MS-900 Describe Microsoft 365 apps and services Practice Test 17 — 15 Questions

Question 1

A company wants to ensure that sensitive documents in Microsoft SharePoint Online are automatically classified and protected when they contain credit card numbers. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (D) enables organizations to automatically classify and protect sensitive documents based on data classification rules. By configuring a sensitive information type for credit card numbers, SharePoint Online can apply sensitivity labels or retention labels to documents containing that pattern, ensuring they are encrypted or restricted as defined by policy.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Purview Audit

Answer

Microsoft Purview Insider Risk Management

Question 2

A sales team needs to collaborate on a document in real time and track changes. Which Microsoft 365 app is most suitable?

Accepted Answer

Word for the web. Word for the web (Option C) is the most suitable app because it is specifically designed for real-time co-authoring, allowing multiple users to edit a document simultaneously while tracking changes via the built-in version history and 'Track Changes' feature. Unlike desktop Word, the web version requires no manual sync and leverages Microsoft's Fluid Framework for seamless collaboration across devices.

Answer

OneNote

Answer

Microsoft Forms

Answer

Microsoft Teams

Question 3

An organization uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across identities, endpoints, and email. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically correlates alerts and orchestrates remediation across identities, endpoints, email, and cloud apps. This aligns directly with the requirement to detect and remediate security incidents across identities, endpoints, and email, leveraging the Microsoft 365 Defender portal to break down silos between individual security products.

Answer

Microsoft Defender for Endpoint

Answer

Microsoft Sentinel

Answer

Microsoft Entra ID Protection

Question 4

A company wants to replace its on-premises Exchange Server with a cloud-based email solution that integrates with Microsoft Teams and SharePoint Online. Which Microsoft 365 service should they subscribe to?

Accepted Answer

Exchange Online. Exchange Online is the cloud-based email solution that integrates with Teams and SharePoint. Option A is correct. Options B, C, and D are incorrect because they are not email services.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Apps

Answer

Microsoft Outlook desktop app

Question 5

A marketing team needs to create a visually compelling newsletter that can be distributed via email and viewed in a browser. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Sway. Microsoft Sway is the correct choice because it is specifically designed for creating interactive, web-based newsletters and presentations that can be easily shared via a link and viewed in any browser. Unlike traditional desktop publishing tools, Sway uses a responsive design canvas that automatically adapts to different screen sizes, making it ideal for email distribution and browser viewing without requiring recipients to download attachments.

Answer

Microsoft Publisher

Answer

Microsoft PowerPoint

Answer

Microsoft Word

Question 6

A hospital uses Microsoft 365 and needs to comply with HIPAA by ensuring that patient health information in emails is encrypted both in transit and at rest. Which Microsoft 365 feature should they enable?

Accepted Answer

Office 365 Message Encryption. Office 365 Message Encryption (OME) is the correct feature because it provides built-in encryption for emails both in transit (via TLS) and at rest (via Azure Rights Management), ensuring that patient health information (PHI) remains protected and compliant with HIPAA requirements. OME integrates with Azure Information Protection to apply persistent encryption that travels with the email, regardless of where it is stored.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Intune

Answer

Microsoft Purview Data Lifecycle Management

Question 7

An organization uses Microsoft Teams and wants to record meetings for compliance purposes. Which Microsoft 365 service provides meeting recording with automatic transcription?

Accepted Answer

Microsoft Teams meeting recording. Microsoft Teams meeting recording with automatic transcription is a native feature of Teams itself, not a separate service. When a meeting is recorded, Teams stores the recording in OneDrive or SharePoint, but the recording and transcription capabilities are part of the Teams meeting experience. Option B is correct because Teams meeting recording directly provides the recording and automatic transcription for compliance purposes.

Answer

Microsoft OneDrive

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 8

A user needs to access their work files from a personal device without storing a copy locally. Which Microsoft 365 app should they use?

Accepted Answer

OneDrive for Business. OneDrive for Business enables users to access work files from any device via the cloud, with the option to stream files on demand without downloading them locally. This is achieved through Files On-Demand, which uses placeholder files and syncs only metadata, ensuring no full copy is stored on the personal device unless explicitly made available offline.

Answer

Microsoft Outlook

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Question 9

A multinational company needs to ensure that its Microsoft 365 tenant meets regional data residency requirements by storing data only in specific geographic locations. Which Microsoft 365 feature should they use?

