MS-900 Practice Exam 54 — 20 Questions

Question 1

Which TWO Microsoft 365 services are specifically designed to help organizations manage and monitor data compliance?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance (A) is a purpose-built compliance solution that uses policies and machine learning to detect, triage, and remediate inappropriate or risky communications across Teams, Exchange, and other channels, making it a core data-compliance monitoring service. Microsoft Purview (E) is the overarching compliance platform that provides data mapping, classification, sensitivity labels, Data Loss Prevention, Insider Risk Management, and audit/eDiscovery capabilities for managing and monitoring compliance across the organization's data estate. Microsoft Defender for Office 365 (B) is a threat-protection service focused on phishing, malware, and zero-day attacks rather than compliance management. Microsoft Intune (C) is a mobile device and endpoint management (MDM/MAM) service for enforcing configuration and app policies, not a data-compliance monitoring tool. Microsoft Sentinel (D) is a cloud-native SIEM/SOAR platform for security analytics, threat detection, and incident response, not a dedicated compliance-management service.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Question 2

Which THREE of the following are benefits of the Microsoft 365 E5 license compared to E3?

Accepted Answer

Power BI Pro. Power BI Pro is included with Microsoft 365 E5 but not with E3, enabling advanced data visualization and analytics capabilities. This is a key differentiator for organizations requiring self-service business intelligence tools integrated with Microsoft 365.

Answer

Exchange Online

Answer

Microsoft Entra ID P1

Question 3

During requirements gathering, an IT manager says the organization must let users provision resources from a portal without provider interaction. Cloud concept or benefit best matches this requirement?

Accepted Answer

On-demand self-service. On-demand self-service is a core NIST-defined characteristic of cloud computing that allows users to provision computing resources—such as virtual machines, storage, or network capacity—automatically through a web portal or API without requiring human interaction from the service provider. This directly matches the IT manager's requirement for users to provision resources from a portal without provider interaction, making option A correct.

Answer

Data Loss Prevention (DLP)

Answer

Microsoft Planner

Answer

Sensitivity labels

Question 4

A service owner is comparing Microsoft 365 capabilities and needs to understand which security tasks Microsoft handles and which remain with the customer. Cloud concept or benefit best matches this requirement?

Accepted Answer

Shared responsibility model. The shared responsibility model defines which security tasks are handled by Microsoft (e.g., physical security, hypervisor patching) and which remain with the customer (e.g., user access management, data classification). This directly matches the service owner's need to understand the division of security responsibilities in Microsoft 365.

Answer

Microsoft Planner

Answer

Data Loss Prevention (DLP)

Answer

Sensitivity labels

Question 5

An administrator is reviewing a request from users who need to enterprise licensing options for an organization with more complex or larger-scale requirements. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 Enterprise plans. Microsoft 365 Enterprise plans (E3, E5) are designed for organizations with complex or large-scale requirements, offering advanced security, compliance, analytics, and voice capabilities beyond the Business plans. The question specifically asks about enterprise licensing options, making C the most relevant concept.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 6

A compliance administrator needs to retain mailbox content for legal investigation. Which Microsoft 365 capability is the best fit?

Accepted Answer

eDiscovery and retention capabilities in Microsoft Purview. eDiscovery and retention capabilities in Microsoft Purview are designed specifically for legal investigations, allowing compliance administrators to preserve mailbox content via legal holds, search across mailboxes, and export data for litigation. This directly meets the requirement to retain mailbox content for legal investigation, unlike the other options which serve unrelated business functions.

Answer

Microsoft Teams live events

Answer

Microsoft Bookings

Answer

OneDrive sync client

Question 7

A business stakeholder asks how Microsoft 365 can help them guide assignment of Microsoft 365 admin roles. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Least privilege. The principle of least privilege is the most relevant concept for guiding assignment of Microsoft 365 admin roles. It dictates that users should be granted only the minimum permissions necessary to perform their job functions, which directly applies to assigning admin roles to reduce security risks. This is a core security and identity concept within Microsoft 365, not a specific application or service.

