MS-900 Practice Test 48 — 15 Questions

Question 1

A user in your organization receives an email from an unknown sender with a link to a fake login page. The user reports it. You need to analyze the threat and check if other users received similar emails. Which Microsoft 365 Defender feature should you use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Threat Explorer (Explorer). Threat Explorer (Explorer) is the correct tool because it provides a real-time, interactive view of email threats, allowing you to search for and analyze specific messages (like the phishing link) across all users. You can use filters such as sender, recipient, or URL to determine if other users received the same malicious email, enabling rapid threat hunting and response.

Answer

Threat analytics

Answer

Attack simulation training

Answer

Automated investigation and response (AIR)

Question 2

Drag and drop the steps to assign a Microsoft 365 license to a user via the admin center into the correct order.

Accepted Answer

Step 1: Navigate to Users > Active users in the admin center. Step 2: Select the user. Step 3: Click on the 'Licenses and apps' tab. Step 4: Choose the desired license. Step 5: Save changes.. License assignment involves selecting the user, managing licenses, choosing the product, and saving.

Answer

Step 1: Select the user. Step 2: Navigate to Users > Active users in the admin center. Step 3: Click on 'Licenses and apps'. Step 4: Choose the license. Step 5: Save changes.

Answer

Step 1: Navigate to Users > Active users. Step 2: Click on 'Licenses and apps'. Step 3: Select the user. Step 4: Choose the license. Step 5: Save changes.

Answer

Step 1: Navigate to Users > Active users. Step 2: Select the user. Step 3: Choose the license. Step 4: Click on 'Licenses and apps'. Step 5: Save changes.

Question 3

A department asks for the Microsoft 365 service best suited for enterprise video publishing and town hall recordings. Which service should they use? The design must avoid adding custom operational scripts.

Accepted Answer

Microsoft Stream on SharePoint. Microsoft Stream on SharePoint is the correct service because it provides enterprise-grade video publishing and live event capabilities, including town hall recordings, directly integrated with SharePoint and Microsoft Teams. It leverages SharePoint's storage and permissions model, eliminating the need for custom operational scripts for video management.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Defender for Endpoint

Question 4

A project team needs a centralized location to store, share, and co-author documents while maintaining version history. Which Microsoft 365 service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it is designed as a centralized document management and storage platform that supports co-authoring, version history, and granular permission controls. Unlike personal storage services, SharePoint Online provides team-oriented libraries where multiple users can simultaneously edit documents while automatically tracking changes through versioning. This aligns directly with the requirement for a shared, collaborative repository with version history.

Answer

OneDrive for Business

Answer

Microsoft Teams

Answer

Microsoft Viva Topics

Question 5

An administrator is reviewing a request from users who need to explain why a newly licensed user may not access an app immediately. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

License provisioning may need time after assignment. When a Microsoft 365 license is assigned to a user, the provisioning of the associated services (e.g., Exchange Online, SharePoint Online) is not instantaneous. It typically takes from a few minutes up to 24 hours for the license to fully propagate and for the user to be able to access the licensed apps. This delay is a standard behavior in Microsoft 365's licensing and provisioning system, not a sign of a problem.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 6

A company needs to enforce that all documents marked as 'Confidential' are encrypted and cannot be printed. Which combination of Microsoft Purview features should they use?

Accepted Answer

Sensitivity labels with encryption and rights management. Sensitivity labels in Microsoft Purview can apply encryption and rights management (Azure Rights Management) directly to documents, and label policies can enforce protection settings such as 'do not print' and 'do not copy.' When a user labels a document 'Confidential,' the label can automatically encrypt it and restrict actions like printing, fulfilling both requirements in a single control.

Answer

Microsoft Entra ID Conditional Access and Intune app protection

Answer

Data Loss Prevention (DLP) policies and retention labels

Answer

eDiscovery (Premium) and Audit (Premium)

Question 7

Refer to the exhibit. You are reviewing a role definition in Microsoft Purview compliance portal. Which actions can a user assigned this role perform?

Accepted Answer

Manage compliance and data governance tasks in Microsoft Purview. The question refers to a role definition in the Microsoft Purview compliance portal. The Compliance Administrator role (or a custom role with equivalent permissions) is designed specifically to manage compliance and data governance tasks, such as data classification, data loss prevention (DLP), eDiscovery, and retention policies. Option A correctly identifies this scope, as Purview roles do not extend to identity management or security operations in other portals.

