MS-900 Describe Microsoft 365 apps and services Practice Test 17 — 15 Questions

Question 1

An organization uses Microsoft Viva Learning to provide training content. They want to ensure that only employees in the Sales department see sales-specific courses. Which feature should they use?

Accepted Answer

Create learning paths and assign them to the Sales department group in Viva Learning.. Viva Learning allows administrators to create learning paths and assign them to specific Microsoft 365 groups, such as the Sales department group. This ensures that only members of that group see the assigned sales-specific courses, providing targeted content delivery without affecting other users' views.

Answer

Set permissions on the SharePoint site hosting the courses.

Answer

Configure Viva Connections dashboard to show only Sales courses.

Answer

Use Viva Topics to tag courses and let users discover them.

Question 2

A company uses Microsoft Intune to manage devices. They want to deploy a custom line-of-business (LOB) app to Windows 10 devices that are not enrolled in Intune but are joined to Azure AD. Which deployment method should they use?

Accepted Answer

Deploy the app as a Microsoft Store for Business app and assign to Azure AD-joined devices.. Microsoft Store for Business allows you to deploy apps to Azure AD-joined devices that are not enrolled in Intune. The app can be assigned directly to Azure AD-joined devices via the Store for Business portal, which uses the Azure AD identity to push the app without requiring Intune enrollment.

Answer

Use sideloading by enabling developer mode on each device.

Answer

Use Intune to deploy the app as a line-of-business app.

Answer

Use Group Policy to deploy the app via Active Directory.

Question 3

An organization wants to provide employees with a personalized news feed from internal and external sources. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Viva Engage. Microsoft Viva Engage (formerly Yammer) is the correct app because it provides a personalized news feed that aggregates content from both internal sources (e.g., company announcements, community posts) and external sources (e.g., RSS feeds, external news). It enables employees to discover relevant updates in a social-style feed, aligning with the requirement for a unified internal and external news experience.

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Answer

Microsoft SharePoint

Question 4

A company uses Microsoft 365 and wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and apply encryption when shared externally. Which solution should they use?

Accepted Answer

Microsoft Purview Information Protection with auto-labeling. Microsoft Purview Information Protection with auto-labeling is the correct solution because it uses trainable classifiers or exact data match (EDM) to detect sensitive data types like credit card numbers, automatically apply a 'Highly Confidential' sensitivity label, and enforce encryption when the document is shared externally. This capability is built into Microsoft 365 compliance center and integrates with sensitivity labels to protect data at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 5

A multinational organization uses Microsoft 365 and wants to comply with data residency requirements. They need to ensure that data for European users stays within the European Union. Which Microsoft 365 feature should they configure?

Accepted Answer

Configure multi-geo capabilities in SharePoint Online and OneDrive.. Multi-Geo capabilities in SharePoint Online and OneDrive allow organizations to provision and store data at rest in specific geographic locations, such as the European Union, to meet data residency requirements. This feature enables tenant administrators to define a preferred data location for users, ensuring their content remains within the EU boundary.

Answer

Create retention policies for EU users.

Answer

Set conditional access policies to restrict access from outside EU.

Answer

Use data loss prevention policies to block data movement.

Question 6

Which TWO Microsoft 365 apps are primarily used for business process automation and workflow? (Select two.)

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is a low-code application development platform that enables users to build custom business apps for process automation, while Microsoft Power Automate (formerly Flow) is a cloud-based service for creating automated workflows between apps and services. Together, they form the core of Microsoft's Power Platform for business process automation and workflow orchestration.

Answer

Microsoft Planner

Answer

Microsoft To Do

Answer

Microsoft Forms

Question 7

Which THREE Microsoft 365 services are part of Microsoft Defender XDR (Extended Detection and Response)? (Select three.)

Accepted Answer

Microsoft Defender for Endpoint. Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, and email/collaboration. Microsoft Defender for Endpoint is correct because it provides endpoint detection and response (EDR) capabilities, collecting telemetry from Windows, macOS, Linux, Android, and iOS devices to detect and remediate advanced threats.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Question 8

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Accepted Answer

Microsoft Outlook. Microsoft Outlook and Microsoft Word are correct because they both include AI-powered features that can summarize email threads and documents. In Outlook, the 'Summarize by Copilot' feature uses natural language processing to condense long email threads into key points. In Word, Copilot can generate summaries of documents, highlighting main ideas and sections, leveraging the same underlying AI model.

