MS-900 Describe Microsoft 365 apps and services Practice Test 15 — 15 Questions

Question 1

Refer to the exhibit. An administrator creates a Conditional Access policy in Microsoft Entra ID. The AppId 00000003-0000-0ff1-ce00-000000000000 corresponds to Microsoft Graph. The policy requires MFA for all users accessing Microsoft Graph. However, users report that they are not prompted for MFA when using Microsoft Teams. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The policy applies only to Microsoft Graph, not to the Teams service itself.. The Conditional Access policy targets the Microsoft Graph app ID. While Teams uses Microsoft Graph for some operations, it also uses other endpoints (e.g., Teams-specific services) that are not covered by this policy. Consequently, users accessing Teams directly are not subject to the MFA requirement. Option A is correct because the policy applies only to Microsoft Graph, not to all Teams service endpoints. Options B, C, and D are incorrect.

Answer

The policy is not enabled.

Answer

The policy should include the app ID for Office 365 Exchange Online.

Answer

The GrantControls should be set to RequireMFA for all resources.

Question 2

A company uses Microsoft 365 E5 licenses. The security team wants to automatically remediate advanced threats detected on endpoints without manual intervention. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct service because it provides automated investigation and remediation capabilities for advanced threats detected on endpoints. It uses AI-driven playbooks to automatically contain or remove threats without manual intervention, which aligns directly with the security team's requirement.

Answer

Microsoft Intune

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Question 3

A sales team needs to collaborate on documents in real time, track changes, and co-author using familiar desktop tools. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Word. Microsoft Word is the correct choice because it is the desktop app that natively supports real-time co-authoring, change tracking, and simultaneous editing by multiple users. These features are built into Word for Microsoft 365, allowing teams to collaborate on documents using the familiar desktop interface without needing to switch to a web or mobile app.

Answer

Microsoft Teams

Answer

Microsoft OneNote

Answer

Microsoft Planner

Question 4

A financial services firm must comply with regulatory requirements that prevent accidental sharing of sensitive customer data via email. They need to automatically detect and block emails containing credit card numbers sent to external recipients. Which Microsoft 365 service should they configure?

Accepted Answer

Microsoft Purview. Microsoft Purview (formerly Microsoft 365 Compliance) includes Data Loss Prevention (DLP) policies that can automatically detect sensitive data types, such as credit card numbers, in emails and block them from being sent to external recipients. This directly addresses the regulatory requirement to prevent accidental sharing of sensitive customer data via email.

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Answer

Microsoft Entra ID

Question 5

A hospital uses Microsoft 365 and wants to enable secure messaging between doctors and nurses that supports compliance with health data regulations. Which Microsoft 365 service provides encrypted, compliant messaging?

Accepted Answer

Microsoft Teams. Microsoft Teams supports encrypted messaging and compliance with health data regulations like HIPAA through features such as data encryption at rest and in transit, Data Loss Prevention (DLP) policies, and eDiscovery. It provides secure communication channels for healthcare professionals while meeting regulatory requirements for protected health information (PHI).

Answer

Microsoft Yammer

Answer

Microsoft Viva

Answer

Microsoft Bookings

Question 6

A marketing team needs to create a dashboard that shows real-time sales data from Dynamics 365 and customer feedback from social media. Which Microsoft 365 service should they use to build this dashboard?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct service because it is designed to connect to multiple data sources, including Dynamics 365 for real-time sales data and social media APIs for customer feedback, and then create interactive, real-time dashboards. It provides built-in connectors, real-time streaming datasets, and the ability to publish dashboards for team-wide access, making it the ideal tool for this marketing requirement.

Answer

Microsoft Power Automate

Answer

Microsoft SharePoint

Answer

Microsoft Power Apps

Question 7

A user is trying to access Microsoft 365 services but is prompted for additional verification via a phone call. Which Microsoft 365 feature is enforcing this?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that enforces Conditional Access policies. When a user is prompted for additional verification via a phone call, it means a Conditional Access policy requiring multi-factor authentication (MFA) has been triggered. Entra ID evaluates the sign-in risk, user location, or device compliance and then invokes MFA through the Microsoft Authenticator service, which can deliver a phone call as one of the verification methods.

