MS-900 Practice Test 49 — 15 Questions

Question 1

A company with 75 users needs desktop Office apps and cloud services but has no advanced security requirement. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is designed for small to medium businesses (up to 300 users) and includes desktop Office apps (Word, Excel, PowerPoint, Outlook) plus cloud services like Exchange Online, SharePoint, Teams, and OneDrive. It meets the requirement of 75 users needing desktop apps and cloud services without advanced security. Other options either lack desktop apps or are not full productivity suites.

Answer

Microsoft Defender for Cloud only

Answer

Azure Virtual Desktop only

Answer

A free personal Microsoft account only

Question 2

A company wants to use a cloud service where they only manage their data and user access, while the cloud provider handles everything from the physical infrastructure to the applications. Which cloud service model is this?

Accepted Answer

Software as a Service (SaaS). This scenario describes Software as a Service (SaaS), where the cloud provider manages the entire stack—physical infrastructure, operating system, middleware, runtime, data, and applications—while the customer only manages their data and user access. In SaaS, the provider delivers fully functional applications over the internet, such as Microsoft 365, where users simply log in and use the software without any infrastructure or platform management responsibilities.

Answer

Infrastructure as a Service (IaaS)

Answer

Platform as a Service (PaaS)

Answer

On-premises deployment

Question 3

A help desk lead is documenting the correct Microsoft 365 approach to web/mobile Office apps, business email, Teams, OneDrive, and SharePoint, but not desktop Office apps. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Business Basic. The question describes a scenario requiring web/mobile Office apps, business email, Teams, OneDrive, and SharePoint—but explicitly excludes desktop Office apps. Microsoft 365 Business Basic is the correct plan because it includes all these services (Exchange Online for email, Teams, SharePoint Online, OneDrive for Business, and web/mobile versions of Office apps) without including the desktop Office applications, making it the most relevant licensing concept.

Answer

Microsoft Stream

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Question 4

An organization uses Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on data the user has permission to access. Which principle does this enforce?

Accepted Answer

Least privilege. Microsoft 365 Copilot respects the permissions of the signed-in user, meaning it only surfaces data the user already has access to. This enforces the principle of least privilege by ensuring users cannot use Copilot to access information beyond their authorized scope. It does not grant new access; it inherits existing access controls.

Answer

Defense in depth

Answer

Segregation of duties

Answer

Zero Trust

Question 5

A company uses Microsoft 365 E3 and wants to implement a collaboration solution that allows multiple users to co-author documents in real time, track version history, and set permissions at the document level. Which THREE Microsoft 365 services can fulfill these requirements?

Accepted Answer

SharePoint Online. SharePoint Online (A) is correct because it provides document libraries with real-time co-authoring in Office apps, built-in version history, and item-level (document-level) permissions via SharePoint groups and unique permission inheritance breaks. OneDrive for Business (B) is correct because it is built on the same SharePoint document library engine, so it also supports real-time co-authoring, version history, and per-file sharing permissions for individual users. Microsoft Teams (C) is correct because its Files tab is backed by SharePoint Online or OneDrive, enabling real-time co-authoring, version tracking, and document-level permission management directly within team and channel contexts. Exchange Online (D) is incorrect because it is a mail, calendaring, and messaging service, not a document collaboration or permission platform. Yammer (E) is incorrect because it is an enterprise social networking service for conversations and communities, not a document co-authoring or version-control solution.

Answer

Exchange Online

Answer

Yammer

Question 6

During requirements gathering, an IT manager says the organization must allow a junior admin to read tenant configuration without making changes. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Global Reader. The Global Reader role in Microsoft Entra ID (formerly Azure AD) is specifically designed for read-only access to tenant configuration and settings across Microsoft 365 services. It allows a junior admin to view all administrative settings without the ability to make any changes, directly matching the requirement for read-only tenant configuration access.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 7

A user is trying to access Microsoft 365 services but is prompted for additional verification via a phone call. Which Microsoft 365 feature is enforcing this?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that enforces Conditional Access policies. When a user is prompted for additional verification via a phone call, it means a Conditional Access policy requiring multi-factor authentication (MFA) has been triggered. Entra ID evaluates the sign-in risk, user location, or device compliance and then invokes MFA through the Microsoft Authenticator service, which can deliver a phone call as one of the verification methods.