Answer

Microsoft Whiteboard

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 8

A department asks for the Microsoft 365 service best suited for forms-based surveys and quizzes. Which service should they use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct service because it is specifically designed for creating forms-based surveys, quizzes, and polls. It provides real-time response tracking, automatic grading for quizzes, and seamless integration with Microsoft 365 apps like Excel and Teams, making it the ideal choice for the department's request.

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Defender for Endpoint

Question 9

During requirements gathering, an IT manager says the organization must manage users, licenses, billing, and tenant settings. Microsoft 365 licensing, admin, or support concept is most relevant?

Accepted Answer

Microsoft 365 admin center. The Microsoft 365 admin center is the centralized web portal for managing users, licenses, billing, and tenant-wide settings. It provides administrators with a single pane of glass to perform tasks such as adding or removing users, assigning licenses, viewing invoices, and configuring tenant-level policies. This directly matches the IT manager's stated requirements for managing users, licenses, billing, and tenant settings.

Answer

Microsoft Whiteboard

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 10

A project team needs to collaborate on Teams channel conversations and meetings and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Accepted Answer

Microsoft Teams. Microsoft Teams (A) is correct because it is the Microsoft 365 service that provides channel conversations, chat, and meetings, which directly satisfy the collaboration and meeting requirements. SharePoint Online document storage (B) is correct because Teams channels are backed by SharePoint Online, and SharePoint provides the co-authoring and versioned document storage for the related Office files. Microsoft Purview eDiscovery case (C) is not relevant because it is used for legal hold, search, and investigation of content, not for day-to-day collaboration or co-authoring. Exchange anti-malware policy (D) is not relevant because it protects mail flow from malicious attachments and links, not Teams conversations, meetings, or Office file co-authoring.

Answer

Microsoft Purview eDiscovery case

Answer

Exchange anti-malware policy

Question 11

A department asks for the Microsoft 365 service best suited for department document libraries with version history. Which service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct answer because it provides document libraries with built-in version history, allowing users to track, restore, and manage previous versions of documents. This feature is essential for collaboration and compliance, as it enables rollback to earlier versions and audit trails without additional configuration.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra Privileged Identity Management

Answer

Microsoft Defender for Endpoint

Question 12

Which cloud computing characteristic allows users to provision resources such as virtual machines and storage without requiring human interaction with the service provider?

Accepted Answer

On-demand self-service. On-demand self-service is the cloud characteristic that lets consumers provision computing capabilities such as VMs and storage automatically, without requiring human interaction with the service provider. This is one of the five essential characteristics defined by NIST SP 800-145. It directly matches the scenario of unilaterally provisioning resources via a portal or API.

Answer

Measured service

Answer

Resource pooling

Answer

Rapid elasticity

Question 13

A retail company is evaluating Microsoft 365 for a new subsidiary. Management wants to understand which characteristics are fundamental to cloud computing as described by the National Institute of Standards and Technology (NIST). Which two characteristics should the company include? (Choose two.)

Accepted Answer

On-demand self-service. NIST defines five essential cloud characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service and broad network access are both on that list. Dedicated hardware per tenant, unlimited free storage, and mandatory multi-year contracts are commercial or hosting concepts that are not part of the NIST definition, so they should not be included.

Answer

Mandatory multi-year contracts

Answer

Dedicated physical hardware per tenant

Answer

Unlimited storage at no cost

Question 14

A system administrator at Contoso needs to ensure that all users are required to use multi-factor authentication when accessing Microsoft 365 services. Which Microsoft 365 feature should the administrator use to enforce this requirement?

Accepted Answer

Microsoft Entra ID Conditional Access policies. Conditional Access in Microsoft Entra ID is the centralized policy engine that evaluates signals like user, device, location, and application to enforce access controls, including requiring multi-factor authentication. It is the correct choice because it directly addresses authentication requirements for Microsoft 365 services, unlike the other options which focus on email security, data protection, or mail routing.

Answer

Exchange Online mail flow rules

Answer

Microsoft Defender for Office 365 safe attachments policies

Answer

Microsoft Purview Data Loss Prevention policies

Question 15

A healthcare company must keep patient records in a specific country and wants Microsoft to guarantee that data remains within that geography. The company also needs to know which Microsoft 365 services are available in that region. Which Microsoft 365 capability should the company review?

