MS-900 Describe cloud concepts Practice Test 11 — 15 Questions

Question 1

Refer to the exhibit. A Contoso user tries to send an email containing a credit card number to an external recipient. What will happen?

Accepted Answer

The email is blocked and the user receives a notification.. The DLP policy enforces blocking of credit card numbers. Option B is wrong because the policy is enforced, not just audit. Option C is wrong because it blocks, not removes. Option D is wrong because it blocks, not quarantines.

Answer

The credit card number is removed and the email is sent.

Answer

The email is sent and an alert is generated for admin.

Answer

The email is delivered to the external recipient but placed in quarantine.

Question 2

A retail company experiences sudden traffic spikes during holiday sales. Which cloud characteristic would best help them handle this without overprovisioning?

Accepted Answer

Rapid elasticity. (Rapid elasticity) is correct because it enables cloud resources to automatically scale up or down to handle sudden traffic spikes without the need for overprovisioning. Option A (Broad network access) refers to accessibility over the network, not scaling. Option B (Measured service) is about metering and billing for usage. Option D (Resource pooling) involves multi-tenant sharing of resources.

Answer

Broad network access

Answer

Measured service

Answer

Resource pooling

Question 3

A multinational corporation needs to design a cloud strategy that allows them to keep sensitive financial data on-premises while using public cloud for customer-facing apps. Which deployment model should they adopt?

Accepted Answer

Hybrid cloud. A hybrid cloud combines on-premises infrastructure with public cloud services, connected so workloads and data can span both environments. Keeping sensitive financial data on-premises for compliance while running customer-facing apps in the public cloud is the textbook hybrid scenario, since it preserves data residency and control where required while gaining public cloud elasticity elsewhere.

Answer

Private cloud

Answer

Public cloud

Answer

Multi-cloud

Question 4

A user wants to access company email and documents from any device, anywhere. Which cloud model is Microsoft 365?

Accepted Answer

Software as a Service (SaaS). Microsoft 365 is a SaaS offering because Microsoft hosts and manages the applications (Exchange Online, SharePoint Online, Teams, Office apps) and the underlying infrastructure, and customers access them over the internet via subscription. Users consume the software without managing servers, patching, or platform configuration. This matches the SaaS model where the provider delivers a complete, ready-to-use application.

Answer

Platform as a Service (PaaS)

Answer

Infrastructure as a Service (IaaS)

Answer

Desktop as a Service (DaaS)

Question 5

Which TWO are characteristics of the public cloud deployment model?

Accepted Answer

Services are owned by a third-party provider. Option A is correct because in the public cloud deployment model the cloud services and underlying infrastructure are owned, managed, and operated by a third-party cloud provider such as AWS, Microsoft Azure, or Google Cloud, and delivered to customers over the internet. Option E is correct because public cloud infrastructure is multi-tenant: compute, storage, and network resources are pooled and shared among many different organizations (tenants), with logical isolation enforced by the provider. Option B is incorrect because use by a single organization describes the private cloud model, not the public cloud. Option C is incorrect because public cloud scalability is effectively elastic and limited only by the provider's vast resource pools, not by a customer's existing hardware. Option D is incorrect because on-premises infrastructure is characteristic of private or traditional data-center deployments, whereas public cloud infrastructure resides in the provider's data centers.

Answer

Services are used by a single organization

Answer

Scalability is limited to existing hardware

Answer

Infrastructure is located on-premises

Question 6

Which THREE are benefits of using cloud services compared to on-premises infrastructure?

Accepted Answer

Elasticity to scale resources up or down automatically. Option B is correct because cloud providers offer elasticity, allowing resources to automatically scale up or down based on demand, which is difficult to achieve with fixed on-premises hardware. Option C is correct because cloud services are built on redundant, geographically distributed infrastructure that provides high availability and fault tolerance beyond what most on-premises environments can afford. Option D is correct because cloud providers offer built-in disaster recovery capabilities, such as cross-region replication and backup services, without requiring organizations to build and maintain a secondary site. Option A is incorrect because limited scalability due to resource constraints describes an on-premises limitation, not a cloud benefit. Option E is incorrect because cloud services shift spending to operational expenditure (OpEx), but they do not eliminate capital expenditure entirely, as organizations may still incur upfront costs for devices, migration, or reserved capacity.

