MS-900 Practice Test 42 — 15 Questions

Question 1

Which TWO of the following are features of Microsoft Purview that help organizations meet compliance requirements for data lifecycle management? (Choose two.)

Accepted Answer

Retention policies. Retention policies (A) are a core Microsoft Purview capability that let organizations keep or delete content for a defined period, directly supporting data lifecycle management by governing how long data is retained and when it is disposed of. Records management (C) extends this by letting organizations declare content as records, apply retention and disposition rules (including event-based retention and regulatory records), and manage the full lifecycle of high-value or regulated data. Together, A and C are the Purview features specifically designed for lifecycle governance from creation through disposal. eDiscovery (Premium) (B) focuses on identifying, preserving, collecting, and reviewing content for legal investigations rather than lifecycle retention. Insider Risk Management (D) detects and mitigates risky user activity, and Data Loss Prevention policies (E) prevent sharing of sensitive data in motion — neither governs retention or disposition of data over its lifecycle.

Answer

eDiscovery (Premium)

Answer

Insider Risk Management

Answer

Data Loss Prevention (DLP) policies

Question 2

An administrator is reviewing a request from users who need to let support staff troubleshoot without tenant-wide change permissions. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Assign least-privileged support or reader roles. The scenario requires granting support staff the ability to troubleshoot without tenant-wide change permissions, which directly maps to the principle of least privilege. In Microsoft 365, this is achieved by assigning a role like Helpdesk Administrator or a reader role (e.g., Global Reader), which provides read-only or limited administrative access without allowing modifications to tenant-wide settings. This aligns with the 'Describe Microsoft 365 pricing and support' domain, specifically the support and admin concepts.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 3

A healthcare organization is using Microsoft 365 and needs to ensure that patient data (protected health information) is not accidentally shared externally. They want to classify all documents containing medical terms and apply automatic encryption when shared outside the organization. Which two Microsoft Purview features should they combine? (Select TWO)

Accepted Answer

Sensitivity labels with auto-labeling based on trainable classifiers. Sensitivity labels with auto-labeling based on trainable classifiers can automatically detect and classify documents containing medical terminology (PHI) without manual tagging. DLP policies with encryption actions then enforce protection by automatically encrypting those labeled documents when they are shared externally. Together they provide detection (classification) and enforcement (encryption) for PHI.

Answer

Insider Risk Management policies

Answer

Communication Compliance policies

Answer

Microsoft Entra ID Conditional Access policies

Question 4

A help desk lead is documenting the correct Microsoft 365 approach to delegate SharePoint and OneDrive administration without full tenant control. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

SharePoint Administrator. The SharePoint Administrator role in Microsoft 365 provides delegated administration for SharePoint and OneDrive without granting full tenant-wide control. This role allows management of site collections, sharing policies, and storage limits while excluding access to other workloads like Exchange or Microsoft Entra ID. It is the correct choice for the help desk lead's requirement.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 5

Which three options are valid support options available to Microsoft 365 subscribers? (Choose three.)

Accepted Answer

Administrative support via the Microsoft 365 admin center for all paying subscribers.. Community forums monitored by Microsoft experts and MVPs are a valid support option for Microsoft 365 subscribers, providing peer-to-peer assistance with expert oversight. Self-help resources, including online documentation and guided troubleshooting, are available to all subscribers as a first-line support channel. Administrative support via the Microsoft 365 admin center is included for all paying subscribers, allowing them to create service requests for billing, account, and technical issues.

Answer

Dedicated phone support available 24/7 for all subscription plans.

Answer

In-person on-site support included with every Business Premium subscription.

Answer

Unlimited access to premier support engineers for all plans.

Question 6

A user needs to co-author a Word document stored in Microsoft SharePoint Online with external partners who do not have Microsoft 365 licenses. What must the administrator enable?

Accepted Answer

External sharing in SharePoint Online. External sharing in SharePoint Online must be enabled at the tenant or site level to allow users to share documents with external partners who lack Microsoft 365 licenses. This setting controls the ability to send sharing invitations or generate shareable links for people outside the organization, which is the prerequisite for co-authoring with unlicensed external users.

Answer

Azure AD B2B collaboration

Answer

Anonymous access links for documents

Answer

Guest access in Microsoft Teams

Question 7

Your company wants to run a phishing simulation to test employee awareness. Which Microsoft 365 tool can you use to create and launch a simulated phishing campaign?

Accepted Answer

Microsoft Defender for Office 365 Attack Simulation Training. Microsoft Defender for Office 365 includes Attack Simulation Training, a feature specifically designed to create and launch simulated phishing campaigns. It provides realistic phishing emails, landing pages, and training assignments to educate users. This tool is part of the Threat Protection suite and is accessible via the Microsoft 365 Defender portal. It allows administrators to select payloads, target users, and schedule simulations, then review results and assign training.

