MS-900 Practice Exam 61 — 20 Questions

Question 1

A company is deploying Microsoft Teams Rooms for its meeting rooms. They need to ensure that room calendars are automatically updated when a meeting is booked via Outlook. Which Microsoft 365 service enables this integration?

Accepted Answer

Exchange Online. Exchange Online is the correct answer because it provides the mailbox and calendar infrastructure that Microsoft Teams Rooms relies on. When a meeting is booked via Outlook, the Exchange Online calendar processes the booking and automatically updates the room's calendar, enabling the Teams Rooms device to display the meeting details. This integration uses the Exchange Web Services (EWS) or REST APIs to synchronize calendar events between Outlook and the room resource mailbox.

Answer

Microsoft Intune

Answer

Microsoft Teams

Answer

SharePoint Online

Question 2

A company uses Microsoft Forms to collect customer feedback. They want to automatically analyze sentiment from the responses using AI. Which Microsoft 365 service can integrate with Forms for this purpose?

Accepted Answer

Power Automate. Power Automate (D) is the correct service because it can connect Microsoft Forms to Azure AI services (e.g., Azure Cognitive Services Text Analytics) to automatically analyze sentiment from form responses. When a new response is submitted, a Power Automate flow triggers, sends the response text to the AI sentiment analysis API, and stores or reports the result—all without manual intervention.

Answer

Power BI

Answer

SharePoint Online

Answer

Azure Logic Apps

Question 3

Which THREE Microsoft 365 services are part of the Microsoft Defender XDR suite?

Accepted Answer

Microsoft Defender for Cloud Apps. Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, email, and cloud apps. Microsoft Defender for Cloud Apps is a core component of this suite, providing visibility and control over cloud application usage, threat detection, and data protection across SaaS and PaaS environments. It integrates directly with other Defender components to enable cross-domain incident correlation and automated response.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Sentinel

Question 4

Refer to the exhibit. A SharePoint admin views site properties in JSON format. What type of site is this?

Accepted Answer

Team site (group-connected). The JSON output includes the 'GroupId' property, which is a GUID that uniquely identifies the Microsoft 365 Group associated with the site. This property is only present on team sites that are connected to a Microsoft 365 Group (group-connected team sites). Communication sites and classic team sites do not have a GroupId, and hub sites are a site association feature, not a site template.

Answer

Communication site

Answer

Classic team site

Answer

Hub site

Question 5

A company uses Microsoft 365 Copilot to summarize a long email thread. Where does Copilot retrieve the email content from?

Accepted Answer

Exchange Online. Microsoft 365 Copilot retrieves email content directly from Exchange Online, which is the Microsoft 365 service that stores and manages mailboxes, emails, and calendar items. When summarizing a long email thread, Copilot accesses the user's mailbox via Exchange Web Services (EWS) or the Microsoft Graph API, which provides programmatic access to email data. This allows Copilot to read the thread's messages and generate a concise summary without needing to store or index the content elsewhere.

Answer

SharePoint Online

Answer

OneDrive for Business

Answer

Microsoft Viva Topics

Question 6

A company uses Microsoft Intune to manage devices. They want to deploy a custom line-of-business (LOB) app to Windows 10 devices that are not enrolled in Intune but are joined to Azure AD. Which deployment method should they use?

Accepted Answer

Deploy the app as a Microsoft Store for Business app and assign to Azure AD-joined devices.. Option A is correct because Microsoft Store for Business allows you to deploy apps to Azure AD-joined devices that are not enrolled in Intune. The app can be assigned directly to Azure AD-joined devices via the Store for Business portal, which uses the Azure AD identity to push the app without requiring Intune enrollment.

Answer

Use sideloading by enabling developer mode on each device.

Answer

Use Intune to deploy the app as a line-of-business app.

Answer

Use Group Policy to deploy the app via Active Directory.

Question 7

A company uses Microsoft 365 and wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and apply encryption when shared externally. Which solution should they use?