Answer

Limited scalability due to resource constraints

Answer

Capital expenditure (CapEx) is eliminated

Question 7

Which TWO scenarios are best suited for a hybrid cloud deployment?

Accepted Answer

Extending on-premises Active Directory to Microsoft Entra ID. Option A is correct because extending on-premises Active Directory to Microsoft Entra ID is a classic hybrid cloud identity scenario: it keeps authoritative authentication on-premises while using a cloud identity provider (via Microsoft Entra Connect / password hash sync or federation) for cloud services, which inherently spans both environments. Option B is correct because cloud bursting is a defining hybrid cloud use case: an on-premises application overflows to public cloud compute during peak demand, requiring integration and orchestration between the private and public tiers. Option C is not specific to hybrid cloud—archival data is typically a public cloud storage or cold-storage (e.g., Azure Archive, S3 Glacier) decision and does not require an on-premises component. Option D is not inherently hybrid; a high-traffic public website can be hosted entirely in public cloud without any private infrastructure. Option E is not hybrid cloud either—legacy applications requiring physical hardware are generally kept on-premises or in dedicated/private hosting, not deployed across a hybrid model.

Answer

Storing archival data that is rarely accessed

Answer

Hosting a public-facing website with high traffic

Answer

Running a legacy application that requires physical hardware

Question 8

Refer to the exhibit. What is the purpose of the 'classification' property in this Microsoft Purview sensitivity label policy?

Accepted Answer

To specify the sensitivity level of the content. In Microsoft Purview sensitivity labels, the 'classification' property (sometimes labeled 'Sensitivity level' in the label definition) is what determines the sensitivity tier the label represents — for example, Public, General, Confidential, or Highly Confidential. It drives how the label is presented to users and how downstream policies (DLP, auto-labeling) interpret the content's sensitivity. It is not the mechanism for retention, encryption, or permissions.

Answer

To set the retention period for the labeled content

Answer

To define encryption settings for the label

Answer

To define user permissions for accessing the content

Question 9

Refer to the exhibit. An administrator is configuring a new Azure subscription with this ARM template snippet for Microsoft Defender for Cloud. What will be the immediate result?

Accepted Answer

The subscription will be monitored for security issues and receive recommendations. The ARM template snippet enables Microsoft Defender for Cloud at the subscription level. By default, this activates the foundational Cloud Security Posture Management (CSPM) capabilities, which continuously assess the subscription's resources against security baselines and generate actionable security recommendations. This does not automatically onboard VMs to Defender for Endpoint or apply the highest security tier; it simply enables monitoring and recommendations.

Answer

All virtual machines will be automatically onboarded to Microsoft Defender for Endpoint

Answer

The subscription will be protected by the highest security tier

Answer

No changes will occur until a security policy is manually created

Question 10

A company is migrating its on-premises workloads to Microsoft 365. The IT team wants to minimize latency for users in Europe while ensuring data residency requirements are met. Which cloud concept should the team consider?

Accepted Answer

Geography. Geography in Microsoft 365 refers to a defined geographic boundary (e.g., Europe) that contains one or more Azure regions where data is stored and processed at rest. By selecting a Geography, the IT team ensures that user data remains within European borders to meet data residency requirements, while the proximity of the data centers to users in Europe minimizes network latency. This concept directly addresses both performance and compliance needs without requiring complex hybrid configurations.

