MS-900 Describe Microsoft 365 apps and services Practice Test 15 — 15 Questions

Question 1

A user receives a suspicious email with a link. They report it using the built-in Microsoft 365 reporting tool. Which service will analyze the reported message?

Accepted Answer

Microsoft Defender for Office 365. Microsoft Defender for Office 365 (MDO) includes the built-in reporting tool that allows users to report suspicious emails directly from Outlook. When a user submits a message via this tool, it is automatically routed to the Microsoft 365 Defender portal's Submissions page, where it is analyzed by MDO's threat protection engines, including detonation in the sandbox environment for URLs and attachments. This analysis determines whether the message is malicious, spam, or a false positive, and updates the tenant's filtering policies accordingly.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Answer

Microsoft Defender XDR

Question 2

Your organization uses Microsoft 365 E5 and wants to implement a solution that automatically detects and protects sensitive data in SharePoint Online, OneDrive, and Exchange Online. Which Microsoft 365 service should you configure?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection is the service within Microsoft 365 E5 that provides sensitivity labels and data loss prevention (DLP) to automatically detect and protect sensitive data across SharePoint Online, OneDrive, and Exchange Online. It allows you to classify and encrypt data based on sensitive information types.

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft 365 Copilot

Answer

Microsoft Intune

Question 3

A company needs to provide external partners with access to a specific SharePoint Online site without granting them access to the entire tenant. Which approach should the administrator use?

Accepted Answer

Configure SharePoint Online external sharing and invite partners as authenticated users. SharePoint Online external sharing allows administrators to invite external users as authenticated guests who can access only the specific site they are invited to, without gaining access to the entire tenant. This is achieved by configuring site-level sharing settings to 'New and existing guests' and sending an invitation that requires the external partner to authenticate with a Microsoft account or Microsoft Entra ID credentials, ensuring granular access control.

Answer

Create an Azure AD B2C tenant for partners

Answer

Use anonymous sharing links for the site

Answer

Add partners as guests in Microsoft Teams and share the site from Teams

Question 4

A user wants to schedule a meeting with colleagues and automatically find a time that works for everyone. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Outlook. Microsoft Outlook includes the Scheduling Assistant feature, which uses free/busy data from the Exchange Online calendar to automatically suggest meeting times that work for all attendees. This is the correct app for scheduling meetings with colleagues because it directly integrates with the organization's calendar system to find mutual availability.

Answer

Microsoft Bookings

Answer

Microsoft Teams

Answer

Microsoft Viva Insights

Question 5

Your organization uses Microsoft 365 and wants to ensure that only managed devices can access corporate email in Exchange Online. Which conditional access policy setting should you configure?

Accepted Answer

Require device to be marked as compliant. The 'Require device to be marked as compliant' setting in a Conditional Access policy integrates with Microsoft Intune to enforce that only devices meeting compliance policies (e.g., encryption, OS version, jailbreak detection) can access Exchange Online. This ensures corporate email is accessible only from managed, trusted devices, directly addressing the requirement.

Answer

Require approved client app

Answer

Require device to be joined to Azure AD

Answer

Require multi-factor authentication

Question 6

A marketing team wants to create a centralized repository for brand assets, such as logos and templates, that can be accessed by all employees. Which Microsoft 365 service should they use?

Accepted Answer

SharePoint Online. SharePoint Online is the correct choice because it is designed as a cloud-based document management and storage platform that supports centralized repositories with granular permission controls. It allows the marketing team to create a dedicated site or document library for brand assets, enabling all employees to access, share, and collaborate on logos and templates while maintaining version history and compliance policies.

Answer

Microsoft Stream

Answer

OneDrive for Business

Answer

Microsoft Lists

Question 7

Your company is deploying Microsoft 365 Copilot and wants to ensure that sensitive data in emails and documents is not inadvertently exposed via Copilot responses. Which Microsoft 365 capability should you implement?

Accepted Answer

Microsoft Purview Data Loss Prevention. Microsoft Purview Data Loss Prevention (DLP) is the correct choice because it is specifically designed to identify, monitor, and automatically protect sensitive data (e.g., credit card numbers, PII, or custom patterns) across Microsoft 365 services, including emails and documents. When integrated with Microsoft 365 Copilot, DLP policies can prevent Copilot from including sensitive information in its responses by enforcing real-time content checks and blocking or warning users before exposure occurs.

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Purview Customer Lockbox

Question 8

A user needs to create a form to collect feedback from customers. The responses should be automatically stored in an Excel spreadsheet in OneDrive. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Forms. Microsoft Forms is the correct app because it is specifically designed for creating surveys, quizzes, and feedback forms, and it natively integrates with Excel to automatically store responses in a spreadsheet hosted on OneDrive. This meets the user's requirement without additional configuration or custom development.

