MS-900 Practice Questions 2 — 50 Questions

Question 1

A company wants to use a cloud service where they can develop and run applications without managing the underlying infrastructure, including servers, operating systems, or storage. They only need to upload their code and the provider handles scaling and availability. Which cloud service model best describes this approach?

Accepted Answer

Platform as a Service (PaaS). Platform as a Service (PaaS) provides a managed hosting environment where developers can deploy applications without worrying about the underlying infrastructure. The provider automatically handles server provisioning, OS patching, storage management, and scaling based on demand. In this scenario, the company only needs to upload code, which is the defining characteristic of PaaS.

Answer

Infrastructure as a Service (IaaS)

Answer

Software as a Service (SaaS)

Answer

On-premises deployment

Question 2

A company wants to run a workload that requires the highest level of physical security and control over hardware. They have the budget to purchase and maintain their own data center. Which cloud deployment model should they choose?

Accepted Answer

Private cloud. A private cloud deployment model is correct because it provides dedicated infrastructure for a single organization, offering the highest level of physical security and full control over hardware. This model allows the company to purchase, own, and manage its own data center, ensuring compliance with stringent security requirements and complete hardware isolation.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 3

A company moves its on-premises servers to a cloud provider. The provider supplies the physical hardware, networking, and storage. The company installs and manages the operating system and applications on the virtual machines. Which cloud service model does this scenario represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the cloud provider supplies the physical hardware, networking, and storage, while the customer retains full control over the operating system and applications. In IaaS, the provider manages the underlying infrastructure (e.g., hypervisor, physical servers, network switches), and the customer is responsible for the guest OS, middleware, and application stack. This aligns with the shared responsibility model where the customer handles OS patching, application configuration, and data management.

Answer

Platform as a Service (PaaS)

Answer

Software as a Service (SaaS)

Answer

Function as a Service (FaaS)

Question 4

A company with 300 users currently has Microsoft 365 Business Premium licenses. They want to add the highest level of automated threat investigation and response capabilities for all users. Which licensing option should they purchase?

Accepted Answer

Add the Microsoft 365 Defender for Office 365 Plan 2 add-on for each user. Microsoft 365 Defender for Office 365 Plan 2 provides the highest level of automated investigation and response (AIR) capabilities, including threat hunting, automated remediation, and simulation training. Since the company already has Microsoft 365 Business Premium, which includes Defender for Office 365 Plan 1, adding Plan 2 as an add-on is the most cost-effective way to achieve the desired capabilities without upgrading to E5.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Add the Microsoft 365 E5 Security add-on for each user

Answer

Add the Microsoft 365 Business Premium Threat Protection add-on

Question 5

A company is planning to purchase Microsoft 365 subscriptions. They want to follow the recommended process. Which of the following sequences correctly represents the order of steps from start to finish?

Accepted Answer

Assess needs, Choose subscription, Add licenses, Assign licenses. The recommended process begins with assessing organizational needs (e.g., number of users, required features), then choosing the appropriate subscription plan, adding the required number of licenses to the tenant, assigning those licenses to individual users, and finally provisioning the services (which happens automatically after license assignment). The correct order is: Assess needs, Choose subscription, Add licenses, Assign licenses.

Answer

Choose subscription, Assess needs, Assign licenses, Add licenses

Answer

Add licenses, Assign licenses, Assess needs, Choose subscription

Answer

Assess needs, Add licenses, Choose subscription, Assign licenses

Question 6

Which cloud computing characteristic allows a company to access resources like storage and databases from any device with an internet connection without needing to manage the physical infrastructure?

Accepted Answer

Broad network access. Broad network access is the correct answer because it describes the ability to access cloud resources (such as storage and databases) over the network via standard protocols (e.g., HTTP/HTTPS, SMB, NFS) from any device (laptop, smartphone, tablet) with an internet connection, without requiring the customer to manage the underlying physical infrastructure. This characteristic is defined by NIST SP 800-145 as 'capabilities are available over the network and accessed through standard mechanisms that promote use by heterogeneous thin or thick client platforms.'

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling

Question 7

A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?

Accepted Answer

Microsoft Entra ID passwordless authentication. Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.

Answer

Microsoft Planner

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 8

A company with 100 users wants to provide all users with Microsoft Teams and cloud file storage, but only the sales team of 20 users needs access to Dynamics 365. Which licensing approach is most cost-effective?

Accepted Answer

Purchase Microsoft 365 Business Basic for all 100 users and Dynamics 365 Sales Professional for the 20 sales users.. Microsoft 365 Business Basic includes Teams and SharePoint for all users at a low cost. Adding Dynamics 365 Sales Professional licenses only for the sales team minimizes expense. Business Premium is more expensive, E3 is also pricier, and Business Central is an ERP not a CRM. Hence, the correct approach is Business Basic plus Dynamics 365 Sales for the sales team.

Answer

Purchase Microsoft 365 Business Premium for all 100 users.

Answer

Purchase Microsoft 365 E3 for all 100 users and add Dynamics 365 for the sales team.

Answer

Purchase Microsoft 365 Business Basic for all users and Dynamics 365 Business Central for the 20 sales users.

Question 9

A company needs to ensure that all email and document content is preserved for legal purposes, even if users permanently delete items. This requirement demands that content be kept indefinitely until the legal hold is released. Which Microsoft 365 feature should they enable?

Accepted Answer

Litigation hold. Litigation hold is the correct feature because it preserves all mailbox and document content in its original state indefinitely until the hold is explicitly released. Unlike a retention policy, which can delete content after a specified period, Litigation hold ensures that even permanently deleted items are retained in the Recoverable Items folder, meeting the legal preservation requirement.

Answer

Retention policy

Answer

eDiscovery

Answer

Data Loss Prevention (DLP)

Question 10

A company uses a cloud service where administrators can add or remove virtual machine instances through a web portal without contacting the provider. The provider bills only for the exact resources consumed. Which cloud computing characteristic does this scenario best demonstrate?

Accepted Answer

On-demand self-service. On-demand self-service allows users to provision compute capabilities without requiring human interaction with the service provider. Measured service refers to metering resource usage; rapid elasticity is about scaling; resource pooling is about multi-tenancy. The combination of self-provisioning and usage-based billing points primarily to on-demand self-service.

Answer

Rapid elasticity

Answer

Measured service

Answer

Resource pooling

Question 11

A communications manager wants to create an interactive monthly newsletter that includes embedded videos, images, and links to SharePoint documents. The newsletter should be viewable on any device without needing to install an app. Which Microsoft 365 app is best suited for this?

Accepted Answer

Microsoft Sway. Microsoft Sway is a presentation and storytelling app designed to create interactive, web-based content that can include multimedia such as videos, images, and embedded links. It adjusts automatically to any screen size and is accessible via a browser without installation. PowerPoint is mainly for slideshows and offline viewing. SharePoint is a document management and collaboration platform, not a content authoring tool. Stream is a video service, not suitable for a newsletter.

Answer

Microsoft PowerPoint

Answer

Microsoft SharePoint

Answer

Microsoft Stream

Question 12

A company has a mix of full-time employees and contractors. Full-time employees need Microsoft 365 desktop apps, email, and cloud storage. Contractors only need email and cloud storage. Which licensing approach is the most cost-effective?

Accepted Answer

Assign Microsoft 365 Business Basic to contractors and Microsoft 365 Business Standard to full-time employees. Microsoft 365 Business Basic provides web and mobile versions of Office apps, email (Exchange Online), and cloud storage (OneDrive/SharePoint) — sufficient for contractors who don't need desktop apps. Microsoft 365 Business Standard includes the full desktop Office suite plus the same email and storage, meeting the needs of full-time employees. This pairing avoids paying for desktop app licenses for contractors, making it the most cost-effective approach.

Answer

Assign Microsoft 365 Business Standard to both groups

Answer

Assign Microsoft 365 Apps for business to contractors and Microsoft 365 Business Standard to full-time employees

Answer

Assign Microsoft 365 Business Premium to full-time employees and Microsoft 365 Business Basic to contractors

Question 13

A company wants to run a critical application that requires dedicated hardware to comply with regulatory isolation requirements. However, they want to avoid the upfront cost of building their own data center. Which cloud deployment model meets these needs?

Accepted Answer

Private cloud. A private cloud is the correct deployment model because it provides dedicated hardware and infrastructure for a single organization, ensuring regulatory isolation without requiring the company to build and maintain its own on-premises data center. In Azure, a private cloud can be implemented via Azure Stack Hub or Azure VMware Solution, which run in the customer's own environment or a dedicated hosted environment, meeting compliance needs while avoiding upfront capital expenditure.

Answer

Public cloud

Answer

Hybrid cloud

Answer

Community cloud

Question 14

A company has 150 users with Microsoft 365 Business Basic licenses. They now need to manage mobile devices using Microsoft Intune for all users. They want to keep costs as low as possible and do not want to upgrade to a more expensive plan if an add-on is available. What is the most cost-effective licensing strategy?

Accepted Answer

Add Microsoft Intune licenses for all users. Microsoft Intune is available as a standalone add-on license for Microsoft 365 Business Basic, Business Standard, and other plans. By purchasing the Microsoft Intune license per user, the company can add device management capabilities to their existing Business Basic subscriptions without paying for other unnecessary features. Upgrading to Business Premium or E3 would include Intune but also many other features, increasing cost.

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Upgrade all users to Microsoft 365 E3

Answer

Purchase Microsoft 365 Enterprise Mobility + Security E3 add-on

Question 15

A company wants to move its IT infrastructure to the cloud but must keep all customer data within a specific geographic region due to data residency laws. They also want to avoid paying for large upfront hardware costs. Which cloud characteristic best supports this need?

Accepted Answer

Geographic distribution (regional data centers). Option A is correct because geographic distribution refers to cloud providers operating multiple data centers across different regions, enabling customers to choose a specific region to store data and comply with data residency laws. This characteristic directly addresses the requirement to keep customer data within a specific geographic region while avoiding upfront hardware costs, as the cloud provider owns and manages the infrastructure.

Answer

Elasticity

Answer

High availability

Answer

Self-service

Question 16

A compliance-aware administrator is selecting the right Microsoft 365 capability to check known incidents affecting Microsoft 365 services. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Service health. Service health in the Microsoft 365 admin center provides real-time status and historical incident information for all Microsoft 365 services, including known incidents, advisories, and post-incident reports. This is the correct tool for a compliance-aware administrator to check known incidents affecting services, as it directly aligns with monitoring service availability and reliability under the support domain.

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Question 17

A company with 75 users needs desktop Office apps and cloud services but has no advanced security requirement. Which option best matches the requirement?

Accepted Answer

Microsoft 365 Business Standard. The correct option matches the stated licensing, administration, or support requirement.

Answer

Microsoft Defender for Cloud only

Answer

Azure Virtual Desktop only

Answer

A free personal Microsoft account only

Question 18

A compliance officer needs to automatically classify and protect documents stored in SharePoint Online that contain personal data such as passport numbers. The classification should happen without user intervention and must apply encryption and access restrictions. Which Microsoft Purview solution should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling (Option B) are the correct solution because they can automatically classify documents based on patterns like passport numbers using trainable classifiers or exact data match (EDM), and then apply encryption and access restrictions via the label's protection settings—all without user intervention. This meets the compliance officer's requirement for automatic classification and protection of personal data in SharePoint Online.

Answer

Data Loss Prevention (DLP) policy

Answer

eDiscovery (Standard)

Answer

Communication Compliance

Question 19

A compliance officer needs to automatically classify documents stored in SharePoint Online that contain personally identifiable information (PII) such as social security numbers. The classification must apply a sensitivity label that encrypts the document and restricts access to only employees in the Legal department. The process should run without any user interaction. Which Microsoft Purview solution should be configured?

Accepted Answer

Microsoft Purview Information Protection with auto-labeling. Option C is correct because Microsoft Purview Information Protection with auto-labeling can automatically detect PII (e.g., social security numbers) in documents stored in SharePoint Online and apply a sensitivity label that encrypts the content and restricts access to the Legal department. This process runs without user interaction, meeting the compliance officer's requirement for automatic classification and protection.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Insider Risk Management

Question 20

A company has 500 users with Microsoft 365 E3 licenses. They need to add Communication Compliance and Insider Risk Management for all users. They want to minimize additional costs while retaining their existing E3 subscriptions. What is the most cost-effective licensing approach?

Accepted Answer

Purchase the Microsoft 365 E5 Compliance add-on for all users. Microsoft 365 E5 Compliance is an add-on license for E3 that provides Communication Compliance, Insider Risk Management, and other advanced compliance features. Upgrading all users to E5 is more expensive if the advanced security features of E5 are not needed. The E5 eDiscovery and Audit add-on does not include Communication Compliance or Insider Risk Management. Business Premium plans are not compatible with enterprise E3 subscriptions and lack these features.

Answer

Upgrade all users to Microsoft 365 E5

Answer

Purchase the Microsoft 365 E5 eDiscovery and Audit add-on

Answer

Replace E3 with Microsoft 365 Business Premium