MS-900 Practice Exam 57 — 20 Questions

Question 1

A hospital uses Microsoft 365 E5 and needs to ensure that patient health information (PHI) is not accidentally shared externally. They want to block sharing of emails containing credit card numbers or medical record numbers. Which Microsoft Purview feature should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect and block the accidental sharing of sensitive data, such as credit card numbers and medical record numbers, via email. DLP uses deep content analysis with built-in sensitive information types (e.g., Credit Card Number, U.S. Medical Record Number) to scan emails and enforce policies that prevent external sharing. This directly addresses the hospital's requirement to protect PHI from being leaked externally.

Answer

Microsoft Purview Privileged Access Management

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Information Barriers

Question 2

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Accepted Answer

Viva Learning. Viva Learning is correct because it is a dedicated Microsoft Viva module that provides a centralized learning hub within Microsoft Teams, allowing employees to access, share, and assign training content from LinkedIn Learning, Microsoft Learn, and third-party sources. It is explicitly part of the Viva employee experience platform, not a standalone service.

Answer

Microsoft Teams

Answer

Microsoft Stream

Question 3

A marketing team needs to create a shared workspace to manage projects, store documents, and track tasks. Which Microsoft 365 service should the administrator recommend?

Accepted Answer

SharePoint Online. SharePoint Online is the correct recommendation because it provides a centralized platform for creating team sites that serve as shared workspaces. It includes document libraries for storing and co-authoring files, lists for tracking tasks, and integration with Microsoft Teams and Planner for project management, directly meeting all the stated requirements.

Answer

Microsoft Sway

Answer

Microsoft Bookings

Answer

Microsoft Stream

Question 4

A user wants to quickly set up a website for their team to share news and resources. Which Microsoft 365 app should they use?

Accepted Answer

SharePoint. SharePoint is the correct choice because it is specifically designed for creating team sites that serve as centralized hubs for sharing news, documents, and resources. With SharePoint, users can quickly provision a modern team site using pre-built templates, add web parts for news feeds and document libraries, and manage permissions for team members. This directly meets the requirement for a website to share news and resources.

Answer

Microsoft Teams

Answer

Microsoft Viva

Answer

Yammer

Question 5

An employee uses Microsoft 365 Business Basic. They need to schedule a meeting with external clients who have Gmail accounts. Which Microsoft 365 app should they use?

Accepted Answer

Outlook on the web. Outlook on the web (OWA) is the correct choice because it includes a full-featured calendar that supports scheduling meetings with external participants, including those with Gmail accounts, via standard iCalendar invitations. OWA sends an .ics file attachment in the email invitation, which Gmail can parse and add to the recipient's Google Calendar, enabling the external client to accept the meeting regardless of their email provider.

Answer

Microsoft Teams

Answer

Microsoft Bookings

Answer

Microsoft To Do

Question 6

Which TWO Microsoft 365 apps are included in the Microsoft 365 Business Basic subscription?

Accepted Answer

Microsoft Teams. Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop installations. Microsoft Teams is included as the core collaboration hub for chat, meetings, and file sharing. Microsoft Outlook (web) is also included, providing email, calendar, and contacts via a browser interface.

Answer

Microsoft Power BI Pro

Answer

Microsoft Word (desktop app)

Answer

Microsoft Purview Compliance Portal

Question 7

Your company uses Microsoft 365 Business Premium and wants to enable remote wipe of company data on employees' personal mobile devices if they are lost or stolen. Which service provides this capability?

Accepted Answer

Microsoft Intune Mobile Application Management (MAM). Microsoft Intune Mobile Application Management (MAM) enables selective remote wipe of company data from personal mobile devices without wiping personal data. This is achieved through app-level policies that can remove corporate data from managed apps (e.g., Outlook, Teams) when a device is lost or stolen, using the Intune company portal or a wipe command triggered by an administrator.

