MS-900 Describe Microsoft 365 apps and services Practice Test 12 — 15 Questions

Question 1

A sales team frequently collaborates on proposals stored in Microsoft 365. They want to use an AI-powered tool to draft sections based on previous winning proposals. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Copilot for Microsoft 365. Microsoft Copilot for Microsoft 365 is the correct choice because it integrates large language models directly into the Microsoft 365 productivity apps, including Word, Excel, and PowerPoint. It can analyze existing content—such as previous winning proposals stored in SharePoint or OneDrive—and generate new draft sections based on that data, using natural language prompts. This makes it the ideal AI-powered tool for collaborative proposal writing.

Answer

Microsoft Syntex

Answer

Microsoft Viva Topics

Answer

Microsoft Power Automate

Question 2

A user receives a suspicious email with a link. They report it using the built-in Microsoft 365 reporting tool. Which service will analyze the reported message?

Accepted Answer

Microsoft Defender for Office 365. Microsoft Defender for Office 365 (MDO) includes the built-in reporting tool that allows users to report suspicious emails directly from Outlook. When a user submits a message via this tool, it is automatically routed to the Microsoft 365 Defender portal's Submissions page, where it is analyzed by MDO's threat protection engines, including detonation in the sandbox environment for URLs and attachments. This analysis determines whether the message is malicious, spam, or a false positive, and updates the tenant's filtering policies accordingly.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Answer

Microsoft Defender XDR

Question 3

Your organization uses Microsoft 365 E5 and wants to implement a solution that automatically detects and protects sensitive data in SharePoint Online, OneDrive, and Exchange Online. Which Microsoft 365 service should you configure?

Accepted Answer

Microsoft Purview Information Protection. Option B is correct because Microsoft Purview Information Protection includes data classification and labeling that applies across these workloads. Option A is wrong because Microsoft Defender for Cloud Apps is for cloud app security, not direct data protection in these services. Option C is wrong because Microsoft Intune is for device management. Option D is wrong because Microsoft 365 Copilot is an AI assistant, not a data protection tool.

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft 365 Copilot

Answer

Microsoft Intune

Question 4

A company needs to provide external partners with access to a specific SharePoint Online site without granting them access to the entire tenant. Which approach should the administrator use?

Accepted Answer

Configure SharePoint Online external sharing and invite partners as authenticated users. Option A is correct because SharePoint Online external sharing allows administrators to invite external users as authenticated guests who can access only the specific site they are invited to, without gaining access to the entire tenant. This is achieved by configuring site-level sharing settings to 'New and existing guests' and sending an invitation that requires the external partner to authenticate with a Microsoft account or Azure AD credentials, ensuring granular access control.

Answer

Create an Azure AD B2C tenant for partners

Answer

Use anonymous sharing links for the site

Answer

Add partners as guests in Microsoft Teams and share the site from Teams

Question 5

A user wants to schedule a meeting with colleagues and automatically find a time that works for everyone. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Outlook. Microsoft Outlook includes the Scheduling Assistant feature, which uses free/busy data from the Exchange Online calendar to automatically suggest meeting times that work for all attendees. This is the correct app for scheduling meetings with colleagues because it directly integrates with the organization's calendar system to find mutual availability.

Answer

Microsoft Bookings

Answer

Microsoft Teams

Answer

Microsoft Viva Insights

Question 6

Your organization uses Microsoft 365 and wants to ensure that only managed devices can access corporate email in Exchange Online. Which conditional access policy setting should you configure?

Accepted Answer

Require device to be marked as compliant. Option A is correct because the 'Require device to be marked as compliant' setting in a Conditional Access policy integrates with Microsoft Intune to enforce that only devices meeting compliance policies (e.g., encryption, OS version, jailbreak detection) can access Exchange Online. This ensures corporate email is accessible only from managed, trusted devices, directly addressing the requirement.

Answer

Require approved client app

Answer

Require device to be joined to Azure AD

Answer

Require multi-factor authentication

Question 7

A marketing team wants to create a centralized repository for brand assets, such as logos and templates, that can be accessed by all employees. Which Microsoft 365 service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it is designed as a cloud-based document management and storage platform that supports centralized repositories with granular permission controls. It allows the marketing team to create a dedicated site or document library for brand assets, enabling all employees to access, share, and collaborate on logos and templates while maintaining version history and compliance policies.

