MS-900 Practice Questions 2 — 50 Questions

Question 1

A company with 200 users has Microsoft 365 Business Standard licenses. They need to add Microsoft 365 Defender for Office 365 (Plan 2) for increased protection against advanced threats. What should they purchase?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Purchase the Microsoft 365 Defender for Office 365 Plan 2 add-on. Microsoft 365 Business Standard licenses include basic email security but lack advanced threat protection features like automated investigation, threat hunting, and simulation training. Purchasing the Microsoft 365 Defender for Office 365 Plan 2 add-on directly adds these capabilities to existing Business Standard users without requiring a license upgrade, making it the most cost-effective and targeted solution.

Answer

Upgrade each user to Microsoft 365 Business Premium

Answer

Purchase Microsoft 365 E3 licenses

Answer

Install the Microsoft Defender for Endpoint standalone subscription

Question 2

A compliance administrator needs to automatically detect when employees share documents containing a customer's credit card number via email and block such sharing before the email is sent. Which Microsoft Purview solution should they configure?

Accepted Answer

Data Loss Prevention (DLP). Data Loss Prevention (DLP) is the correct solution because it is specifically designed to automatically detect sensitive data, such as credit card numbers, in transit (e.g., email) and enforce policy actions like blocking the email before it is sent. DLP uses deep content analysis, including pattern matching against predefined sensitive information types (e.g., credit card number regex), to inspect email bodies and attachments in real time within Exchange Online.

Answer

Information Rights Management (IRM)

Answer

Sensitivity labels

Answer

Microsoft Defender for Office 365 (ATP)

Question 3

A company has 150 users with Microsoft 365 Business Basic licenses. They now need to manage mobile devices using Microsoft Intune for all users. They want to keep costs as low as possible and do not want to upgrade to a more expensive plan if an add-on is available. What is the most cost-effective licensing strategy?

Accepted Answer

Add Microsoft Intune licenses for all users. Microsoft Intune is available as a standalone add-on license for Microsoft 365 Business Basic, Business Standard, and other plans. By purchasing the Microsoft Intune license per user, the company can add device management capabilities to their existing Business Basic subscriptions without paying for other unnecessary features. Upgrading to Business Premium or E3 would include Intune but also many other features, increasing cost.

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Upgrade all users to Microsoft 365 E3

Answer

Purchase Microsoft 365 Enterprise Mobility + Security E3 add-on

Question 4

A company has 50 users with Microsoft 365 Business Basic licenses. They require the desktop versions of Office apps (Word, Excel, PowerPoint) for all 50 users. Additionally, 20 of those users need device management capabilities via Microsoft Intune. The company wants to minimize total licensing costs. Which licensing strategy is most cost-effective?

Accepted Answer

Upgrade all 50 users to Microsoft 365 Business Standard and purchase Microsoft Intune standalone licenses for the 20 users.. Microsoft 365 Business Standard includes the desktop versions of Office apps, fulfilling the requirement for all 50 users. For the 20 users needing device management, purchasing standalone Microsoft Intune licenses is the most cost-effective approach, as it avoids the higher cost of upgrading all users to Business Premium, which includes Intune but also additional security features not required here.

Answer

Upgrade all 50 users to Microsoft 365 Business Premium.

Answer

Upgrade 20 users to Microsoft 365 Business Premium and keep 30 users on Business Basic.

Answer

Upgrade all 50 users to Microsoft 365 Business Standard and purchase Microsoft Intune standalone licenses for all 50 users.

Question 5

Adventure Works is a non-profit with 200 users. They use Microsoft 365 for Nonprofits. They need to: (1) Restrict access to sensitive donor information to only specific users; (2) Automatically archive emails older than 5 years; (3) Allow volunteers to access shared files from their personal devices without enrolling them in device management; (4) Use AI to summarize long email threads and suggest replies. Which Microsoft 365 services or features should they use?

Accepted Answer

Sensitivity labels, Exchange Online archiving, SharePoint Online, Microsoft Copilot for Microsoft 365. Microsoft Purview sensitivity labels can restrict access to sensitive data. Exchange Online archiving can archive emails older than 5 years. SharePoint Online allows external sharing with expiration and permissions, without device enrollment. Microsoft Copilot for Microsoft 365 provides AI email summaries and suggested replies. Microsoft Intune requires device enrollment, which is not desired.

Answer

Sensitivity labels, Exchange Online in-place hold, SharePoint Online, Microsoft Editor

Answer

Microsoft Purview Data Loss Prevention, Exchange Online archiving, Microsoft Teams, Microsoft Copilot for Microsoft 365

Answer

Azure Information Protection, Exchange Online retention policies, OneDrive, Microsoft Copilot for Microsoft 365

Question 6

A company with 500 users currently has Microsoft 365 Business Basic licenses. They need to provide all users with the desktop versions of Office apps and increase email storage to 100 GB per user. What is the most cost-effective licensing upgrade from the options below?

Accepted Answer

Upgrade to Microsoft 365 E3. Microsoft 365 Business Basic provides only web and mobile versions of Office apps and 50 GB of email storage. The requirement for desktop Office apps and 100 GB email storage per user is met by Microsoft 365 E3, which includes both the full desktop Office suite and Exchange Online Plan 2 (100 GB mailbox). Among the options, E3 is the most cost-effective upgrade because it bundles these features without the additional security and device management costs of Business Premium or the inefficiency of stacking add-ons on Business Basic.

Answer

Upgrade all users to Microsoft 365 Business Standard

Answer

Upgrade all users to Microsoft 365 Business Premium

Answer

Keep Business Basic and purchase Exchange Online Plan 2 add-on for each user

Question 7

A company uses a cloud provider and is billed monthly based only on the exact amount of storage used and the number of compute hours consumed. They can increase or decrease usage at any time without upfront commitments. Which cloud computing characteristic does this billing model primarily demonstrate?

Accepted Answer

Measured service. The billing model charges only for actual storage used and compute hours consumed, with no upfront commitments and the ability to adjust usage at any time. This directly aligns with the 'measured service' characteristic, where cloud resource usage is metered, monitored, and billed based on consumption. The key is that the provider tracks and reports usage transparently, enabling a pay-per-use model.

Answer

On-demand self-service

Answer

Rapid elasticity

Answer

Resource pooling

Question 8

A legal team is preparing for litigation. They need to place a hold on all content (emails, documents, Teams messages) related to a specific project across the entire organization. The hold must prevent any deletion or modification of the content. Which Microsoft Purview solution should they use?

Accepted Answer

eDiscovery (Premium) with legal hold. EDiscovery (Premium) with legal hold is the Microsoft Purview solution specifically designed to preserve content in-place for litigation. When a legal hold is applied to a case, it prevents deletion or modification of emails, documents, and Teams messages across the entire organization by placing a hold on the underlying Exchange Online mailboxes, SharePoint sites, and OneDrive accounts. This ensures that all content related to the project is immutable for the duration of the hold, meeting the legal team's requirement.

Answer

Audit log search

Answer

Data Loss Prevention (DLP)

Answer

Retention policy

Question 9

A compliance officer needs to set up a policy that automatically monitors and detects activities related to accessing sensitive data from outside the corporate network. When a user from a foreign country accesses a confidential file, the policy should trigger an alert and require additional authentication. Which combination of Microsoft 365 solutions achieves this?

Accepted Answer

Microsoft Purview Data Loss Prevention and Conditional Access. Microsoft Purview Data Loss Prevention (DLP) monitors and detects sensitive data access from outside the corporate network, while Conditional Access enforces additional authentication (e.g., MFA) when such access is detected. Together, they meet the requirement for automatic alerting and step-up authentication based on location and data sensitivity.