Accepted Answer

Microsoft Purview Information Protection with auto-labeling. Microsoft Purview Information Protection with auto-labeling is the correct solution because it uses trainable classifiers or exact data match (EDM) to detect sensitive data types like credit card numbers, automatically apply a 'Highly Confidential' sensitivity label, and enforce encryption when the document is shared externally. This capability is built into Microsoft 365 compliance center and integrates with sensitivity labels to protect data at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 8

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

Accepted Answer

Microsoft Purview Information Protection with sensitivity labels and SharePoint Online. Option B is correct because Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Answer

SharePoint Online External Sharing and Microsoft Entra B2B

Answer

Microsoft Entra B2B collaboration with Conditional Access

Answer

Microsoft Teams with guest access and sharing permissions

Question 9

Refer to the exhibit. An admin configures these two Conditional Access policies in Microsoft Entra ID. A user signs in from a new location with a device that is not compliant and is assigned a high risk level by identity protection. What will happen to the user's sign-in?

Accepted Answer

The user is blocked from signing in.. The first Conditional Access policy blocks all access for users assigned a high risk level. Since the user is assigned a high risk level by Identity Protection, this policy is triggered first, and because Conditional Access policies are evaluated in order and the first applicable policy that results in a block will prevent further evaluation, the user is blocked from signing in. The second policy requiring MFA for non-compliant devices is never evaluated because the block policy takes precedence.

Answer

The user is granted access because the second policy requires MFA.

Answer

The user is prompted for MFA due to the second policy.

Answer

The user is allowed access but with session restrictions.

Question 10

A multinational organization uses Microsoft 365 and wants to comply with data residency requirements. They need to ensure that data for European users stays within the European Union. Which Microsoft 365 feature should they configure?

Accepted Answer

Configure multi-geo capabilities in SharePoint Online and OneDrive.. Multi-Geo capabilities in SharePoint Online and OneDrive allow organizations to provision and store data at rest in specific geographic locations, such as the European Union, to meet data residency requirements. This feature enables tenant administrators to define a preferred data location for users, ensuring their content remains within the EU boundary.

Answer

Create retention policies for EU users.

Answer

Set conditional access policies to restrict access from outside EU.

Answer

Use data loss prevention policies to block data movement.

Question 11

A multinational organization has a Microsoft 365 E5 subscription for 10,000 users. Some users in a subsidiary require only email and basic office apps. The IT department wants to reduce costs by reassigning licenses without losing any existing functionality for those users. What is the most cost-effective licensing strategy?

Accepted Answer

Downgrade those users to Microsoft 365 E3 licenses. Option B is correct because Microsoft 365 E3 provides the same core functionality as E5—Exchange Online, SharePoint, Teams, and desktop Office apps—but lacks E5's advanced security and analytics features (e.g., Microsoft Defender for Office 365 Plan 2, Microsoft Purview, Power BI Pro). Downgrading users who need only email and basic Office apps to E3 reduces per-user licensing cost while preserving all required functionality, making it the most cost-effective strategy.

Answer

Keep all users on E5 but reduce the number of licenses

Answer

Switch to Microsoft 365 E1 licenses for those users

Answer

Assign Microsoft 365 Business Basic licenses to those users

Question 12

Your organization uses Microsoft 365 E5 licenses and wants to implement a data loss prevention (DLP) policy that blocks sharing of credit card numbers in email. Which Microsoft 365 admin center should you use to create and manage this DLP policy?

Accepted Answer

Microsoft Purview compliance portal. The Microsoft Purview compliance portal is the correct admin center for creating and managing Data Loss Prevention (DLP) policies because it provides the unified compliance management interface for data protection, including DLP for Exchange Online email. DLP policies that block sharing of sensitive information like credit card numbers are configured under the 'Data loss prevention' section within the Purview portal, which leverages built-in sensitive information types and rules to enforce actions such as blocking email transmission.

Answer

Microsoft Security Center

Answer

Microsoft Entra admin center

Answer

Microsoft 365 admin center

Question 13

The exhibit shows a Microsoft Purview auto-labeling policy configuration. A user uploads a document containing a credit card number to a SharePoint Online site. The document does not get automatically labeled. Which is the most likely reason?

Accepted Answer

The document was uploaded before the policy was published.. Option B is correct because auto-labeling policies in Microsoft Purview apply labels to documents that are newly created or modified after the policy is published. Documents uploaded before the policy's publication date are not retroactively scanned or labeled unless a separate manual or scheduled labeling job is triggered. Since the user uploaded the document before the policy was published, it falls outside the policy's scope.