Answer

Microsoft Entra ID

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Purview Compliance Manager

Question 8

A company uses Microsoft SharePoint Online for intranet and wants to display important company announcements on the home page. Which SharePoint feature should they use?

Accepted Answer

News posts. News posts are the correct feature because they are specifically designed to display timely, engaging announcements on a SharePoint intranet home page. They support rich formatting, images, and web parts that surface news content prominently, making them ideal for company-wide communications. Unlike other options, News posts are optimized for visibility and user engagement on the home page.

Answer

Pages

Answer

Document libraries

Answer

Lists

Question 9

A user reports that they cannot schedule a meeting with external participants using Microsoft Teams. The administrator confirms that external access is enabled. What is the most likely cause?

Accepted Answer

The user does not have a license that includes Microsoft Teams. Scheduling meetings with external participants in Microsoft Teams requires the user to have a license that includes Teams, such as Microsoft 365 Business Basic or Enterprise E3. Without this license, the user cannot initiate or organize meetings, even if external access is enabled. Option D is correct because licensing is a prerequisite for using Teams features, including meeting scheduling.

Answer

The user's Exchange Online mailbox is full

Answer

The Teams client is outdated

Answer

Guest access is disabled

Question 10

A company uses Microsoft 365 E5. The security team wants to automatically investigate and remediate advanced threats across email, endpoints, and identities. Which Microsoft 365 Defender workload should they enable?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (option D) is the correct answer because it is the unified, cross-domain security solution that correlates signals across email, endpoints, identities, and cloud apps to automatically investigate and remediate advanced threats. Unlike the individual Defender workloads, Defender XDR provides integrated incident response and automated actions across all these domains, which directly matches the requirement for automatic investigation and remediation across email, endpoints, and identities.

Answer

Microsoft Defender for Identity

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Defender for Office 365

Question 11

Which THREE of the following are benefits of using Microsoft Viva?

Accepted Answer

Connects employees with company news and resources.. Microsoft Viva Connections provides a personalized dashboard that aggregates company news, resources, and communications from SharePoint, Yammer, and Stream, enabling employees to stay informed and engaged directly within Microsoft Teams. This integration reduces information silos and ensures timely access to relevant organizational content.

Answer

Detects and blocks phishing attacks.

Answer

Backs up user data automatically.

Question 12

An organization has users who frequently collaborate on documents across departments. They want to ensure that when a document is shared with external partners, the external users must authenticate using Azure AD credentials and cannot download or print the document. Which combination of Microsoft 365 features should they use?

Accepted Answer

SharePoint external sharing with 'Specific people' and Microsoft Purview Information Protection with 'View Only' permission. Option C is correct because SharePoint 'Specific people' external sharing restricts access to explicitly invited users who must authenticate with Azure AD credentials, while Microsoft Purview Information Protection's 'View Only' permission prevents downloading, printing, and copying of the document. This combination meets both requirements: enforced authentication and restricted document actions.

Answer

Microsoft Teams guest access and Microsoft Defender for Cloud Apps session policies

Answer

OneDrive sharing settings with 'Anyone' links and Microsoft Purview Data Loss Prevention

Answer

SharePoint anonymous sharing links and Microsoft Purview Sensitivity Labels

Question 13

Refer to the exhibit. You are reviewing a Conditional Access policy in Microsoft Entra ID. What will this policy do?

Accepted Answer

Blocks access to Office 365 apps when the sign-in risk is high. The exhibit shows a Conditional Access policy configured with the condition 'Sign-in risk: High' and the control 'Block access'. This combination means that when Microsoft Entra ID detects a high-risk sign-in (e.g., from an anonymous IP address or compromised credentials), access to the targeted cloud apps is denied. The policy specifically targets Office 365 apps (as indicated in the 'Cloud apps or actions' assignment), so it blocks access to those apps when the sign-in risk is high.