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Intune

Answer

Microsoft Purview Compliance Manager

Question 8

A compliance administrator needs to ensure that any document containing a patient's health information (e.g., medical record number) is automatically encrypted and restricted to authorized users. The encryption should be enforced regardless of where the document is saved (SharePoint, OneDrive, or email). Which Microsoft Purview feature should they configure?

Accepted Answer

Auto-labeling policies with sensitivity labels. Auto-labeling policies with sensitivity labels are the correct choice because they can automatically apply encryption and access restrictions to documents containing sensitive data like medical record numbers, regardless of where the document is saved (SharePoint, OneDrive, or email). Sensitivity labels support persistent protection that travels with the file, enforcing encryption and authorized user restrictions even when the file is moved or copied. This meets the requirement for automatic, location-independent encryption and access control.

Answer

Information Rights Management (IRM)

Answer

Data Loss Prevention (DLP) policies

Answer

Retention labels

Question 9

Which TWO of the following are key benefits of using Microsoft Purview Information Protection? (Choose two.)

Accepted Answer

It enables organizations to meet compliance requirements by applying protection.. Microsoft Purview Information Protection (MIP) enables organizations to meet compliance requirements by applying protection labels that enforce encryption, access restrictions, and visual markings (e.g., headers/footers) on sensitive data. This directly supports regulatory frameworks like GDPR, HIPAA, and ISO 27001 by ensuring data is protected both at rest and in transit across Microsoft 365 services.

Answer

It automatically detects and blocks phishing emails.

Answer

It manages device compliance with Conditional Access.

Answer

It provides backup and recovery for SharePoint Online.

Question 10

A tenant administrator is advising a department that wants to web/mobile Office apps, business email, Teams, OneDrive, and SharePoint, but not desktop Office apps. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic is the subscription that includes web and mobile versions of Office apps, business email (Exchange Online), Teams, OneDrive, and SharePoint, but excludes the desktop Office applications. That matches the department's requirement exactly. Business Standard and Premium would include desktop apps, which the department explicitly does not want.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 11

A cloud provider offers a service where customers can provision virtual machines, storage, and networks on-demand through a web portal. The customer is responsible for patching the guest operating system. Which cloud service model best describes this offering?

Accepted Answer

Infrastructure as a Service (IaaS). (Infrastructure as a Service) because the customer provisions fundamental compute, storage, and networking resources on-demand, and retains control over the guest OS, including patching. In IaaS, the provider manages only the physical infrastructure (hypervisor, networking, storage hardware), while the customer is responsible for the OS and applications, matching the scenario exactly.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Desktop as a Service (DaaS)

Question 12

A startup wants to focus only on developing and deploying its application code without managing underlying servers or operating systems. Which cloud service model best fits this need?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) is the correct choice because it abstracts the underlying infrastructure, including servers, operating systems, and runtime environments, allowing the startup to focus solely on developing and deploying application code. With PaaS, the cloud provider manages the OS patching, hardware scaling, and middleware, while the customer only manages the application and data. This directly matches the requirement of not managing servers or operating systems.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 13

A compliance-aware administrator is selecting the right Microsoft 365 capability to delete content automatically after a defined retention period. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Retention policy or retention label. Retention policies and retention labels are the Microsoft 365 compliance capabilities designed to automatically delete content after a defined retention period. They enforce data lifecycle management by applying rules to content in Exchange, SharePoint, OneDrive, and Teams, ensuring compliance with regulatory requirements. Microsoft Forms, Planner, and Stream are productivity or collaboration tools, not compliance capabilities for automated deletion.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Stream

Question 14

A company uses Microsoft 365 E5. They want to implement a solution to automatically classify and protect sensitive data in emails and documents. Which THREE Microsoft Purview features should they use?

Accepted Answer

Sensitivity labels. Sensitivity labels are correct because they allow organizations to classify and protect sensitive data by applying encryption, markings, and access restrictions directly to emails and documents. Auto-labeling policies extend this by automatically applying sensitivity labels based on conditions like sensitive information types or patterns, ensuring consistent protection without manual user intervention. Data Loss Prevention (DLP) policies are correct because they detect and prevent accidental sharing of sensitive data by enforcing rules on email and document transmission, such as blocking or warning when sensitive content is detected.

Answer

Retention policies

Answer

eDiscovery

Question 15

A multinational company must comply with the General Data Protection Regulation (GDPR). They need to be able to search for and delete personal data of a user upon request (right to erasure). Which Microsoft Purview solution should they use?

Accepted Answer

Microsoft Purview eDiscovery (Premium). Microsoft Purview eDiscovery (Premium) supports searching across Microsoft 365 workloads for personal data and applying holds or deletions to satisfy data subject requests, including the GDPR right to erasure. It provides case management, review sets, and the ability to purge content, which are the capabilities needed to locate and delete a user's personal data on request.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Purview Communication Compliance

Answer

Microsoft Purview Insider Risk Management