Answer

Microsoft Purview Audit (Standard) and Microsoft Entra ID Identity Protection

Answer

Microsoft Purview Insider Risk Management and Microsoft Cloud App Security

Answer

Microsoft Purview eDiscovery and Privileged Identity Management

Question 10

A sales team needs to create a shared list of customer contact information with custom fields like company, email, phone, and deal stage. The list should be accessible from within Outlook and allow real-time updates by multiple users. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Lists. Microsoft Lists is the correct choice because it provides a customizable, shared list that supports custom columns (e.g., company, email, phone, deal stage) and real-time collaboration. It integrates directly with Outlook via the Lists app or by adding a list as a tab in Outlook, allowing the sales team to access and update the list without leaving their email client.

Answer

Microsoft To Do

Answer

Microsoft Planner

Answer

Microsoft Dynamics 365

Question 11

A global organization relies on Microsoft 365 for critical business operations. They require guaranteed response times for support incidents: critical severity issues must receive an initial response within 15 minutes, and high severity within 1 hour. They also need proactive monitoring and advice from a designated support account manager. Which support plan should they purchase?

Accepted Answer

Microsoft ProDirect Support. ProDirect Support is the correct choice because it offers guaranteed response times of 15 minutes for critical severity incidents and 1 hour for high severity incidents, along with proactive monitoring and a designated support account manager. This plan is specifically designed for organizations that require rapid, managed support for critical business operations, unlike the standard or legacy plans.

Answer

Microsoft 365 Standard Support (included with subscription)

Answer

Microsoft Unified Support

Answer

Microsoft Premier Support

Question 12

A company wants to ensure that all outgoing emails containing sensitive financial data are encrypted automatically. The encryption should require the recipient to authenticate to read the message. Which Microsoft 365 solution should the administrator configure?

Accepted Answer

Microsoft Purview Message Encryption. Microsoft Purview Message Encryption (MPME) is the correct solution because it allows organizations to send encrypted emails that require recipients to authenticate (via a Microsoft account or a one-time passcode) before they can read the message. This directly meets the requirement for automatic encryption of outgoing emails with sensitive financial data and recipient authentication.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Purview Data Loss Prevention (DLP)

Answer

Microsoft Purview Insider Risk Management

Question 13

A non-profit organization with 100 users needs business-grade email, desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user. They are eligible for non-profit pricing. Which Microsoft 365 plan meets these requirements at the lowest cost?

Accepted Answer

Microsoft 365 Business Standard (Nonprofit). Microsoft 365 Business Standard (Nonprofit) is the lowest-cost plan that includes business-grade email (Exchange Online), desktop versions of Office apps (Word, Excel, PowerPoint), and 1 TB of cloud storage per user (OneDrive for Business). Microsoft 365 Business Basic (Nonprofit) lacks the desktop Office apps, while Business Premium and E3 include additional security and compliance features that increase cost beyond the stated requirements.

Answer

Microsoft 365 Business Basic (Nonprofit)

Answer

Microsoft 365 Business Premium (Nonprofit)

Answer

Microsoft 365 E3 (Nonprofit)

Question 14

A company uses a cloud storage service that automatically increases its storage capacity without any manual intervention as new files are added. This behavior is an example of which cloud computing characteristic?

Accepted Answer

Rapid elasticity. The scenario describes storage capacity automatically increasing as new files are added, which is the essence of rapid elasticity. This cloud characteristic allows resources to scale out and in automatically, often to the point where the user perceives unlimited capacity, without requiring manual provisioning or intervention.

Answer

On-demand self-service

Answer

Broad network access

Answer

Resource pooling

Question 15

An administrator needs to monitor and investigate potential data breaches by reviewing detailed records of file access and sharing activities across Microsoft 365. They require a centralized report showing who accessed what, from where, and any unusual patterns. Which tool should they use?