Answer

Allows access but logs the sign-in risk

Answer

Requires multi-factor authentication for high-risk sign-ins

Answer

Blocks access to all cloud apps when sign-in risk is high

Question 14

Which THREE Microsoft 365 services can be used to store and manage files in the cloud?

Accepted Answer

OneDrive for Business. OneDrive for Business is a cloud storage service that allows users to store, sync, and share files individually. It is part of Microsoft 365 and provides personal storage with up to 1 TB per user, integrating with Office apps for real-time co-authoring.

Answer

Power BI

Answer

Exchange Online

Question 15

A user wants to schedule a meeting with colleagues and automatically record the meeting for later viewing. Which Microsoft 365 apps should they use?

Accepted Answer

Microsoft Outlook and Microsoft Teams. Microsoft Outlook is used to schedule the meeting and send invitations, while Microsoft Teams provides the platform to conduct the online meeting with the capability to automatically record the session. The recording is saved to Microsoft Stream (or OneDrive/SharePoint depending on the version), but the core apps for scheduling and recording are Outlook and Teams.

Answer

Microsoft SharePoint and Microsoft Viva Topics

Answer

Microsoft Viva Engage and Microsoft Forms

Answer

Microsoft OneDrive and Microsoft Stream

Question 16

An organization uses Microsoft 365 and wants to automatically detect and remediate security incidents across identities, endpoints, and cloud apps. Which Microsoft 365 service should they deploy?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically detects and remediates security incidents across identities, endpoints, and cloud apps. It correlates signals from Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps to deliver automated investigation and response, aligning directly with the scenario's requirement for holistic incident management.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Answer

Microsoft Defender for Office 365

Question 17

A company deploys Microsoft 365 Business Premium. The IT team wants to enable employees to sign in using a mobile app without passwords. Which app should they configure?

Accepted Answer

Microsoft Authenticator. Microsoft Authenticator is the correct app because it enables passwordless sign-in for Microsoft 365 Business Premium users via FIDO2-based phone sign-in or number matching. It allows employees to authenticate using biometrics or a PIN, eliminating the need for a password during sign-in.

Answer

Microsoft Intune

Answer

Microsoft Entra ID

Answer

Microsoft Copilot

Question 18

Which TWO Microsoft 365 services can be used to create and manage tasks?

Accepted Answer

Microsoft Planner. Microsoft Planner is a task management tool integrated with Microsoft 365 that allows users to create, assign, and track tasks within a visual Kanban-style board. It is designed for team collaboration, where each task can include due dates, checklists, attachments, and comments, making it a correct answer for creating and managing tasks.

Answer

Power Automate

Answer

Microsoft Word

Answer

SharePoint

Question 19

Your organization uses Microsoft 365 E5 and experiences a security incident where a user's account is compromised. You need to immediately prevent the attacker from accessing Microsoft 365 services while preserving the user's data for investigation. Which action should you take?

Accepted Answer

Block sign-in for the user in Microsoft Entra ID. Blocking sign-in for the user in Microsoft Entra ID immediately prevents the attacker from authenticating to any Microsoft 365 service, while the user's data remains intact in Exchange Online, SharePoint, and OneDrive for forensic analysis. This action does not delete or alter any data, preserving the full investigation trail.

Answer

Delete the user account from Microsoft Entra ID

Answer

Revoke the user's sessions using Microsoft Entra ID

Answer

Reset the user's password

Question 20

Your organization is adopting Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on organizational data that the user has permission to access. Which Microsoft 365 feature ensures this?

Accepted Answer

Microsoft Graph permissions. Microsoft Graph permissions are the correct answer because Copilot uses Microsoft Graph to access organizational data. When a user asks a question, Copilot queries the Microsoft Graph API, which enforces the user's existing permissions (e.g., from Entra ID and SharePoint) to ensure responses are based only on data the user is authorized to see. This is the core mechanism that ties Copilot's responses to the user's access rights.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra ID

Answer

Microsoft Intune