MS-900 Practice Test 41 — 15 Questions

Question 1

A compliance officer needs to ensure that any document containing passport numbers automatically gets a 'Highly Confidential' label and is encrypted when saved in SharePoint. The labeling should occur without any user interaction. Which Microsoft Purview feature should they configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Auto-labeling policy for sensitivity labels. Auto-labeling policies in Microsoft Purview can automatically apply a sensitivity label (e.g., 'Highly Confidential') to documents containing passport numbers when saved in SharePoint, without any user interaction. This is achieved by configuring a policy that uses sensitive info types (e.g., 'Passport Number') to detect the data and then automatically apply the label and encryption. The labeling occurs at rest, triggered by document upload or modification, meeting the compliance officer's requirement for zero user intervention.

Answer

Manual labeling using the Office apps

Answer

Retention labels with DLP policy

Answer

Trainable classifiers

Question 2

Which of the following are included as part of Microsoft 365 E3 or E5 subscriptions? Choose all that apply. (There are four correct answers.)

Accepted Answer

Microsoft Teams. Microsoft 365 E3 and E5 subscriptions include Microsoft Teams as a core collaboration service, Exchange Online with a 100 GB mailbox and unlimited archive storage via auto-expanding archiving, Windows 10/11 Enterprise E3 for device management and security, and Microsoft Defender for Office 365 (in E5, and as an add-on for E3 but included in the E5 suite). These are standard components of the enterprise-grade plans.

Answer

Microsoft 365 Personal (single user) license

Answer

Azure Active Directory Premium P1 only (not P2)

Question 3

An administrator needs to assign Microsoft 365 licenses to new users in bulk. They have a CSV file with user details and want to use a script. Which tool should they use?

Accepted Answer

Microsoft Graph PowerShell. Microsoft Graph PowerShell is the correct tool because it provides cmdlets like `New-MgUser` and `Set-MgUserLicense` that can process a CSV file and assign licenses in bulk via the Microsoft Graph API. This is the modern, scriptable approach for automating license assignments without manual steps in a GUI.

Answer

Microsoft 365 admin center

Answer

Azure CLI

Answer

Exchange admin center

Question 4

Which TWO Microsoft 365 services provide capabilities for insider risk management?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management (option B) is a dedicated service that uses machine learning and behavioral analytics to detect, investigate, and respond to risky user activities such as data theft, policy violations, or unauthorized access. It correlates signals from Microsoft 365 logs, HR data, and user behavior to identify potential insider threats, making it the primary tool for insider risk management.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender XDR

Question 5

A sales team needs to track leads, manage customer contact information, record interactions, and automate follow-up email sequences. Which Microsoft 365 app should they use as the primary platform?

Accepted Answer

Microsoft Dynamics 365 Sales. Microsoft Dynamics 365 Sales is a customer relationship management (CRM) application specifically designed to manage leads, track customer contact information, record interactions, and automate sales processes such as follow-up email sequences. It provides built-in lead scoring, opportunity management, and workflow automation that directly match the sales team's requirements, making it the correct primary platform.

Answer

Microsoft Power Automate

Answer

Microsoft SharePoint

Answer

Microsoft Teams

Question 6

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Accepted Answer

Microsoft Defender for Office 365 Plan 2. Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Defender for Office 365 Plan 1

Question 7

A user reports that they cannot access a SharePoint site that contains sensitive data. The administrator confirms the user is licensed and the site permissions are correct. What should the administrator check next?

Accepted Answer

Conditional Access policies in Microsoft Entra ID. Conditional Access policies in Microsoft Entra ID are evaluated at sign-in and can block access to SharePoint Online based on user, device, location, or risk conditions — even when licensing and site permissions are correct. If the user's device is non-compliant, from an untrusted location, or the user fails an MFA requirement, Conditional Access will deny access to the SharePoint resource, which matches the symptom described.

Answer

Microsoft Defender for Office 365 Safe Attachments

Answer

Microsoft Purview retention policies

Answer

Microsoft Intune device compliance policies

Question 8

Which THREE are core pillars of the Microsoft Trust Center?

Accepted Answer

Compliance. The Microsoft Trust Center is built on three core pillars: Security, Privacy, and Compliance. Option D (Security) is correct because Microsoft's trust framework centers on protecting customer data through encryption, identity controls, and threat protection across its cloud services. Option E (Privacy) is correct because Microsoft commits to being transparent about data collection and giving customers control over their data through privacy statements and data subject rights. Option A (Compliance) is correct because the Trust Center provides compliance offerings, audit reports, and certifications (such as ISO 27001, SOC, and GDPR resources) that demonstrate adherence to regulatory standards. Option B (Reliability) is not one of the three pillars; while reliability is an important service quality, it is not part of the Trust Center's core trust pillars. Option C (Transparency) is also not one of the three pillars; transparency is a principle Microsoft emphasizes within its privacy and security practices, but it is not listed as a standalone core pillar of the Trust Center.