Accepted Answer

Microsoft Purview Audit (Standard). Microsoft Purview Audit (Standard) is the correct tool because it provides a centralized, searchable log of all file access and sharing activities across Microsoft 365 services, including who accessed what, from which IP address, and when. This allows administrators to detect and investigate unusual patterns indicative of data breaches by reviewing detailed audit records.

Answer

Microsoft 365 Defender

Answer

Microsoft Purview eDiscovery

Answer

Microsoft Secure Score

Question 16

A team needs to create a shared online document and collaborate in real time with colleagues. They require built-in version history and the ability to access the document from any device. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Word Online. Microsoft Word Online is the correct choice because it is a browser-based version of Word that enables real-time co-authoring, automatic version history, and access from any device with an internet connection. Unlike the desktop app, it does not require installation and syncs changes instantly via OneDrive or SharePoint, meeting all stated requirements.

Answer

Microsoft Word (desktop)

Answer

Microsoft OneNote

Answer

Microsoft Teams

Question 17

A company runs a virtual machine in Azure that hosts a web application. The company is responsible for configuring the operating system, installing web server software, and managing application updates. The cloud provider is responsible for the physical hardware, networking, and data center security. Which cloud service model does this represent?

Accepted Answer

Infrastructure as a Service (IaaS). This scenario describes Infrastructure as a Service (IaaS) because the customer manages the operating system, web server software, and application updates, while the cloud provider handles the physical hardware, networking, and data center security. In IaaS, the provider offers virtualized computing resources over the internet, and the customer retains control over the guest OS and installed software, which matches the responsibilities outlined.

Answer

Software as a Service (SaaS)

Answer

Platform as a Service (PaaS)

Answer

Function as a Service (FaaS)

Question 18

A company currently has Microsoft 365 E5 licenses for all users. They need to perform advanced threat hunting using queries across email, endpoints, and identities to investigate a potential security incident. Which of the following capabilities is already included in their existing license?

Accepted Answer

Microsoft 365 Defender (including advanced hunting). Microsoft 365 Defender (formerly Microsoft Threat Protection) includes advanced hunting capabilities that allow security teams to run Kusto Query Language (KQL) queries across email, endpoints, identities, and cloud apps. Since the company already has Microsoft 365 E5 licenses, this capability is included without any additional purchase.

Answer

Microsoft Defender for Microsoft 365 Plan 1

Answer

Microsoft Entra ID Premium P1

Answer

Microsoft Cloud App Security

Question 19

A compliance officer needs to automatically detect documents stored in SharePoint Online that contain sensitive data types (e.g., credit card numbers) and apply a sensitivity label that restricts access to only certain users. The classification should occur without user intervention and the label must be applied to the document. Which Microsoft Purview solution should be configured?

Accepted Answer

Sensitivity labels with auto-labeling. Sensitivity labels with auto-labeling are the correct solution because they can automatically classify documents based on sensitive data types (such as credit card numbers) and apply a sensitivity label that enforces protection actions like restricting access to specific users. This occurs without user intervention, meeting the requirement for automatic classification and labeling in SharePoint Online.

Answer

Data Loss Prevention (DLP)

Answer

Retention labels

Answer

Information barriers

Question 20

A company currently uses Microsoft 365 Business Basic licenses for 80 users. They want to add the desktop versions of Office apps (Word, Excel, PowerPoint) without any additional security or compliance features. Which upgrade is the most cost-effective?

Accepted Answer

Upgrade to Microsoft 365 Business Standard. Microsoft 365 Business Standard is the most cost-effective upgrade from Business Basic because it includes the desktop versions of Office apps (Word, Excel, PowerPoint) without adding the advanced security and compliance features found in Business Premium or Enterprise plans. Business Standard provides the same core productivity tools at a lower per-user price point, making it the ideal choice when only desktop Office is needed.

Answer

Upgrade to Microsoft 365 Business Premium

Answer

Upgrade to Microsoft 365 E3

Answer

Purchase Office 2019 Professional Plus standalone