broker (CASB) that provides visibility into cloud app usage, shadow IT discovery, and risk assessment. It integrates with Microsoft 365 to monitor user activities and apply data loss prevention (DLP) policies across sanctioned and unsanctioned cloud apps.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 13

A company runs a critical application on-premises but wants to extend capacity to the cloud during peak demand without purchasing additional hardware. Which cloud deployment model best describes this strategy?

Accepted Answer

Hybrid cloud. A hybrid cloud model combines on-premises infrastructure (private cloud) with public cloud resources, enabling a company to 'burst' into the public cloud during peak demand without purchasing additional hardware. This strategy, often called cloud bursting, allows the critical application to run locally under normal conditions and seamlessly extend capacity to a public cloud provider like Azure during spikes.

Answer

Public cloud

Answer

Private cloud

Answer

Multi-cloud

Question 14

A help desk lead is documenting the correct Microsoft 365 approach to require users to approve sign-ins with a mobile app after entering a password. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Multifactor authentication (MFA). Multifactor authentication (MFA) is the correct capability because it requires users to provide a second form of verification—such as approving a sign-in via the Microsoft Authenticator mobile app—after entering their password. This aligns with the security best practice of 'something you know' (password) plus 'something you have' (mobile device approval), which is a core MFA scenario in Microsoft Entra ID (formerly Azure AD).

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 15

While preparing a Microsoft 365 adoption plan, a consultant is asked to control who can purchase or change subscriptions. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Admin roles and billing permissions. The question asks about controlling who can purchase or change subscriptions, which is a billing and licensing administration task. Admin roles and billing permissions in Microsoft 365 allow you to delegate specific permissions, such as the Billing Administrator role, which grants the ability to make purchases, manage subscriptions, and handle support tickets. This directly addresses the requirement to restrict subscription changes to authorized personnel.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream