MS-900 Practice Exam 53 — 20 Questions

Question 1

Refer to the exhibit. A PowerShell script snippet. What is this script creating?

Accepted Answer

A Microsoft 365 group.. The New-UnifiedGroup cmdlet (Exchange Online PowerShell) creates a Microsoft 365 group — a modern group object that provides a shared mailbox, calendar, SharePoint site, and Teams-compatible membership. A mail-enabled security group or distribution group would be created with New-DistributionGroup, and a shared mailbox with New-Mailbox -Shared. The "Unified" in the cmdlet name is the historical term for Microsoft 365 groups (formerly Office 365 unified groups).

Answer

A mail-enabled security group.

Answer

A distribution group.

Answer

A shared mailbox.

Question 2

A global organization with 20,000 users is migrating from on-premises Exchange to Exchange Online. They have a mix of Microsoft 365 E3 and E5 licenses. The compliance team requires that all mailboxes be placed on litigation hold within 24 hours of the migration. Which licensing consideration is critical?

Accepted Answer

Users with E3 licenses need an Exchange Online Plan 2 add-on for litigation hold. Litigation hold in Exchange Online requires an Exchange Online Plan 2 license or an Exchange Online Plan 1 license with the Exchange Online Archiving add-on. Microsoft 365 E3 includes Exchange Online Plan 1, which does not support litigation hold by itself. Therefore, users with E3 licenses need the Exchange Online Plan 2 add-on (or the equivalent Archiving add-on) to enable litigation hold. E5 licenses include Exchange Online Plan 2, so those users already have the necessary licensing.

Answer

All users must have Microsoft 365 E5 licenses to use litigation hold

Answer

Downgrade E5 users to E3 to simplify licensing

Answer

Litigation hold is automatically enabled for all mailboxes in Exchange Online

Question 3

A customer has 100 users on Microsoft 365 Business Basic and wants to add Microsoft Defender for Office 365 Plan 1. Which licensing approach should they use?

Accepted Answer

Purchase Microsoft Defender for Office 365 Plan 1 as an add-on for each user. Microsoft Defender for Office 365 Plan 1 is an add-on that can be purchased for users who already have a qualifying subscription like Microsoft 365 Business Basic. It provides advanced threat protection features such as Safe Attachments and Safe Links, and it must be assigned per user on top of an existing Microsoft 365 license. Option C is correct because it directly describes this additive licensing model.

Answer

Purchase a separate Microsoft Defender for Office 365 Plan 1 subscription without underlying Microsoft 365 licenses

Answer

Upgrade all users to Microsoft 365 E3

Answer

Upgrade to Microsoft 365 E5

Question 4

A mid-size company with 300 users currently has Microsoft 365 Business Basic licenses. They need to add desktop versions of Office apps (Word, Excel, PowerPoint) and advanced security features such as Microsoft Defender for Office 365. What is the most cost-effective licensing upgrade?

Accepted Answer

Microsoft 365 Business Premium. Microsoft 365 Business Premium includes both the desktop versions of Office apps (Word, Excel, PowerPoint) and Microsoft Defender for Office 365 (Plan 1) in a single license. This makes it the most cost-effective upgrade from Business Basic because it bundles the required productivity and security features without the higher per-user cost of E3 or E5.

Answer

Microsoft 365 Business Standard

Answer

Microsoft 365 E3

Answer

Microsoft 365 E5

Question 5

A service owner is comparing Microsoft 365 capabilities and needs to avoid license waste when employees change roles. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

License assignments against current user requirements. The core principle of avoiding license waste when employees change roles is to ensure that license assignments are aligned with current user requirements. Microsoft 365 licensing is user-based, and when a user's role changes, their assigned license should be updated or reassigned to reflect their new responsibilities, preventing unused or inappropriate licenses from being consumed.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 6

A financial services company must prevent users from accidentally sharing sensitive customer data externally. They want to block sharing of any document containing a credit card number via email or SharePoint. What combination of Microsoft 365 compliance solutions should they use?

Accepted Answer

Data Loss Prevention (DLP) policies. Data Loss Prevention (DLP) policies in Microsoft Purview are specifically designed to detect and block the sharing of sensitive information, such as credit card numbers, across email (Exchange Online) and SharePoint. By scanning content for predefined sensitive info types (e.g., credit card numbers using regex patterns from the DLP engine), DLP can automatically block or warn users before external sharing occurs, meeting the company's requirement.

Answer

Sensitivity labels and Microsoft Purview Information Protection (Microsoft Purview Information Protection)

Answer

Microsoft Purview Compliance Manager

Answer

Exchange Online Protection (EOP) and Microsoft Defender for Microsoft 365

Question 7

A security administrator needs to audit all activities related to a specific user in Exchange Online, SharePoint Online, and Microsoft Entra ID for the past 90 days. They also need to export the audit log as a CSV file. Which Microsoft Purview solution provides this capability without additional licensing beyond Microsoft 365 E3?

Accepted Answer

Microsoft Purview Audit (Standard). Microsoft Purview Audit (Standard) is included with Microsoft 365 E3 and provides the ability to search and export audit logs for user activities across Exchange Online, SharePoint Online, and Microsoft Entra ID for up to 90 days. This meets the administrator's requirement without needing additional licensing.

Answer

Microsoft Purview Audit (Premium)

Answer

Microsoft Purview eDiscovery (Standard)

Answer

Microsoft Purview Content Search

Question 8

Which THREE of the following are valid data subject rights under GDPR? (Choose three.)

Accepted Answer

Right to data portability. Under GDPR, Article 20 grants the Right to data portability (A), allowing data subjects to receive their personal data in a structured, commonly used, machine-readable format and transmit it to another controller. Article 17 establishes the Right to erasure, also known as the right to be forgotten (B), enabling individuals to request deletion of personal data under specified conditions. Article 15 provides the Right of access (C), giving data subjects the ability to obtain confirmation of whether their data is processed and access to that data plus related information. Options D and E are not GDPR rights: the regulation instead embodies storage limitation (Article 5(1)(e)), which discourages perpetual storage, and it does not grant a right to monetize one's data.

Answer

Right to perpetual storage

Answer

Right to monetization of data

Question 9

Which TWO of the following are capabilities of Microsoft Priva? (Choose two.)

Accepted Answer

Automate subject rights requests. Microsoft Priva includes Subject Rights Requests, which lets organizations automate the intake, tracking, and fulfillment of data subject requests (DSRs) under regulations like GDPR and CCPA, so option A is correct. Priva also provides Privacy Risk Management capabilities, including the ability to assess and remediate privacy risks in data transfers across tenants and regions, making option C correct. Option B is not a Priva capability; retention labels are configured through Microsoft Purview records management and data lifecycle management. Option D is incorrect because network traffic monitoring is handled by tools such as Microsoft Defender for Cloud Apps or network security solutions, not Priva. Option E is incorrect because malware detection in email attachments is performed by Microsoft Defender for Office 365, not Priva.

Answer

Configure retention labels

Answer

Monitor network traffic

Answer

Detect malware in email attachments

Question 10

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use? The design must avoid adding custom operational scripts.

Accepted Answer

Power Apps. Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without writing traditional code. It provides pre-built templates, connectors to Microsoft and third-party services, and a visual drag-and-drop designer, allowing departments to create tailored solutions without custom operational scripts.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Purview Compliance Manager

Question 11

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use?

Accepted Answer

Power Apps. Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without extensive coding. It provides pre-built templates, connectors to Microsoft and third-party services, and a drag-and-drop interface, making it ideal for department-level custom app needs.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Purview Compliance Manager

Question 12

A department asks for the Microsoft 365 service best suited for workflow approvals between Microsoft 365 and Dynamics 365. Which service should they use?

Accepted Answer

Power Automate. Power Automate (Option C) is the correct service because it provides a low-code, workflow automation platform that integrates directly with both Microsoft 365 (e.g., SharePoint, Teams) and Dynamics 365. It enables users to create automated approval workflows using prebuilt templates and connectors, making it the ideal choice for cross-service approval processes.

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Purview Compliance Manager

Question 13

A small business with 15 employees needs Microsoft 365 subscriptions that include desktop versions of Office apps and business-class email. They have a limited budget. Which is the most cost-effective plan that meets these requirements?

