MS-900 Practice Test 46 — 15 Questions

Question 1

During a Microsoft 365 planning workshop, let users reset forgotten passwords without calling the help desk. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Self-service password reset (SSPR). Self-service password reset (SSPR) is the correct Microsoft 365 capability because it allows users to reset their own forgotten passwords without requiring help desk intervention. SSPR is part of Microsoft Entra ID (formerly Azure Active Directory) and enforces security through multi-factor authentication verification before allowing a password change. This directly addresses the requirement to reduce help desk calls while maintaining identity security.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 2

A helpdesk team needs to provide remote assistance to users by viewing and controlling their Windows devices. Which Microsoft 365 service enables this?

Accepted Answer

Microsoft Intune Remote Help. Remote Help via Intune allows support personnel to remotely view and control devices. Teams screen sharing is less secure. Quick Assist is not integrated. Windows 365 is a cloud PC.

Answer

Microsoft Teams screen sharing

Answer

Windows 365

Answer

Microsoft Quick Assist

Question 3

A company is adopting Microsoft 365 and wants to ensure they can investigate security incidents across email, endpoints, and identities in a unified console. Which Microsoft 365 workload should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified console for investigating security incidents across email, endpoints, and identities. It correlates alerts from Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps into a single incident queue, enabling cross-domain threat hunting and automated response.

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Answer

Microsoft Purview Compliance Portal

Question 4

A security administrator needs to review all sign-in attempts and identify suspicious login patterns for the past 30 days. Which Microsoft 365 portal should they use to access this information?

Accepted Answer

Microsoft Entra ID sign-in logs. Microsoft Entra ID sign-in logs provide a detailed record of all sign-in attempts, including successful and failed logins, IP addresses, applications used, and risk detections. This data can be filtered and analyzed to identify suspicious patterns such as multiple failed attempts or sign-ins from unusual locations over the past 30 days, making it the correct choice for a security administrator.

Answer

Microsoft Purview compliance portal

Answer

Microsoft 365 admin center

Answer

Microsoft Defender for Cloud Apps

Question 5

A user reports receiving a phishing email that bypassed Exchange Online Protection (EOP). You need to investigate the threat and automate a response across email, endpoints, and identities. Which Microsoft 365 security solution should you use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that correlates signals across email, endpoints, and identities. When a phishing email bypasses Exchange Online Protection (EOP), Defender XDR can automatically trigger an investigation and response (e.g., remediating the email, isolating the affected endpoint, and resetting the compromised user's credentials) through its automated incident response and playbooks, leveraging data from Defender for Office 365, Defender for Endpoint, and Microsoft Entra ID Protection.

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Office 365

Answer

Microsoft Defender for Endpoint

Question 6

Which TWO Microsoft 365 services can be used to create and manage chatbots that use AI to answer user questions?

Accepted Answer

Microsoft Copilot Studio. Microsoft Copilot Studio (formerly Power Virtual Agents) is a low-code platform for creating conversational AI chatbots that can answer user questions using natural language processing and generative AI. It integrates with Microsoft 365 and allows you to build, test, and deploy chatbots without extensive coding.

Answer

Microsoft Forms

Answer

Microsoft Viva Topics

Answer

Microsoft Power Automate

Question 7

Which THREE of the following are key pillars of the Microsoft Trusted Cloud? (Choose three.)

Accepted Answer

Security. The Microsoft Trusted Cloud is built on three foundational pillars: Security, Privacy, and Compliance. Option C (Security) is correct because Microsoft protects customer data using defense-in-depth measures such as encryption, identity controls, and threat detection across its cloud services. Option D (Privacy) is correct because Microsoft commits to being transparent about data collection and usage, giving customers control over their data and not using it for advertising without consent. Option E (Compliance) is correct because Microsoft maintains a broad portfolio of certifications and attestations (e.g., ISO 27001, SOC, GDPR, HIPAA) so customers can meet their own regulatory obligations. Options A (Cost optimization) and B (Performance) are not pillars of the Trusted Cloud; they are general cloud benefits addressed by tools like Azure Cost Management and Azure Monitor, but they are not part of the trust framework.

Answer

Cost optimization

Answer

Performance

Question 8

Which TWO Microsoft 365 apps use AI to assist users with content creation?