Accepted Answer

Microsoft 365 data residency commitments. Data residency commitments specify the geographic locations where Microsoft stores customer data at rest and which services are available in each geography. The healthcare company needs that contractual and architectural assurance to keep patient records in the required country. Backup, network connectivity, and service health features address recovery, performance, and incidents, but none of them establish or document where data resides.

Answer

Microsoft 365 network connectivity principles

Answer

Microsoft 365 service health dashboard

Answer

Microsoft 365 backup and restore

Question 16

Contoso has Microsoft 365 E3 and a hybrid identity environment with Microsoft Entra Connect. Security policy requires that when a user's on-premises Active Directory account is disabled, their Microsoft 365 access must stop within minutes without an administrator manually touching the cloud account. Which Microsoft 365 capability should you rely on to meet this requirement?

Accepted Answer

Microsoft Entra Connect sync of the on-premises accountEnabled attribute. The requirement is that disabling the authoritative on-premises account must propagate to the cloud quickly. Microsoft Entra Connect continuously synchronizes the accountEnabled state from Active Directory to Microsoft Entra ID, so the next delta sync blocks cloud sign-in without administrator intervention. Controls such as risk policies, device compliance, or client-side Group Policy evaluate other signals and never look at the source AD account status.

Answer

Microsoft Entra ID Protection risk-based sign-in policies

Answer

Microsoft 365 Apps sign-in restrictions configured by using Group Policy

Answer

Conditional Access policies requiring compliant devices

Question 17

A multinational corporation uses Microsoft 365 E5. The IT team needs to provide users with a single integrated workspace that combines chat, file sharing, online meetings, and app integration, while also allowing external guests to collaborate on projects. Which Microsoft 365 service should they deploy?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct service because it delivers a unified workspace with chat, file sharing, online meetings, and app integration, and it supports guest access for external collaboration. SharePoint Online, Exchange Online, and Yammer each provide only a subset of these capabilities and cannot serve as the integrated hub described.

Answer

SharePoint Online

Answer

Exchange Online

Answer

Yammer

Question 18

A marketing team at Contoso Ltd. needs a cloud-based workspace where they can create and share interactive dashboards, reports, and datasets with colleagues without setting up any on-premises servers. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Power BI. Power BI is the Microsoft 365 service specifically designed for cloud-based business analytics, enabling users to create interactive dashboards, reports, and datasets and share them with colleagues. Viva Insights, Stream, and Sway serve different purposes—employee productivity analytics, enterprise video, and visual storytelling—and none provide the data modeling and dashboard-sharing capabilities the marketing team needs.

Answer

Microsoft Sway

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Question 19

A company's IT team needs to provide employees with a single place to access all their Microsoft 365 applications, recent documents, and personalized content from any device. Which Microsoft 365 component should they promote as the primary entry point?

Accepted Answer

Microsoft 365 home page (office.com). The Microsoft 365 home page at office.com is designed as the personalized, cross-device launchpad that aggregates all Microsoft 365 apps, recent documents, and recommended content for each user. The admin center is for administrators, Copilot is an AI assistant within apps, and SharePoint Online is a collaboration and content platform, so none of them serves as the unified end-user portal.

Answer

Microsoft 365 admin center

Answer

Microsoft SharePoint Online

Answer

Microsoft 365 Copilot

Question 20

A security administrator at Contoso wants to ensure that users can only access Microsoft 365 services from compliant devices that meet specific security requirements, such as having encryption enabled and a minimum OS version. Which Microsoft 365 feature should the administrator use?

Accepted Answer

Conditional Access policies with device compliance. Conditional Access policies with device compliance allow administrators to require that devices meet specific security conditions before accessing Microsoft 365 services. This is achieved by integrating with Microsoft Intune, which evaluates device compliance and reports the status to Microsoft Entra ID. This feature directly addresses the requirement to restrict access to compliant devices.

Answer

Microsoft Defender for Endpoint device groups

Answer

Exchange Online mobile device mailbox policies

Answer

Microsoft Purview Data Loss Prevention device policies