Accepted Answer

Microsoft 365 Business Standard. Microsoft 365 Business Standard is the most cost-effective plan that includes both desktop versions of Office apps (e.g., Word, Excel, PowerPoint) and business-class email (Exchange Online with a 50 GB mailbox and custom domain). Business Basic only provides web and mobile Office apps without desktop installations, while Business Premium adds advanced security and device management features that exceed the small business's limited budget and stated requirements. Office 365 E1 is an enterprise plan that lacks desktop Office apps entirely.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Business Premium

Answer

Office 365 E1

Question 14

While preparing a Microsoft 365 adoption plan, a consultant is asked to assign licenses automatically when users join a department group. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Group-based licensing. Group-based licensing in Microsoft 365 allows administrators to automatically assign or remove licenses based on Microsoft Entra ID group membership. When a user joins a department group, the licensing assignment is triggered without manual intervention, making it the most relevant concept for automating license assignments in an adoption plan.

Answer

Microsoft Stream

Answer

Microsoft Forms

Answer

Microsoft Whiteboard

Question 15

During a Microsoft 365 planning workshop, host custom applications on virtual machines while managing the operating system. Cloud concept or benefit best matches this requirement?

Accepted Answer

Infrastructure as a Service (IaaS). Infrastructure as a Service (IaaS) provides virtualized computing resources over the internet, including virtual machines where you can host custom applications and have full control over the operating system. This matches the requirement because IaaS gives you the flexibility to manage the OS, install custom software, and configure the environment without worrying about the underlying physical hardware.

Answer

Platform as a Service (PaaS)

Answer

Hybrid cloud

Answer

Software as a Service (SaaS)

Question 16

An administrator is reviewing a request from users who need to avoid overprovisioning for a seasonal workload. Cloud concept or benefit best matches this requirement?

Accepted Answer

Rapid elasticity. Rapid elasticity is a core cloud computing characteristic defined by NIST (SP 800-145) that allows resources to scale out and in automatically based on demand. For a seasonal workload, this means the cloud can provision additional compute or storage capacity during peak periods and release it when demand drops, preventing overprovisioning and optimizing costs.

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Answer

Microsoft Planner

Question 17

A legal team needs to store documents with strict retention policies and eDiscovery capabilities. Which Microsoft 365 workload should they primarily use?

Accepted Answer

SharePoint Online. SharePoint Online is the Microsoft 365 workload that provides document libraries, retention labels, retention policies, and native eDiscovery (Content Search, eDiscovery cases, legal hold) capabilities. It is purpose-built for document storage and compliance, making it the correct primary workload for a legal team with strict retention and eDiscovery requirements. Retention policies configured in the Microsoft 365 compliance center apply directly to SharePoint sites and their document libraries.

Answer

Power BI

Answer

Microsoft Bookings

Answer

Microsoft Teams

Question 18

A business stakeholder asks how Microsoft 365 can help them check feature availability by plan, region, or rollout status. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Official Microsoft service descriptions and licensing documentation. The stakeholder's question is about checking feature availability by plan, region, or rollout status, which is a licensing and documentation concern. Official Microsoft service descriptions and licensing documentation (such as the Microsoft 365 Licensing Datasheets and Service Descriptions on the Microsoft 365 admin center) provide the authoritative, up-to-date matrix of which features are available in which plans, supported regions, and current rollout phases. This is the correct resource for such inquiries, as it is maintained by Microsoft and directly addresses licensing and support concepts.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 19

A help desk lead is documenting the correct Microsoft 365 approach to improve employee experience through learning, insights, goals, and engagement experiences. Microsoft 365 app or service is the best fit?

Accepted Answer

Microsoft Viva. Microsoft Viva is the correct answer because it is an integrated employee experience platform (EXP) within Microsoft 365 that explicitly combines learning (Viva Learning), insights (Viva Insights), goals (Viva Goals), and engagement (Viva Engage). This directly matches the help desk lead's requirement to improve employee experience through those four pillars, whereas the other options are single-purpose tools that do not cover the full scope.

Answer

Microsoft Forms

Answer

Microsoft Planner

Answer

Microsoft Purview Audit

Question 20

A company is deploying Microsoft 365 and needs to ensure that external sharing of sensitive documents is blocked. Which Microsoft Purview feature should they configure?

Accepted Answer

Data Loss Prevention (DLP) policies. Microsoft Purview Data Loss Prevention (DLP) policies are designed to detect and block sensitive information (credit cards, SSNs, custom sensitive types) from being shared externally across Exchange, SharePoint, OneDrive, and Teams. DLP can enforce actions like blocking external sharing, encrypting content, or notifying users, which directly addresses the requirement to prevent external sharing of sensitive documents.

Answer

Sensitivity labels

Answer

Information Barriers

Answer

Retention policies