MS-900 Practice Test 43 — 15 Questions

Question 1

Your organization is migrating from on-premises Exchange to Exchange Online. You need to ensure that email communications comply with regulatory requirements for retention. Which Microsoft 365 feature should you use to define retention periods for emails?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Microsoft Purview retention policies. Microsoft Purview retention policies are used to define how long email and other content are retained and when they are deleted, ensuring compliance with regulatory requirements. They apply at the workload level and can be scoped to specific users or locations, making them the correct tool for setting retention periods for Exchange Online emails.

Answer

Microsoft Purview eDiscovery cases

Answer

Exchange Online journaling

Answer

Exchange Online litigation hold

Question 2

While preparing a Microsoft 365 adoption plan, a consultant is asked to identify risky user behaviour such as unusual downloads or policy violations. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management is the correct capability because it is specifically designed to identify, detect, and act on risky user behaviors such as unusual downloads, data leaks, and policy violations. It uses machine learning models and predefined indicators to correlate user activities (e.g., mass file downloads, unauthorized sharing) with risk signals, enabling organizations to investigate and mitigate insider threats. This aligns directly with the consultant's need to monitor and address risky behavior in a Microsoft 365 adoption plan.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 3

A company deploys Microsoft 365 Business Premium. The IT team wants to enable employees to sign in using a mobile app without passwords. Which app should they configure?

Accepted Answer

Microsoft Authenticator. Microsoft Authenticator is the correct app because it enables passwordless sign-in for Microsoft 365 Business Premium users via FIDO2-based phone sign-in or number matching. It allows employees to authenticate using biometrics or a PIN, eliminating the need for a password during sign-in.

Answer

Microsoft Intune

Answer

Microsoft Entra ID

Answer

Microsoft Copilot

Question 4

A compliance team needs to implement a Data Loss Prevention (DLP) policy to protect credit card information. What is the correct order of steps for a successful implementation?

Accepted Answer

Identify locations, Create policy, Deploy in production, Monitor alerts and refine. A successful DLP implementation starts with discovery: identifying where sensitive data such as credit card numbers actually resides across email, SharePoint, OneDrive, and endpoints. Only after locations are known can a policy be scoped correctly, deployed in production (often after a test/simulation mode), and then monitored and refined based on alerts and false positives. This order prevents blind deployment and reduces business disruption.

Answer

Create policy, Identify locations, Deploy in production, Monitor alerts and refine

Answer

Deploy in production, Monitor alerts and refine, Identify locations, Create policy

Answer

Identify locations, Deploy in production, Create policy, Monitor alerts and refine

Question 5

A company's e-commerce website experiences a sudden surge in traffic during a promotional event. The cloud infrastructure automatically adds additional virtual servers to handle the load and removes them when traffic subsides, without any manual intervention from the IT team. Which cloud computing characteristic does this demonstrate?

Accepted Answer

Rapid elasticity. The scenario describes the cloud infrastructure automatically scaling virtual servers up and down in response to traffic changes, which is the defining characteristic of rapid elasticity. This capability allows resources to be provisioned and released elastically, often automatically, to match demand at any given time, as defined by NIST SP 800-145.

Answer

On-demand self-service

Answer

Resource pooling

Answer

Measured service

Question 6

A help desk lead is documenting the correct Microsoft 365 approach to track compliance assessments and improvement actions. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Purview Compliance Manager. Microsoft Purview Compliance Manager is the correct tool because it provides a centralized dashboard for tracking compliance assessments, managing improvement actions, and monitoring regulatory compliance posture. It integrates with Microsoft 365 services to automate risk assessments and generate detailed reports for standards like ISO 27001, SOC 2, and GDPR.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 7

A sales manager wants to create a visual representation of the sales pipeline, including stages, deal values, and win probability. They want to share this interactive chart with the team via a web link that updates automatically from the underlying data in Microsoft Lists. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Power BI. Power BI is Microsoft's dedicated business intelligence and data visualization service, designed to build interactive dashboards and reports from data sources such as Microsoft Lists, Excel, and SharePoint. It supports automatic refresh schedules and can publish reports to a web link (Publish to web) that updates as the underlying data changes. This directly satisfies the sales manager's requirement for an interactive, auto-updating pipeline visualization.

Answer

Microsoft Excel

Answer

Microsoft Forms

Answer

Microsoft SharePoint

Question 8

A compliance officer wants to automatically encrypt outgoing emails containing credit card numbers and also prevent recipients from forwarding or copying the content. Which Microsoft Purview solution should be applied?

Accepted Answer

Sensitivity label with encryption and rights management. Sensitivity labels with encryption and rights management (Azure Rights Management) allow you to apply persistent protection that encrypts the email and restricts actions like forwarding, copying, or printing. This meets both requirements: automatic detection of credit card numbers via auto-labeling policies and enforcement of usage restrictions through Rights Management templates (e.g., Do Not Forward).