Answer

Reliability

Answer

Transparency

Question 9

Which TWO apps are included in Microsoft Viva?

Accepted Answer

Viva Connections. Viva Connections is a core app within Microsoft Viva that provides a personalized employee experience dashboard, integrating company news, resources, and tasks directly into Microsoft Teams. Viva Insights is another core app that offers data-driven privacy-protected insights to help employees improve productivity and well-being. Both are explicitly part of the Microsoft Viva employee experience platform.

Answer

Microsoft Stream

Answer

Microsoft Teams

Answer

Microsoft Power Automate

Question 10

An organization has users who frequently collaborate on documents across departments. They want to ensure that when a document is shared with external partners, the external users must authenticate using Azure AD credentials and cannot download or print the document. Which combination of Microsoft 365 features should they use?

Accepted Answer

SharePoint external sharing with 'Specific people' and Microsoft Purview Information Protection with 'View Only' permission. SharePoint 'Specific people' external sharing restricts access to explicitly invited users who must authenticate with Microsoft Entra ID credentials, while Microsoft Purview Information Protection's 'View Only' permission prevents downloading, printing, and copying of the document. This combination meets both requirements: enforced authentication and restricted document actions.

Answer

Microsoft Teams guest access and Microsoft Defender for Cloud Apps session policies

Answer

OneDrive sharing settings with 'Anyone' links and Microsoft Purview Data Loss Prevention

Answer

SharePoint anonymous sharing links and Microsoft Purview Sensitivity Labels

Question 11

An e-commerce website hosted on a cloud provider automatically adds more virtual machines to handle increased traffic during Black Friday and removes them after the event. Which cloud characteristic does this illustrate?

Accepted Answer

Rapid elasticity. Rapid elasticity is the cloud characteristic that enables resources to scale out (add VMs) automatically in response to demand spikes like Black Friday traffic, and scale in (remove VMs) when demand subsides. This is distinct from manual scaling because it happens automatically and dynamically, often using autoscaling policies tied to metrics such as CPU utilization or request count.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Measured service

Question 12

A company with 300 users is choosing between Microsoft 365 Business Premium and Microsoft 365 E3. They need desktop Office apps, email, Teams, and basic device management (including Microsoft Intune). They do not need advanced compliance or analytics. Which plan is more cost-effective?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium is the most cost-effective choice because it includes desktop Office apps, Exchange Online email, Teams, and Microsoft Intune for basic device management, all for a lower per-user price than E3. The company's stated needs (no advanced compliance or analytics) align perfectly with Business Premium's feature set, making E3's additional capabilities unnecessary and more expensive.

Answer

Microsoft 365 E3

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 F3

Question 13

Which THREE are features of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. Auto-labeling for sensitive data (A) is a core Microsoft Purview Information Protection feature that uses trainable classifiers and sensitive information types to automatically apply sensitivity labels to content at rest or in transit. Encryption for emails and documents (B) is provided through sensitivity labels, which can enforce Azure Rights Management (Azure RMS) encryption so that only authorized users can decrypt protected content. Sensitivity labels (E) are the foundational capability of Information Protection, allowing classification and protection settings (encryption, content marking, and restrictions) to travel with the data. Data loss prevention policies (C) belong to Microsoft Purview Data Loss Prevention, a separate workload that detects and blocks risky sharing, and retention policies (D) belong to Microsoft Purview Data Lifecycle Management for retaining or deleting content, so neither is a feature of Information Protection itself.

Answer

Data loss prevention policies

Answer

Retention policies

Question 14

A business stakeholder asks how Microsoft 365 can help them check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and incident information for all Microsoft 365 services. It allows administrators and stakeholders to check known incidents, advisories, and historical uptime data, directly addressing the need to monitor service availability.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 15

A small business with 10 employees needs desktop versions of Office apps (Word, Excel, PowerPoint), business-class email, and the ability to host online meetings with up to 250 attendees. They also require basic device management to enforce security policies on company-owned devices. They do not need advanced analytics or compliance features. Which Microsoft 365 plan is most suitable?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium is the most suitable plan because it includes desktop versions of Office apps (Word, Excel, PowerPoint), business-class email via Exchange Online, Microsoft Teams for hosting online meetings with up to 250 attendees, and Intune for basic device management to enforce security policies on company-owned devices. This plan uniquely combines the required productivity, communication, and security management features without the advanced analytics or compliance capabilities that would be unnecessary for this small business.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 Apps for Business