Answer

The credit card number does not meet the minimum confidence threshold of 75.

Answer

The policy is configured to apply to Exchange Online, not SharePoint.

Answer

The document is a PDF file, and auto-labeling only supports Office documents.

Question 14

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Answer

Microsoft Teams

Answer

Microsoft Power Apps

Answer

Microsoft OneDrive

Question 15

A user accidentally deletes a critical file from their OneDrive for Business. The IT admin needs to restore the file. What is the maximum number of days that OneDrive for Business retains deleted files by default for users without a retention policy?

Accepted Answer

93 days. By default, OneDrive for Business retains deleted files in the recycle bin for 93 days. This includes both the first-stage recycle bin (30 days) and the second-stage recycle bin (an additional 63 days), totaling 93 days before permanent deletion. This default retention applies when no specific retention policy or legal hold is configured.

Answer

30 days

Answer

60 days

Answer

183 days

Question 16

Which TWO Microsoft 365 services can be used to provide secure remote access to on-premises applications without requiring a VPN?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications by publishing them through an external endpoint in Azure AD, without requiring a VPN. It works by establishing outbound connections from the on-premises Application Proxy connector to the Azure AD service, which then proxies user requests. This eliminates the need to open inbound firewall ports or maintain VPN infrastructure, making it ideal for remote access to legacy apps.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 17

A small business with 10 employees wants to use professional email with custom domain, web versions of Office apps, and 1 TB of cloud storage per user. Which Microsoft 365 plan meets these requirements?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides professional email with a custom domain (Exchange Online), web versions of Office apps (Office for the web), and 1 TB of cloud storage per user (OneDrive for Business). This plan is designed for small businesses needing core productivity and communication tools at a lower cost, without desktop Office installations.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 E3

Answer

Microsoft 365 Business Standard

Question 18

Refer to the exhibit. An IT administrator is using Microsoft Intune to assign Microsoft 365 Apps for Enterprise to a group called Contoso-Sales. The exhibit shows a JSON snippet from the Intune deployment configuration. Based on the snippet, what is the most likely outcome?

Accepted Answer

The app will be automatically installed on all devices in the Contoso-Sales group.. The JSON snippet shows an assignment with 'intent' set to 'Required' and 'targetGroupId' pointing to the Contoso-Sales group. In Microsoft Intune, a 'Required' assignment for a mobile app (like Microsoft 365 Apps for Enterprise) triggers automatic installation on all targeted devices without user intervention, making option A correct.

Answer

The app will be excluded from installation for the Contoso-Sales group.

Answer

The app will be available for users in the group to install from Company Portal.

Answer

The app will be assigned but requires user approval before installation.

Question 19

A large enterprise needs to enforce that all documents containing financial data are automatically classified and encrypted when shared externally. Which combination of Microsoft 365 services should be used?

Accepted Answer

Microsoft Purview Information Protection and Microsoft Defender for Cloud Apps. Option C is correct because Microsoft Purview Information Protection provides the classification and labeling capabilities to automatically identify documents containing financial data, while Microsoft Defender for Cloud Apps enables policy-based encryption and protection controls when those documents are shared externally. Together, they enforce data loss prevention (DLP) by applying sensitivity labels that trigger encryption upon external sharing, meeting the enterprise requirement.

Answer

Microsoft Forms and Microsoft Stream

Answer

Microsoft Sentinel and Microsoft Defender XDR

Answer

Microsoft Intune and Microsoft Entra ID

Question 20

A multinational organization uses Microsoft 365 E5 and needs to ensure compliance with data residency requirements for email and documents stored in Exchange Online and SharePoint Online. Which THREE services or features can help administrators enforce data location policies?

Accepted Answer

Multi-Geo Capabilities for SharePoint and OneDrive. Multi-Geo Capabilities for SharePoint and OneDrive (Option A) allows administrators to provision and store data at rest in specified geographic locations, ensuring compliance with data residency requirements. This feature enables a tenant to have multiple satellite geographies where content is stored, while the central location remains the primary data residency.

Answer

Microsoft Bookings

Answer

Microsoft Entra ID