Answer

Data Loss Prevention (DLP) policy with encryption

Answer

Microsoft Information Bar

Answer

Azure Information Protection unified labeling client

Question 9

An organization wants to ensure that only compliant devices can access Microsoft 365 resources. They use Microsoft Intune for device management. Which policy should they configure?

Accepted Answer

Create a Conditional Access policy in Microsoft Entra ID. Conditional Access in Microsoft Entra ID is the policy engine that evaluates signals (user, device, location, app) and enforces access controls such as 'require compliant device' before granting access to Microsoft 365 resources. Intune supplies the device compliance state, but it is Conditional Access that actually blocks non-compliant devices from reaching the resource. This is the only option that enforces the access decision at authentication time.

Answer

Enable device enrollment in Intune

Answer

Create a compliance policy in Intune

Answer

Create a device configuration policy in Intune

Question 10

A business stakeholder asks how Microsoft 365 can help them use hosted email without managing mail servers. Cloud concept or benefit best matches this requirement?

Accepted Answer

Software as a Service (SaaS). Microsoft 365 delivers hosted email (Exchange Online) as a Software as a Service (SaaS) offering, where Microsoft manages the mail servers, patches, and infrastructure. The stakeholder simply uses the service via a web browser or client without any server administration. This aligns with the SaaS model, which provides ready-to-use applications over the internet.

Answer

Platform as a Service (PaaS)

Answer

Community cloud

Answer

Infrastructure as a Service (IaaS)

Question 11

A sales team wants to maintain a shared list of high-priority leads with custom columns for company name, contact person, deal value, and stage. Team members need to update the list in real time and view the change history. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Lists. Microsoft Lists is the M365 app purpose-built for shared, structured lists with custom columns, real-time co-authoring, and built-in version history. It supports column types such as text, choice, person, currency, and date, and integrates with Teams and SharePoint. This matches the sales team's need for a shared, editable lead tracker with change history.

Answer

Microsoft Excel

Answer

Microsoft SharePoint

Answer

Microsoft Teams

Question 12

A help desk lead is documenting the correct Microsoft 365 approach to build a simple mobile app for field workers to submit inspection results. Microsoft 365 app or service is the best fit?

Accepted Answer

Power Apps. Power Apps is the correct choice because it is a low-code platform specifically designed for building custom mobile apps that integrate with Microsoft 365 data sources, such as SharePoint, Dataverse, or SQL. Field workers can submit inspection results through a tailored app with forms, business logic, and offline capabilities, making it ideal for this scenario.

Answer

Microsoft Planner

Answer

Microsoft Purview Audit

Answer

Microsoft Forms

Question 13

An administrator is reviewing a request from users who need to create a team site with document libraries, version history, permissions, and news pages. Microsoft 365 app or service is the best fit?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it provides team sites with document libraries, version history, granular permissions, and news pages as core features. These capabilities are built into SharePoint's site architecture, allowing administrators to create collaboration spaces with full control over content management and access.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Purview Audit

Question 14

An organization wants to monitor and respond to security incidents across their Microsoft 365 environment, including email, endpoints, and cloud apps. Which solution should they deploy?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified extended detection and response solution that correlates signals across email (Defender for Office 365), endpoints (Defender for Endpoint), identities (Defender for Identity), and cloud apps (Defender for Cloud Apps). It provides a single portal for monitoring and responding to security incidents across the Microsoft 365 environment, making it the correct choice.

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Office 365

Question 15

Drag and drop the steps to reset a user's password in Microsoft 365 admin center into the correct order.

Accepted Answer

1. Go to Users > Active users in Microsoft 365 admin center. 2. Select the user whose password needs resetting. 3. Click Reset password in the user's details pane. 4. Enter and confirm the new password, then click Reset.. The correct order to reset a user's password in Microsoft 365 admin center is to first navigate to Users > Active users, then select the user, click Reset password, and finally enter and confirm the new password. This sequence ensures the proper workflow for password management.

Answer

1. Select the user whose password needs resetting. 2. Go to Users > Active users in Microsoft 365 admin center. 3. Click Reset password in the user's details pane. 4. Enter and confirm the new password, then click Reset.

Answer

1. Click Reset password in the user's details pane. 2. Go to Users > Active users in Microsoft 365 admin center. 3. Select the user whose password needs resetting. 4. Enter and confirm the new password, then click Reset.

Answer

1. Enter and confirm the new password. 2. Go to Users > Active users in Microsoft 365 admin center. 3. Select the user whose password needs resetting. 4. Click Reset password.