Answer

Microsoft Stream

Answer

OneDrive for Business

Answer

Microsoft Lists

Question 8

Your company is deploying Microsoft 365 Copilot and wants to ensure that sensitive data in emails and documents is not inadvertently exposed via Copilot responses. Which Microsoft 365 capability should you implement?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) is the correct choice because it is specifically designed to identify, monitor, and automatically protect sensitive data (e.g., credit card numbers, PII, or custom patterns) across Microsoft 365 services, including emails and documents. When integrated with Microsoft 365 Copilot, DLP policies can prevent Copilot from including sensitive information in its responses by enforcing real-time content checks and blocking or warning users before exposure occurs.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Purview Customer Lockbox

Question 9

A user needs to create a form to collect feedback from customers. The responses should be automatically stored in an Excel spreadsheet in OneDrive. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct app because it is specifically designed for creating surveys, quizzes, and feedback forms, and it natively integrates with Excel to automatically store responses in a spreadsheet hosted on OneDrive. This meets the user's requirement without additional configuration or custom development.

Answer

Microsoft Lists

Answer

Microsoft Power Apps

Answer

Microsoft Sway

Question 10

Which TWO Microsoft 365 services can be used to create and manage chatbots that use AI to answer user questions?

Accepted Answer

Microsoft Copilot Studio. Microsoft Copilot Studio (formerly Power Virtual Agents) is a low-code platform for creating conversational AI chatbots that can answer user questions using natural language processing and generative AI. It integrates with Microsoft 365 and allows you to build, test, and deploy chatbots without extensive coding.

Answer

Microsoft Forms

Answer

Microsoft Viva Topics

Answer

Microsoft Power Automate

Question 11

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Accepted Answer

Viva Learning. Viva Learning is correct because it is a dedicated Microsoft Viva module that provides a centralized learning hub within Microsoft Teams, allowing employees to access, share, and assign training content from LinkedIn Learning, Microsoft Learn, and third-party sources. It is explicitly part of the Viva employee experience platform, not a standalone service.

Answer

Microsoft Teams

Answer

Microsoft Stream

Question 12

Which TWO Microsoft 365 apps are included in the Microsoft 365 Business Basic subscription?

Accepted Answer

Microsoft Teams. Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop installations. Microsoft Teams is included as the core collaboration hub for chat, meetings, and file sharing. Microsoft Outlook (web) is also included, providing email, calendar, and contacts via a browser interface.

Answer

Microsoft Power BI Pro

Answer

Microsoft Word (desktop app)

Answer

Microsoft Purview Compliance Portal

Question 13

Refer to the exhibit. You are reviewing a Microsoft Defender for Cloud Apps access policy configuration. What does this policy do?

Accepted Answer

Blocks access from the specified IP range to the SharePoint site and prevents downloads. Option C is correct. The policy is enabled, targets a specific SharePoint site, blocks downloads, and is set to 'Block' access type with an IP range. This means access from the specified IP range is blocked. Option A is wrong because it allows access from all IPs except the range. Option B is wrong because it does not allow downloads. Option D is wrong because the policy is not disabled.

Answer

Allows access but prevents downloads from the specified IP range

Answer

Allows access to the SharePoint site only from the specified IP range

Answer

Disables the policy for the SharePoint site

Question 14

Refer to the exhibit. You are reviewing a role definition in Microsoft Purview compliance portal. Which actions can a user assigned this role perform?

Accepted Answer

Manage compliance and data governance tasks in Microsoft Purview. The question refers to a role definition in the Microsoft Purview compliance portal. The Compliance Administrator role (or a custom role with equivalent permissions) is designed specifically to manage compliance and data governance tasks, such as data classification, data loss prevention (DLP), eDiscovery, and retention policies. Option A correctly identifies this scope, as Purview roles do not extend to identity management or security operations in other portals.

Answer

Manage user accounts in Microsoft Entra ID

Answer

Manage security settings in Microsoft Defender XDR

Answer

View only compliance reports without making changes

Question 15

Refer to the exhibit. You are reviewing a Conditional Access policy in Microsoft Entra ID. What will this policy do?

Accepted Answer

Blocks access to Office 365 apps when the sign-in risk is high. The exhibit shows a Conditional Access policy configured with the condition 'Sign-in risk: High' and the control 'Block access'. This combination means that when Microsoft Entra ID detects a high-risk sign-in (e.g., from an anonymous IP address or compromised credentials), access to the targeted cloud apps is denied. The policy specifically targets Office 365 apps (as indicated in the 'Cloud apps or actions' assignment), so it blocks access to those apps when the sign-in risk is high.

Answer

Allows access but logs the sign-in risk

Answer

Requires multi-factor authentication for high-risk sign-ins

Answer

Blocks access to all cloud apps when sign-in risk is high