MS-900 Practice Exam 53 — 20 Questions

Question 1

A sales team wants to build a custom inventory tracking application with minimal code. They need a cloud-based database that can securely store structured data and integrate with the low-code app builder. Which Microsoft 365 service should they use as the database backend?

Accepted Answer

Microsoft Dataverse. Microsoft Dataverse is the correct choice because it provides a scalable, cloud-based relational database that securely stores structured data and integrates natively with Power Apps, the low-code app builder. Unlike simpler list-based storage, Dataverse supports rich data types, relationships, business logic, and role-based security, making it ideal for custom inventory tracking applications built with minimal code.

Answer

Microsoft Lists

Answer

Power Apps

Answer

Power Automate

Question 2

A sales team needs to create a shared workspace where they can store customer documents, collaborate on a lead list, track follow-ups on a shared calendar, and hold video meetings with customers. Which Microsoft 365 service provides all these capabilities in a single, integrated experience?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct answer because it provides a single, integrated workspace that combines persistent chat, file storage (via SharePoint), collaborative editing on lists (via SharePoint or Planner), a shared calendar, and built-in video meetings. This eliminates the need to switch between separate apps for each task, fulfilling all the sales team's requirements in one experience.

Answer

Microsoft Viva Engage

Answer

SharePoint Online

Answer

OneNote

Question 3

An HR manager needs to collect anonymous feedback from employees about a new benefits policy. They want the responses to be automatically summarized into charts and graphs. Which Microsoft 365 app is best suited for this task?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct choice because it is specifically designed for creating surveys and quizzes, with built-in support for anonymous responses and automatic generation of charts and graphs from collected data. The HR manager can create a feedback form, enable anonymous submissions, and view real-time summaries with visualizations directly within Forms, without needing additional tools.

Answer

Microsoft Excel

Answer

Microsoft Sway

Answer

Microsoft Power BI

Question 4

An administrator configures the SharePoint Online sharing policy as shown in the exhibit. What is the result of this configuration?

Accepted Answer

External users and guests from fabrikam.com can access content after accepting an invitation.. Option D is correct. The policy allows sharing with external users and guests, but only from fabrikam.com, and requires them to accept the sharing invitation. Option A is wrong because the capability is ExternalUserAndGuestSharing, not just guest sharing. Option B is wrong because the allowed domain list permits fabrikam.com. Option C is wrong because the blocked domain list is empty.

Answer

External users from any domain can access content without accepting an invitation.

Answer

Only guests from any domain can access, but external users must be added manually.

Answer

External sharing is blocked for all domains except fabrikam.com.

Question 5

A graphic designer needs to create a professional printed brochure with custom page layouts, text wrapping around images, and precise control over typography. Which Microsoft 365 app is designed for this type of desktop publishing task?

Accepted Answer

Microsoft Publisher. Microsoft Publisher is the correct choice because it is specifically designed for desktop publishing tasks such as creating professional brochures with custom page layouts, text wrapping around images, and precise typography control. Unlike general-purpose apps, Publisher offers advanced layout tools like master pages, baseline guides, and typographic controls that are essential for print-ready documents.

Answer

Microsoft Sway

Answer

Microsoft Word

Answer

Microsoft PowerPoint

Question 6

A marketing manager wants to create a mobile-friendly app that field sales representatives can use to submit expense reports with photos of receipts. The app should automatically save the data to a SharePoint list and send an email notification to the manager. Which two Microsoft 365 technologies should the developer use to build this solution? (Choose two.)

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is correct because it enables rapid development of mobile-friendly apps with minimal code, allowing field sales representatives to capture expense data and receipt photos directly from their devices. It integrates seamlessly with SharePoint lists for data storage, making it the ideal low-code platform for this custom business app.

Answer

Microsoft SharePoint

Answer

Microsoft Power BI

Question 7

Refer to the exhibit. You are reviewing a sensitivity label policy configuration in Microsoft Purview. What is the outcome of this configuration?

Accepted Answer

Users can manually change the label, but the default label is 'Public'.. Option C is correct. The default label is 'Public' with MandatoryLabelType set to 'none', meaning labels are not mandatory. Users can apply labels manually, but documents will have the default label unless changed. Option A is wrong because mandatory is not required. Option B is wrong because the default label is applied, not none. Option D is wrong because labels are enabled.

Answer

The 'Confidential' label is disabled and cannot be applied.

Answer

Users are required to apply a sensitivity label to all documents.

Answer

No default label is applied to documents.

Question 8

A financial services firm uses Microsoft 365 and must retain all business communications for 7 years to comply with SEC regulations. They also need to prevent users from permanently deleting emails. Which Microsoft Purview feature should they implement?

Accepted Answer

Retention policies and retention labels. Option C is correct because retention policies and labels can enforce retention periods and prevent permanent deletion. Option A is incorrect because DLP prevents data loss, not retention. Option B is incorrect because eDiscovery is for search and hold, not retention enforcement. Option D is incorrect because sensitivity labels classify data but do not enforce retention.

Answer

Sensitivity labels

Answer

eDiscovery (Standard)

Answer

Data Loss Prevention (DLP) policies

Question 9

Refer to the exhibit. The exhibit shows an anti-phishing policy in Microsoft Defender for Office 365. Which users receive the highest level of protection?

Accepted Answer

The CEO and CFO specifically.. Option B is correct: Targeted user protection explicitly lists the CEO and CFO, who get additional protection. Option A is incorrect because all users get the policy but targeted users get extra protection. Option C is incorrect because the policy is enabled for all users. Option D is incorrect because the policy applies to all users, not just targeted.