Answer

Hybrid deployment

Answer

Redundancy

Answer

Multi-tenancy

Question 11

Contoso Ltd. is a global consulting firm with 5,000 employees. They use Microsoft 365 E5 and have recently deployed Microsoft Copilot for Microsoft 365 to enhance productivity. The IT team wants to ensure that users' interactions with Copilot are compliant with the company's data retention policies. They need to retain all Copilot interactions for 7 years for legal reasons. Which Microsoft Purview solution should the IT team implement?

Accepted Answer

Create retention policies for Copilot interactions. Retention policies in Microsoft Purview can be applied to Copilot interactions stored in Exchange Online and SharePoint Online to retain them for 7 years. Option A is incorrect because sensitivity labels classify data but do not enforce retention. Option C is incorrect because eDiscovery is for searching and exporting content, not setting retention. Option D is incorrect because Data Loss Prevention (DLP) policies prevent data loss but do not retain data for legal hold.

Answer

Apply sensitivity labels to Copilot data

Answer

Set up eDiscovery cases for Copilot data

Answer

Configure Data Loss Prevention (DLP) policies

Question 12

WideWorldImporters (WWI) is a retail company with 2,000 employees using Microsoft 365 Business Premium. They have a mix of Windows 10 and Windows 11 devices managed by Microsoft Intune. WWI wants to deploy a new line-of-business (LOB) app to all devices. The app is a Win32 app packaged as an .intunewin file. The IT administrator needs to ensure the app is installed automatically on all devices within 24 hours. Which deployment method should the administrator use?

Accepted Answer

Add the app as a required deployment for all devices. A required deployment in Intune forces the app to be installed automatically on all targeted devices without user interaction. This is the correct choice for ensuring the Win32 app is installed on all devices within 24 hours, as Intune will push the installation and retry as needed. Available deployments require users to install the app themselves, which does not guarantee automatic installation.

Answer

Use Azure AD Application Proxy to publish the app

Answer

Add the app as an available deployment for all users

Answer

Publish the app to Microsoft Store for Business and sync with Intune

Question 13

A small accounting firm wants its staff to work from home using Microsoft 365. The partners want to avoid buying new servers and want predictable monthly costs instead of large upfront hardware purchases. Which cloud benefit does this describe?

Accepted Answer

CapEx to OpEx shift. Cloud services replace upfront capital purchases with subscription-based operating expenses, which is the CapEx-to-OpEx shift. The accounting firm avoids buying servers and pays predictable monthly fees, directly matching that benefit. High availability, elasticity, and disaster recovery are real cloud advantages, but they address uptime, scaling, and recovery rather than the financial model the partners want.

Answer

High availability

Answer

Disaster recovery

Answer

Elasticity

Question 14

A healthcare company must keep patient records in a specific country and wants Microsoft to guarantee that data remains within that geography. The company also needs to know which Microsoft 365 services are available in that region. Which Microsoft 365 capability should the company review?

Accepted Answer

Microsoft 365 data residency commitments. Data residency commitments specify the geographic locations where Microsoft stores customer data at rest and which services are available in each geography. The healthcare company needs that contractual and architectural assurance to keep patient records in the required country. Backup, network connectivity, and service health features address recovery, performance, and incidents, but none of them establish or document where data resides.

Answer

Microsoft 365 network connectivity principles

Answer

Microsoft 365 service health dashboard

Answer

Microsoft 365 backup and restore

Question 15

A retail company is evaluating Microsoft 365 for a new subsidiary. Management wants to understand which characteristics are fundamental to cloud computing as described by the National Institute of Standards and Technology (NIST). Which two characteristics should the company include? (Choose two.)

Accepted Answer

On-demand self-service. NIST defines five essential cloud characteristics: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service and broad network access are both on that list. Dedicated hardware per tenant, unlimited free storage, and mandatory multi-year contracts are commercial or hosting concepts that are not part of the NIST definition, so they should not be included.

Answer

Mandatory multi-year contracts

Answer

Dedicated physical hardware per tenant

Answer

Unlimited storage at no cost