Accepted Answer

Multi-Geo Capabilities. Multi-Geo Capabilities in Microsoft 365 allow organizations to provision and store data at rest in specific geographic locations (geo regions) to meet data residency requirements. This feature enables a single tenant to span multiple countries/regions, with user data (Exchange Online, SharePoint, OneDrive, Teams) stored in the chosen geo location, ensuring compliance with regional regulations.

Answer

Microsoft Purview Data Lifecycle Management

Answer

Microsoft Intune

Answer

Microsoft Entra ID Conditional Access

Question 10

Which TWO Microsoft 365 apps can be used to create and share forms for surveys? (Select exactly 2.)

Accepted Answer

Microsoft Forms. Microsoft Forms and Microsoft Excel (with Forms integration) can be used to create surveys. Options A and D are correct. Option B is for email, C for notes, E for collaboration.

Answer

Microsoft Teams

Answer

Microsoft Outlook

Answer

OneNote

Question 11

Which THREE Microsoft 365 services are included in Microsoft 365 E5 license that provide advanced security capabilities? (Select exactly 3.)

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (B) is included in Microsoft 365 E5 to provide unified, cross-domain threat detection and response across endpoints, email, identities, and cloud apps. It correlates signals from multiple Defender products to automate incident response and reduce dwell time, making it a core advanced security capability of the E5 license.

Answer

Microsoft Intune

Answer

Microsoft Purview Data Loss Prevention

Question 12

Which TWO Microsoft 365 apps can be used to create and edit documents collaboratively in real time? (Select exactly 2.)

Accepted Answer

Word for the web. Word for the web and OneNote for the web are both part of the Microsoft 365 web apps suite that support real-time co-authoring. They leverage the Office Online Server infrastructure and the Fluid Framework to allow multiple users to edit the same document simultaneously, with changes syncing via WebSocket connections and operational transforms.

Answer

Microsoft Teams

Answer

Outlook on the web

Answer

Access for the web

Question 13

Refer to the exhibit. You are configuring a Microsoft Purview Data Loss Prevention (DLP) policy in the Microsoft 365 compliance portal. The policy is intended to block access to files containing credit card numbers when accessed from outside the organization. However, users report that the policy is not blocking access. What is the most likely reason?

Accepted Answer

The policy mode is set to 'advanced' which is not a valid mode; it should be 'enforce' or 'test'.. Option B is correct because the policy mode 'advanced' is not a valid mode in Microsoft Purview DLP. The valid modes are 'enforce' (to actively block actions) and 'test' (to simulate policy effects without blocking). Setting the mode to an invalid value like 'advanced' would prevent the policy from enforcing any restrictions, explaining why access is not being blocked.

Answer

The policy is not assigned to any locations.

Answer

The confidence level is set to 'high' which is too restrictive.

Answer

The sensitive information type is incorrect.

Question 14

Refer to the exhibit. A Teams administrator runs the PowerShell commands to enable meeting transcription and recording for all users. After running the commands, users still cannot start transcription in their meetings. What is the most likely cause?

Accepted Answer

Users may have a custom meeting policy that overrides the global policy.. Option A is correct because in Microsoft Teams, meeting policies are applied hierarchically: a custom policy assigned directly to a user overrides the global policy. Even if the global policy has transcription enabled, users with a custom meeting policy that has AllowTranscription set to False will not be able to start transcription. The admin must either modify the custom policy or assign the global policy to those users.

Answer

The admin does not have the correct permissions.

Answer

The admin forgot to run a Grant-CsTeamsMeetingPolicy command.

Answer

The AllowTranscription property is misnamed.

Question 15

Refer to the exhibit. An administrator creates a Conditional Access policy in Microsoft Entra ID. The AppId 00000003-0000-0ff1-ce00-000000000000 corresponds to Microsoft Graph. The policy requires MFA for all users accessing Microsoft Graph. However, users report that they are not prompted for MFA when using Microsoft Teams. What is the most likely reason?

Accepted Answer

The policy applies only to Microsoft Graph, not to the Teams service itself.. Teams does not exclusively use Microsoft Graph for all operations; it also uses other endpoints. The policy only applies to Microsoft Graph, not Teams service endpoints. Option B is correct. Options A, C, and D are incorrect.

Answer

The policy is not enabled.

Answer

The policy should include the app ID for Office 365 Exchange Online.

Answer

The GrantControls should be set to RequireMFA for all resources.