Answer

Manage user accounts in Microsoft Entra ID

Answer

Manage security settings in Microsoft Defender XDR

Answer

View only compliance reports without making changes

Question 8

A company has 50 users with Microsoft 365 Business Basic licenses. They need desktop versions of Office apps (Word, Excel, PowerPoint) and 1 TB of cloud storage per user. They do not need advanced security, device management, or analytics features. Which licensing upgrade is the most cost-effective?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard includes desktop versions of Office apps (Word, Excel, PowerPoint) and provides 1 TB of OneDrive cloud storage per user, meeting the stated requirements exactly. It is the most cost-effective upgrade from Business Basic because it adds these features without the advanced security, device management, or analytics capabilities found in higher-tier plans.

Answer

Microsoft 365 Business Premium

Answer

Microsoft 365 E3

Answer

Add an Office desktop apps add-on to Business Basic

Question 9

Which TWO components are part of Microsoft's Service Trust Portal?

Accepted Answer

Audit reports and compliance guides. Options A and C are correct. The Service Trust Portal provides compliance reports, audit reports, and trust documents. Options B, D, and E are not part of the Service Trust Portal; they are separate portals.

Answer

Azure portal

Answer

Microsoft Purview compliance portal

Answer

Microsoft 365 Defender portal

Question 10

A retail company experiences sudden traffic spikes during holiday sales. Which cloud characteristic would best help them handle this without overprovisioning?

Accepted Answer

Rapid elasticity. (Rapid elasticity) is correct because it enables cloud resources to automatically scale up or down to handle sudden traffic spikes without the need for overprovisioning. Option A (Broad network access) refers to accessibility over the network, not scaling. Option B (Measured service) is about metering and billing for usage. Option D (Resource pooling) involves multi-tenant sharing of resources.

Answer

Broad network access

Answer

Measured service

Answer

Resource pooling

Question 11

A company uses Microsoft 365 Business Premium and wants to enable secure remote access for employees using personal devices. Which Microsoft 365 app should they configure to enforce conditional access policies based on device compliance?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct answer because it is the Microsoft 365 app that provides mobile device management (MDM) and mobile application management (MAM). It allows administrators to define device compliance policies (e.g., requiring encryption, PIN, or a minimum OS version) and integrate those policies with Microsoft Entra ID (formerly Azure AD) Conditional Access. When a user attempts to access corporate resources from a personal device, Conditional Access checks the device's compliance status reported by Intune before granting access.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 12

A legal team is involved in a court case and needs to identify all emails and documents related to a specific project across the entire organization. They need to place these items on hold to prevent deletion or modification. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Standard). EDiscovery (Standard), is correct because it is specifically designed for legal discovery processes, allowing authorized users to search for content across Exchange Online, SharePoint Online, OneDrive for Business, and Teams. It can place a legal hold on identified items to preserve them from deletion or modification, which directly meets the legal team's requirement to identify and hold all emails and documents related to a specific project.

Answer

Data Loss Prevention (DLP)

Answer

Audit (Standard)

Answer

Communication Compliance

Question 13

A company's CFO is pleased that they only pay for the compute and storage resources consumed each month, with no upfront hardware costs. This billing model is a direct result of which cloud computing characteristic?

Accepted Answer

Measured service. The CFO's observation that the company only pays for consumed compute and storage resources with no upfront hardware costs directly reflects the 'measured service' characteristic of cloud computing. Measured service means cloud providers meter resource usage (e.g., CPU hours, GB-months of storage) and bill based on actual consumption, typically using a pay-as-you-go model. This eliminates the need for capital expenditure on hardware, as costs are operational and tied to usage metrics.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 14

A project team needs a centralized workspace that includes a shared calendar, a document library for storing deliverables, a task list with assignments, and the ability to have threaded discussions about each item. They want a solution that is available out of the box in Microsoft 365 and integrates with Microsoft Teams. Which service should they use?

Accepted Answer

SharePoint team site. A SharePoint team site provides a centralized workspace with a shared calendar, document library, task list, and threaded discussions out of the box, and it integrates natively with Microsoft Teams (each team is backed by a SharePoint site). This matches all stated requirements without custom development. Microsoft Teams is a collaboration hub but relies on SharePoint for file storage and doesn't natively provide a document library or task list as standalone features.

Answer

Microsoft Teams

Answer

Microsoft Viva Engage

Answer

Microsoft Planner

Question 15

An administrator is reviewing a request from users who need to reduce maintenance of power, cooling, and server replacement. Cloud concept or benefit best matches this requirement?

Accepted Answer

Reduced data center management. The users' requirement to reduce maintenance of power, cooling, and server replacement directly maps to the cloud benefit of reduced data center management. By moving to a cloud model, the cloud provider assumes responsibility for the physical infrastructure, including hardware lifecycle, environmental controls, and facility upkeep, allowing the organization to offload these operational burdens.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels