MS-900 Practice Questions 2 — 50 Questions

Question 1

A company is evaluating moving its on-premises infrastructure to a cloud environment. They want a service that provides virtual machines, storage, and networking capabilities while retaining full control over the operating system and applications. Which cloud service model best meets this requirement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources, including virtual machines, storage, and networking, over the internet. The customer retains full administrative control over the operating system, applications, and middleware, while the cloud provider manages the underlying physical hardware. This matches the requirement for full OS and application control.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Private Cloud

Question 2

A marketing team needs to create a visually compelling newsletter that can be distributed via email and viewed in a browser. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Sway. Microsoft Sway is the correct choice because it is specifically designed for creating interactive, web-based newsletters and presentations that can be easily shared via a link and viewed in any browser. Unlike traditional desktop publishing tools, Sway uses a responsive design canvas that automatically adapts to different screen sizes, making it ideal for email distribution and browser viewing without requiring recipients to download attachments.

Answer

Microsoft Publisher

Answer

Microsoft PowerPoint

Answer

Microsoft Word

Question 3

Refer to the exhibit. What is the purpose of the 'classification' property in this Microsoft Purview sensitivity label policy?

Accepted Answer

To specify the sensitivity level of the content. In Microsoft Purview sensitivity labels, the 'classification' property (sometimes labeled 'Sensitivity level' in the label definition) is what determines the sensitivity tier the label represents — for example, Public, General, Confidential, or Highly Confidential. It drives how the label is presented to users and how downstream policies (DLP, auto-labeling) interpret the content's sensitivity. It is not the mechanism for retention, encryption, or permissions.

Answer

To set the retention period for the labeled content

Answer

To define encryption settings for the label

Answer

To define user permissions for accessing the content

Question 4

A marketing team needs to collaborate on a presentation that will be updated frequently by multiple team members, and they want to ensure everyone always has the latest version without manual tracking. Which Microsoft 365 service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it provides a centralized document library with version history, co-authoring, and metadata management, ensuring all team members always access the latest version without manual tracking. Unlike OneDrive for Business, which is designed for individual use, SharePoint Online supports structured collaboration across a team with granular permissions and automated sync.

Answer

Exchange Online

Answer

Microsoft Teams

Answer

OneDrive for Business

Question 5

A marketing team needs to create a slide-based presentation that includes charts copied from an Excel spreadsheet and animated transitions. They also require the ability to collaborate in real-time with remote colleagues. Which Microsoft 365 app should they use?

Accepted Answer

PowerPoint. PowerPoint is the correct choice because it is specifically designed for creating slide-based presentations with rich media, including charts copied from Excel and animated transitions. It also supports real-time co-authoring via OneDrive or SharePoint, enabling multiple remote colleagues to edit simultaneously.

Answer

Word

Answer

Excel

Answer

Sway

Question 6

Refer to the exhibit. An admin creates a Microsoft Purview Data Loss Prevention (DLP) policy rule as shown. When will the rule block access?

Accepted Answer

When a credit card number is detected with high confidence. The rule is configured with a condition that triggers when a credit card number is detected with a confidence level of 'high'. The action 'Block access' is set to execute when this condition is met. Therefore, the rule blocks access specifically when a credit card number is detected with high confidence, making option A correct.

Answer

When the document is shared externally

Answer

When any sensitive information type is detected

Answer

Never, because the rule is not applied to any location

Question 7

A department head asks which Microsoft 365 option should be used to meter compute and storage usage for consumption-based billing. Cloud concept or benefit best matches this requirement?

Accepted Answer

Measured service. Measured service is a core cloud computing concept where resource usage (compute, storage, network) is metered and billed based on actual consumption. In Microsoft 365, this aligns with consumption-based billing models like pay-as-you-go for Azure services or per-user licensing adjustments, enabling cost transparency and optimization.

Answer

Sensitivity labels

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Question 8

A user wants to schedule a meeting with colleagues and automatically find a time that works for everyone. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Outlook. Microsoft Outlook includes the Scheduling Assistant feature, which uses free/busy data from the Exchange Online calendar to automatically suggest meeting times that work for all attendees. This is the correct app for scheduling meetings with colleagues because it directly integrates with the organization's calendar system to find mutual availability.

Answer

Microsoft Bookings

Answer

Microsoft Teams

Answer

Microsoft Viva Insights

Question 9

A multinational organization uses Microsoft 365 and wants to comply with data residency requirements. They need to ensure that data for European users stays within the European Union. Which Microsoft 365 feature should they configure?

Accepted Answer

Configure multi-geo capabilities in SharePoint Online and OneDrive.. Multi-Geo capabilities in SharePoint Online and OneDrive allow organizations to provision and store data at rest in specific geographic locations, such as the European Union, to meet data residency requirements. This feature enables tenant administrators to define a preferred data location for users, ensuring their content remains within the EU boundary.

Answer

Create retention policies for EU users.

Answer

Set conditional access policies to restrict access from outside EU.

Answer

Use data loss prevention policies to block data movement.

Question 10

A security team wants Microsoft 365 access to be allowed only when a user's device is marked compliant by management policy. Which two capabilities are normally combined? (Choose two.)

Accepted Answer

Microsoft Intune compliance policies. Microsoft Intune compliance policies define the rules that a device must meet (e.g., encryption, OS version, threat level) to be considered compliant. Conditional Access enforces access decisions based on signals like device compliance status, blocking or granting access to Microsoft 365 services. Together, they ensure only compliant devices can access corporate resources.

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 11

A marketing team needs to collaborate on a campaign document in real time and track changes. Which Microsoft 365 app should they use?

Accepted Answer

Word. Microsoft Word is the application designed for creating and editing documents with real-time co-authoring and built-in track changes, which is exactly what the marketing team needs for a campaign document. Word supports simultaneous editing by multiple users and provides a full revision history with accept/reject change tracking. This makes it the correct choice for document collaboration with change tracking.

Answer

Teams

Answer

OneNote

Answer

SharePoint

Question 12

A department asks for the Microsoft 365 service best suited for interactive business dashboards. Which service should they use? The design must avoid adding custom operational scripts.

Accepted Answer

Power BI. Power BI is the correct choice because it is Microsoft's dedicated business analytics service that enables users to create interactive dashboards and reports from various data sources. It provides drag-and-drop visualization tools, real-time data refresh, and natural language querying (Q&A) without requiring custom operational scripts, aligning perfectly with the department's requirement for no-code dashboard creation.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Entra Privileged Identity Management

Question 13

Which THREE of the following are benefits of using Microsoft Viva?

Accepted Answer

Connects employees with company news and resources.. Microsoft Viva Connections provides a personalized dashboard that aggregates company news, resources, and communications from SharePoint, Yammer, and Stream, enabling employees to stay informed and engaged directly within Microsoft Teams. This integration reduces information silos and ensures timely access to relevant organizational content.

Answer

Detects and blocks phishing attacks.

Answer

Backs up user data automatically.

Question 14

Your organization has a Microsoft 365 E5 subscription and wants to centrally manage security incidents across identities, endpoints, and cloud apps. Which Microsoft solution provides this capability?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (formerly Microsoft 365 Defender) is a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications. It integrates signals from Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps into a single portal. This provides centralized security incident management across the specified domains.

Answer

Microsoft Entra ID Protection

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Endpoint

Question 15

Drag and drop the steps to set up a Microsoft Teams meeting with external participants into the correct order.

Accepted Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees (including external participants). Step 3: Configure meeting options (e.g., bypass lobby for external). Step 4: Send the meeting invitation.. Creating a Teams meeting involves scheduling, adding attendees, setting options, and sending the invite.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Configure meeting options. Step 3: Add attendees. Step 4: Send the meeting invitation.

Answer

Step 1: Add attendees. Step 2: Open Teams calendar and schedule a new meeting. Step 3: Configure meeting options. Step 4: Send the meeting invitation.