Accepted Answer

Microsoft PowerPoint with Copilot. Microsoft PowerPoint with Copilot and Microsoft Word with Copilot are correct because Copilot in these apps leverages large language models (LLMs) integrated with the Microsoft Graph to generate, summarize, and refine content directly within the document or presentation. In PowerPoint, Copilot can create entire slide decks from a prompt or natural language outline, while in Word, it can draft text, rewrite paragraphs, or summarize documents, both using AI to assist users in content creation.

Answer

Microsoft Viva Insights

Answer

Microsoft Excel with Copilot

Answer

Microsoft Teams with Copilot

Question 9

Which TWO Microsoft 365 services provide real-time co-authoring in documents?

Accepted Answer

SharePoint Online. SharePoint Online is correct because it supports real-time co-authoring in Word, Excel, and PowerPoint documents stored in SharePoint document libraries, leveraging the Office Online server infrastructure and the WebDAV protocol for simultaneous edits by multiple users.

Answer

Microsoft Teams

Answer

Microsoft Lists

Answer

Exchange Online

Question 10

A sales team uses Microsoft 365 and wants to track customer interactions and manage leads from within Outlook. Which app should they use?

Accepted Answer

Microsoft Dynamics 365 Sales. Microsoft Dynamics 365 Sales is a customer relationship management (CRM) application that integrates directly with Outlook to track customer interactions, manage leads, and automate sales processes. It provides a unified interface within Outlook for viewing contact history, logging emails, and managing opportunities, making it the correct choice for the sales team's requirements.

Answer

Microsoft Lists

Answer

Microsoft Bookings

Answer

Microsoft Forms

Question 11

A company wants to run a workload that requires the highest level of physical security and control over hardware. They have the budget to purchase and maintain their own data center. Which cloud deployment model should they choose?

Accepted Answer

Private cloud. A private cloud deployment model is correct because it provides dedicated infrastructure for a single organization, offering the highest level of physical security and full control over hardware. This model allows the company to purchase, own, and manage its own data center, ensuring compliance with stringent security requirements and complete hardware isolation.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 12

A hospital uses Microsoft 365 and needs to comply with HIPAA by ensuring that patient health information in emails is encrypted both in transit and at rest. Which Microsoft 365 feature should they enable?

Accepted Answer

Office 365 Message Encryption. Office 365 Message Encryption (OME) is the correct feature because it provides built-in encryption for emails both in transit (via TLS) and at rest (via Azure Rights Management), ensuring that patient health information (PHI) remains protected and compliant with HIPAA requirements. OME integrates with Azure Information Protection to apply persistent encryption that travels with the email, regardless of where it is stored.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Intune

Answer

Microsoft Purview Data Lifecycle Management

Question 13

Refer to the exhibit. A device management report from Microsoft Intune shows a device with non-compliant status. Which action should the administrator take to bring the device into compliance?

Accepted Answer

Enable BitLocker encryption. The device is marked non-compliant because Intune's compliance policy requires BitLocker encryption on Windows devices. Enabling BitLocker satisfies that policy requirement, allowing the device to report as compliant on its next check-in.

Answer

Force a check-in

Answer

Remediate jailbreak status

Answer

Install antivirus software

Question 14

Which THREE Microsoft 365 services are included in Microsoft 365 E3 that are NOT in Microsoft 365 Business Basic?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is included in Microsoft 365 E3 but not in Microsoft 365 Business Basic. Business Basic only includes Exchange Online, Teams, and web/mobile versions of Office apps, with no data classification or rights management capabilities. E3 adds full Purview features like sensitivity labels and encryption for compliance and data loss prevention.

Answer

Exchange Online

Answer

Microsoft Teams

Question 15

A user receives a suspicious email with a link. They report it using the built-in Microsoft 365 reporting tool. Which service will analyze the reported message?

Accepted Answer

Microsoft Defender for Office 365. Microsoft Defender for Office 365 (MDO) includes the built-in reporting tool that allows users to report suspicious emails directly from Outlook. When a user submits a message via this tool, it is automatically routed to the Microsoft 365 Defender portal's Submissions page, where it is analyzed by MDO's threat protection engines, including detonation in the sandbox environment for URLs and attachments. This analysis determines whether the message is malicious, spam, or a false positive, and updates the tenant's filtering policies accordingly.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Answer

Microsoft Defender XDR