Answer

Microsoft Lists

Answer

Microsoft Power Apps

Answer

Microsoft Sway

Question 9

Which TWO Microsoft 365 services can be used to create and manage chatbots that use AI to answer user questions?

Accepted Answer

Microsoft Copilot Studio. Microsoft Copilot Studio (formerly Power Virtual Agents) is a low-code platform for creating conversational AI chatbots that can answer user questions using natural language processing and generative AI. It integrates with Microsoft 365 and allows you to build, test, and deploy chatbots without extensive coding.

Answer

Microsoft Forms

Answer

Microsoft Viva Topics

Answer

Microsoft Power Automate

Question 10

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Accepted Answer

Viva Learning. Viva Learning (A) is a core Microsoft Viva module that aggregates training content from LinkedIn Learning, Microsoft Learn, and other providers directly into the flow of work, so it is correctly part of the employee experience platform. Viva Insights (B) is also a Viva module, delivering productivity and wellbeing analytics, personal insights, and manager/leader insights derived from Microsoft Graph and collaboration data. Viva Connections (C) is the Viva gateway/experience app that surfaces company news, resources, and communities through a customizable dashboard in Microsoft Teams, making it a genuine Viva service. Microsoft Teams (D) is not part of Viva; it is the collaboration platform that hosts Viva Connections and other apps, but it is a separate Microsoft 365 service. Microsoft Stream (E) is likewise not a Viva module; it is Microsoft 365's enterprise video service, and while video content may appear within Viva Learning or Connections, Stream itself is not one of the Viva services.

Answer

Microsoft Teams

Answer

Microsoft Stream

Question 11

Which TWO Microsoft 365 apps are included in the Microsoft 365 Business Basic subscription?

Accepted Answer

Microsoft Teams. Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop installations. Microsoft Teams is included as the core collaboration hub for chat, meetings, and file sharing. Microsoft Outlook (web) is also included, providing email, calendar, and contacts via a browser interface.

Answer

Microsoft Power BI Pro

Answer

Microsoft Word (desktop app)

Answer

Microsoft Purview Compliance Portal

Question 12

Refer to the exhibit. You are reviewing a Microsoft Defender for Cloud Apps access policy configuration. What does this policy do?

Accepted Answer

Blocks access from the specified IP range to the SharePoint site and prevents downloads. This policy is configured with an action of 'Block' and a 'Download (including printing)' control set to 'Block' for the specified IP range. When both access and download are blocked, the result is that users from that IP range are completely denied access to the SharePoint site and cannot download any files. Option C correctly describes this combined blocking behavior.

Answer

Allows access but prevents downloads from the specified IP range

Answer

Allows access to the SharePoint site only from the specified IP range

Answer

Disables the policy for the SharePoint site

Question 13

Refer to the exhibit. You are reviewing a role definition in Microsoft Purview compliance portal. Which actions can a user assigned this role perform?

Accepted Answer

Manage compliance and data governance tasks in Microsoft Purview. The question refers to a role definition in the Microsoft Purview compliance portal. The Compliance Administrator role (or a custom role with equivalent permissions) is designed specifically to manage compliance and data governance tasks, such as data classification, data loss prevention (DLP), eDiscovery, and retention policies. Option A correctly identifies this scope, as Purview roles do not extend to identity management or security operations in other portals.

Answer

Manage user accounts in Microsoft Entra ID

Answer

Manage security settings in Microsoft Defender XDR

Answer

View only compliance reports without making changes

Question 14

Refer to the exhibit. You are reviewing a Conditional Access policy in Microsoft Entra ID. What will this policy do?

Accepted Answer

Blocks access to Office 365 apps when the sign-in risk is high. The exhibit shows a Conditional Access policy configured with the condition 'Sign-in risk: High' and the control 'Block access'. This combination means that when Microsoft Entra ID detects a high-risk sign-in (e.g., from an anonymous IP address or compromised credentials), access to the targeted cloud apps is denied. The policy specifically targets Office 365 apps (as indicated in the 'Cloud apps or actions' assignment), so it blocks access to those apps when the sign-in risk is high.

Answer

Allows access but logs the sign-in risk

Answer

Requires multi-factor authentication for high-risk sign-ins

Answer

Blocks access to all cloud apps when sign-in risk is high

Question 15

A company deploys Microsoft 365 Business Premium. The IT team wants to enable employees to sign in using a mobile app without passwords. Which app should they configure?

Accepted Answer

Microsoft Authenticator. Microsoft Authenticator is the correct app because it enables passwordless sign-in for Microsoft 365 Business Premium users via FIDO2-based phone sign-in or number matching. It allows employees to authenticate using biometrics or a PIN, eliminating the need for a password during sign-in.

Answer

Microsoft Intune

Answer

Microsoft Entra ID

Answer

Microsoft Copilot