Answer

Microsoft Purview

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Question 8

A company wants to securely share a large video file (2 GB) with an external partner without using email attachments. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft OneDrive. Microsoft OneDrive is the correct choice because it allows sharing large files (up to 250 GB per file) via secure, expiring links with external users, without relying on email attachments. It integrates with Azure AD for access control and supports granular permissions like view or edit, making it ideal for ad-hoc external file sharing.

Answer

Microsoft SharePoint

Answer

Microsoft Teams

Answer

Microsoft Stream

Question 9

Which TWO Microsoft 365 services can be used to create and manage custom business applications without writing code?

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is the only service listed that can create custom business applications without code. SharePoint provides collaboration, data storage, and forms, but it is not a development platform for full business apps.

Answer

Microsoft SharePoint

Answer

Microsoft Power Automate

Answer

Microsoft Power BI

Answer

Microsoft Lists

Question 10

Which TWO Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage and protect sensitive data?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (B) is correct because it enables organizations to govern their data through retention policies and retention labels, automatically retaining or deleting content based on regulatory requirements. Data Loss Prevention (DLP) (E) is correct because it identifies, monitors, and protects sensitive data across Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams) by applying policies that prevent unauthorized sharing or leakage.

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Entra ID Protection

Answer

Microsoft Defender XDR

Question 11

A company uses Microsoft Viva Insights to improve employee wellbeing. The HR team wants to identify which teams frequently work after 8 PM. Which Viva Insights feature should they use?

Accepted Answer

Viva Insights. Microsoft Viva Insights provides personalized wellbeing and productivity analytics, including the ability to analyze collaboration patterns such as after-hours work. The HR team can use the 'Workplace Analytics' feature within Viva Insights to query and report on teams that frequently work after 8 PM, leveraging data from Microsoft 365 signals like email and meeting timestamps.

Answer

Viva Learning

Answer

Viva Topics

Answer

Viva Connections

Question 12

A company is deploying Microsoft Teams Rooms for its meeting rooms. They need to ensure that room calendars are automatically updated when a meeting is booked via Outlook. Which Microsoft 365 service enables this integration?

Accepted Answer

Exchange Online. Exchange Online is the correct answer because it provides the mailbox and calendar infrastructure that Microsoft Teams Rooms relies on. When a meeting is booked via Outlook, the Exchange Online calendar processes the booking and automatically updates the room's calendar, enabling the Teams Rooms device to display the meeting details. This integration uses the Exchange Web Services (EWS) or REST APIs to synchronize calendar events between Outlook and the room resource mailbox.

Answer

Microsoft Intune

Answer

Microsoft Teams

Answer

SharePoint Online

Question 13

A sales team uses Microsoft Copilot for Sales to draft emails. To ensure Copilot uses the most relevant customer data from Dynamics 365, what must be configured?

Accepted Answer

Dynamics 365 records. Copilot for Sales relies on Dynamics 365 records to access customer data such as contacts, accounts, and opportunities. By configuring the appropriate Dynamics 365 records, Copilot can retrieve the most relevant information to draft personalized emails. Without this configuration, Copilot lacks the necessary data source to generate context-aware content.

Answer

Microsoft Teams channels

Answer

Exchange Online mailboxes

Answer

Microsoft Viva Topics

Question 14

Which TWO Microsoft 365 services can be used to create and manage business process automation workflows?

Accepted Answer

Power Automate. Power Automate (A) is the primary tool for creating and managing business process automation workflows, enabling users to automate repetitive tasks across various applications. Microsoft Lists (E) can be used with Power Automate to create approval workflows and track information, making it a complementary service for workflow automation. Options B (Microsoft Forms) and C (Microsoft Stream) are not designed for workflow automation; Forms is for surveys and Stream is for video management. Option D (Power BI) is a business analytics tool, not for workflow automation.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Power BI

Question 15

Which FOUR Microsoft 365 services are part of the Microsoft Defender XDR suite?

Accepted Answer

Microsoft Defender for Endpoint. Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, email, and cloud apps. It consists of four core services: Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps. Microsoft Sentinel is a separate SIEM service that can ingest data from Defender XDR but is not part of the suite itself.

Answer

Microsoft Sentinel