Answer

Step 1: Open Teams calendar and schedule a new meeting. Step 2: Add attendees. Step 3: Send the meeting invitation. Step 4: Configure meeting options.

Question 16

Drag and drop the steps to deploy Microsoft 365 Apps for enterprise to a Windows device using the Microsoft 365 Apps admin center into the correct order.

Accepted Answer

Step 1: Sign in to the Microsoft 365 Apps admin center. Step 2: Create a configuration for deployment. Step 3: Download the Office Deployment Tool and the configuration file. Step 4: Run the Office Deployment Tool on the client device.. Deploying Office uses the admin center to create a config, then ODT to install based on that config.

Answer

Step 1: Download the Office Deployment Tool. Step 2: Sign in to the Microsoft 365 Apps admin center. Step 3: Create a configuration. Step 4: Run the ODT on the client device.

Answer

Step 1: Run the Office Deployment Tool on the client device. Step 2: Sign in to the admin center. Step 3: Create a configuration. Step 4: Download the configuration file.

Answer

Step 1: Sign in to the admin center. Step 2: Download the ODT. Step 3: Create a configuration. Step 4: Run ODT with the configuration.

Question 17

A compliance team needs to ensure that any email sent from the Finance department that contains a bank account number is automatically encrypted. External recipients must be able to reply securely without needing to sign up for any service. Which Microsoft Purview solution should they configure?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (B) is the correct solution because it allows the organization to automatically encrypt emails based on conditions (e.g., emails from Finance containing bank account numbers) and enables external recipients to reply securely using the encrypted reply portal without requiring any sign-up or additional software. This is achieved through Azure Rights Management (Azure RMS) and the Office 365 Message Encryption (OME) portal, which provides a seamless, browser-based experience for external users.

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Information Protection (sensitivity labels)

Answer

Microsoft Defender for Office 365

Question 18

A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?

Accepted Answer

Microsoft Viva Engage. Microsoft Viva Engage (formerly Yammer) is designed as a social networking and employee communication hub that provides company-wide announcements, topic-based communities, and seamless integration with SharePoint and Power BI dashboards. It focuses on fostering open communication across the organization, unlike collaboration tools that are team-centric.

Answer

Microsoft Teams

Answer

SharePoint Online

Answer

Outlook

Question 19

A company with 300 Microsoft 365 E3 users needs to add advanced identity protection features: Microsoft Entra ID Premium P2 and Microsoft Defender for Identity. They want to add these capabilities without upgrading all users to E5. What is the most cost-effective licensing strategy?

Accepted Answer

Add the Microsoft 365 E5 Security add-on for each user.. The Microsoft 365 E5 Security add-on bundles Microsoft Entra ID Premium P2 and Microsoft Defender for Identity (along with other security features) at a lower per-user cost than purchasing them separately, and it can be added to an existing E3 subscription without upgrading the entire license. This provides the required identity protection capabilities cost-effectively for all 300 users.

Answer

Upgrade all users to Microsoft 365 E5.

Answer

Add Microsoft Entra ID Premium P2 and Microsoft Defender for Identity as standalone add-ons.

Answer

Add Enterprise Mobility + Security E5 add-on.

Question 20

A company with 500 Microsoft 365 E3 users wants to add the highest level of threat protection and advanced investigation capabilities for their security team. Which licensing add-on should they purchase?

Accepted Answer

Microsoft 365 E5 Security. Microsoft 365 E5 Security is the correct add-on because it bundles the highest level of threat protection (Microsoft Defender for Office 365 Plan 2, Microsoft Defender for Endpoint Plan 2, and Microsoft Defender for Identity) along with advanced investigation capabilities like automated investigation and response (AIR), threat analytics, and advanced hunting in Microsoft 365 Defender. This meets the requirement for top-tier threat protection and advanced investigation without upgrading the entire E3 base license to E5.

Answer

Microsoft 365 E5 Compliance

Answer

Microsoft 365 E5

Answer

Microsoft Defender for Microsoft 365 Plan 2 only