Answer

All users in the organization.

Answer

Only users in the quarantine list.

Answer

Users with phishing threshold level 2.

Question 10

Refer to the exhibit. You are reviewing a Conditional Access policy configuration. What is the effect of this policy on a user who signs in from a known device but with medium sign-in risk?

Accepted Answer

The user is prompted for multifactor authentication.. The policy requires MFA when the sign-in risk level is medium or higher. Since the condition is met (medium risk), the user will be prompted for MFA. Option B is correct.

Answer

The user is required to reset their password.

Answer

The user is blocked from signing in.

Answer

The user is allowed without any additional prompts because the device is known.

Question 11

Your organization is adopting Microsoft 365 Copilot and wants to prevent the AI from using internal customer data in its training models. Which data protection option should be enabled?

Accepted Answer

Microsoft Commercial Data Protection. Microsoft Commercial Data Protection ensures that Copilot does not use customer data for training models. Option D is correct. Options A, B, and C do not address training data usage.

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Purview Audit

Answer

Conditional Access policies

Question 12

Which TWO of the following are capabilities of Microsoft Priva? (Choose two.)

Accepted Answer

Automate subject rights requests. Microsoft Priva helps organizations manage privacy risks by assessing data transfer risks and automating subject rights requests. Options A and C are correct.

Answer

Configure retention labels

Answer

Monitor network traffic

Answer

Detect malware in email attachments

Question 13

A company uses Microsoft Purview Communication Compliance to detect inappropriate messages. Which action can an administrator take after reviewing a flagged message?

Accepted Answer

Resolve the case with a notification to the sender. Option A is correct. Communication Compliance allows administrators to resolve cases with actions like 'Resolve with notification' or escalate. Option B is wrong because retention policies are separate. Option C is wrong because DLP policies are not automatically created from Communication Compliance. Option D is wrong because message recall is not a direct action in Communication Compliance.

Answer

Apply a retention policy to the message

Answer

Create a DLP policy based on the message

Answer

Recall the message from the recipient

Question 14

An organization uses Microsoft Defender XDR and wants to investigate a potential ransomware attack. Which portal should the security team use to see the full attack timeline?

Accepted Answer

Microsoft 365 Defender portal. Option A is correct. The Microsoft 365 Defender portal provides a unified incident view with the full attack timeline. Option B is wrong because Microsoft Sentinel is a SIEM, not the primary portal for Microsoft 365 Defender. Option C is wrong because the Microsoft Purview portal is for compliance. Option D is wrong because the Azure portal is for Azure resources.

Answer

Microsoft Purview compliance portal

Answer

Microsoft Sentinel

Answer

Azure portal

Question 15

Which THREE are features of Microsoft Purview Information Protection?

Accepted Answer

Auto-labeling for sensitive data. Options A, B, and D are correct. Information Protection includes sensitivity labels, auto-labeling, and encryption. Option C is wrong because DLP is a separate solution. Option E is wrong because retention policies are part of Data Lifecycle Management.

Answer

Data loss prevention policies

Answer

Retention policies

Question 16

Your organization is required to retain all customer emails for 7 years due to industry regulations. The legal team also needs to be able to search and hold relevant emails during active litigation. Which two Microsoft Purview features should you implement? (Choose two.)

Accepted Answer

Retention policy. Retention policies (A) enforce the 7-year retention. Litigation hold (C) preserves emails for legal cases. Option B (eDiscovery) is for search and export, not hold. Option D (DLP) prevents data leaks. Option E (MIP labels) classify data.

Answer

Data Loss Prevention policy

Answer

eDiscovery (Standard)

Answer

Sensitivity labels

Question 17

Your company is subject to the General Data Protection Regulation (GDPR). Which Microsoft 365 compliance feature helps you respond to a Data Subject Request (DSR) to export a user's personal data?

Accepted Answer

Microsoft Purview eDiscovery. eDiscovery (D) allows search and export of content. Option A (Audit) logs activities. Option B (MIP) classifies data. Option C (DLP) prevents leaks.

Answer

Microsoft Information Protection

Answer

Data Loss Prevention

Answer

Unified audit log

Question 18

Your organization is deploying Microsoft 365 Copilot. The compliance team is concerned that Copilot might expose sensitive data in its responses. What should you configure to prevent Copilot from using sensitive content?

Accepted Answer

Sensitivity labels with 'Copilot' condition. Sensitivity labels (C) can restrict Copilot from accessing labeled content. Option A (DLP) blocks sharing, not Copilot. Option B (retention) is for preservation. Option D (audit) logs usage.

Answer

Retention policies

Answer

Data Loss Prevention policies

Answer

Unified audit log

Question 19

A company needs to audit user activities in Microsoft 365 for compliance. Which tool should they use?

Accepted Answer

Microsoft Purview Audit (Premium). Microsoft Purview Audit (Premium) provides comprehensive auditing of user and admin activities. Option B is correct. The other options are for other purposes.

Answer

Microsoft Defender XDR

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 20

A company needs to enforce that all documents marked as 'Confidential' are encrypted and cannot be printed. Which combination of Microsoft Purview features should they use?

Accepted Answer

Sensitivity labels with encryption and rights management. Sensitivity labels can apply encryption and usage restrictions like 'Do Not Print'. Option D is correct. The other options are incomplete or incorrect.

Answer

Microsoft Entra ID Conditional Access and Intune app protection

Answer

Data Loss Prevention (DLP) policies and retention labels

Answer

eDiscovery (Premium) and Audit (Premium)