Answer

Microsoft Purview

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Question 8

Refer to the exhibit. An administrator is configuring a new Azure subscription with this ARM template snippet for Microsoft Defender for Cloud. What will be the immediate result?

Accepted Answer

The subscription will be monitored for security issues and receive recommendations. The ARM template snippet enables Microsoft Defender for Cloud at the subscription level. By default, this activates the foundational Cloud Security Posture Management (CSPM) capabilities, which continuously assess the subscription's resources against security baselines and generate actionable security recommendations. This does not automatically onboard VMs to Defender for Endpoint or apply the highest security tier; it simply enables monitoring and recommendations.

Answer

All virtual machines will be automatically onboarded to Microsoft Defender for Endpoint

Answer

The subscription will be protected by the highest security tier

Answer

No changes will occur until a security policy is manually created

Question 9

A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID passwordless authentication. Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 10

Which TWO of the following are required to implement Microsoft Entra ID Conditional Access?

Accepted Answer

Microsoft Entra ID P1 or P2 licenses. Conditional Access requires Microsoft Entra ID P1 or P2 licenses and roles that allow policy management. MFA and Intune are not required for all policies.

Answer

Microsoft 365 E5 license

Answer

Multifactor Authentication enabled for all users

Answer

Microsoft Intune subscription

Question 11

A service owner is comparing Microsoft 365 capabilities and needs to maintain a personal checklist that syncs across devices and integrates with Outlook tasks. Microsoft 365 app or service is the best fit?

Accepted Answer

Microsoft To Do. Microsoft To Do is the best fit because it provides a personal checklist that syncs across devices via Exchange Online and integrates natively with Outlook tasks. This allows the service owner to manage tasks from any device and see them directly within the Outlook task pane, fulfilling both requirements precisely.

Answer

Microsoft Forms

Answer

Microsoft Purview Audit

Answer

Microsoft Planner

Question 12

A public relations team needs to create an interactive, visually rich newsletter that includes embedded video and dynamic content from a SharePoint list. Which app should they use?

Accepted Answer

Sway. Sway is the correct choice because it is designed specifically for creating interactive, visually rich newsletters that can embed videos and dynamically pull content from SharePoint lists using its integration with Microsoft 365. Unlike other apps, Sway offers a responsive design canvas that adapts to different devices and allows embedding of multimedia elements directly, making it ideal for a public relations team's needs.

Answer

PowerPoint

Answer

SharePoint News

Answer

Microsoft Stream

Question 13

Which THREE Microsoft 365 services are included in the Enterprise Mobility + Security (EMS) suite?

Accepted Answer

Microsoft Intune. Microsoft Intune is a core component of Enterprise Mobility + Security (EMS) because it provides cloud-based mobile device management (MDM) and mobile application management (MAM) using the OMA-DM protocol. It enforces conditional access policies and allows IT to manage devices and applications without requiring on-premises infrastructure, directly aligning with EMS's goal of securing and managing endpoints.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Question 14

A department asks for the Microsoft 365 service best suited for task tracking using boards and buckets. Which service should they use?

Accepted Answer

Microsoft Planner. Microsoft Planner is the correct service because it provides task tracking using boards and buckets, which are core features of its Kanban-style project management interface. This aligns directly with the department's request for organizing tasks visually, making it the appropriate Microsoft 365 app for lightweight project coordination.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Purview Compliance Manager

Question 15

A department asks for the Microsoft 365 service best suited for Teams channel conversations and meetings. Which service should they use?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct service because it is specifically designed to host channel-based conversations and meetings within Microsoft 365. Teams provides persistent chat channels, audio/video conferencing, and meeting scheduling, directly fulfilling the department's request.

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Purview Compliance Manager