Answer

Microsoft Excel

Answer

Microsoft OneNote

Answer

Microsoft PowerPoint

Question 9

The exhibit shows a mail flow rule in an Exchange Online environment. An administrator notices that emails from a trusted partner domain are being marked with [External]. The partner domain is configured as a domain in Microsoft 365. What should the administrator do to prevent this while maintaining the rule for other external senders?

Accepted Answer

Add an exception to the rule to exclude the partner domain.. The mail flow rule is configured to mark all external senders with [External]. Since the partner domain is already configured as an accepted domain in Microsoft 365, Exchange Online treats it as internal, but the rule still applies because it matches the sender domain pattern. Adding an exception for the partner domain explicitly excludes it from the rule, ensuring emails from that domain are not marked [External] while the rule continues to apply to all other external senders.

Answer

Disable the rule.

Answer

Change the rule priority to a lower number.

Answer

Change the rule mode to 'Test' and review the results.

Question 10

The exhibit shows a Microsoft Purview auto-labeling policy configuration. A user uploads a document containing a credit card number to a SharePoint Online site. The document does not get automatically labeled. Which is the most likely reason?

Accepted Answer

The document was uploaded before the policy was published.. Auto-labeling policies in Microsoft Purview apply labels to documents that are newly created or modified after the policy is published. Documents uploaded before the policy's publication date are not retroactively scanned or labeled unless a separate manual or scheduled labeling job is triggered. Since the user uploaded the document before the policy was published, it falls outside the policy's scope.

Answer

The credit card number does not meet the minimum confidence threshold of 75.

Answer

The policy is configured to apply to Exchange Online, not SharePoint.

Answer

The document is a PDF file, and auto-labeling only supports Office documents.

Question 11

Contoso Ltd. is a medium-sized company with 500 employees using Microsoft 365 E5. They have a mixed environment: 300 Windows 10 devices are managed by Microsoft Intune, and 200 are unmanaged but Azure AD joined. The company uses Microsoft Teams for collaboration and SharePoint Online for document storage. The security team wants to implement the following: restrict access to company data from unmanaged devices, require multi-factor authentication (MFA) for all external users accessing SharePoint, and ensure that sensitive documents labeled 'Highly Confidential' are automatically encrypted when shared via email. Currently, the company has no conditional access policies, no MFA enforced, and no data classification policies. The administrator needs to design a solution using Microsoft 365 built-in capabilities without purchasing additional licenses. What should the administrator do?

Accepted Answer

Create a conditional access policy to grant access from compliant devices, require MFA for external users, and configure a sensitivity label with auto-labeling for 'Highly Confidential' documents.. It uses Conditional Access policies to require compliant devices for access (addressing unmanaged devices), requires MFA specifically for external users (not all users, aligning with the requirement), and uses a sensitivity label with auto-labeling to automatically encrypt 'Highly Confidential' documents when shared via email. This leverages built-in Microsoft 365 capabilities without additional licenses.

Answer

Configure SharePoint to block access from unmanaged devices, enable MFA for all users, and use Microsoft Purview Data Loss Prevention (DLP) to encrypt sensitive emails.

Answer

Use Intune app protection policies to restrict data access, enable MFA for SharePoint, and use Microsoft Purview auto-labeling for encryption.

Answer

Create a conditional access policy to require MFA for all users, use Intune compliance policies to mark devices as compliant, and create a sensitivity label to encrypt documents.

Question 12

A company uses Microsoft 365 Business Premium. A user reports that when they try to access a file in SharePoint Online, they receive an error that the file is blocked by policy. The IT admin needs to identify which policy is blocking the file. Which tool should the admin use?

Accepted Answer

Microsoft Purview Data Loss Prevention policies. Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to detect and block the sharing or access of sensitive information, such as credit card numbers or personally identifiable information, in Microsoft 365 services like SharePoint Online. When a file is blocked with a 'blocked by policy' error, it is typically because a DLP rule has matched the file's content and applied an action to restrict access. The admin can use the Microsoft Purview compliance portal to review DLP policy matches and identify the exact rule that triggered the block.

Answer

Microsoft Intune compliance policies

Answer

Microsoft Entra ID Conditional Access policies

Answer

Microsoft Defender for Cloud Apps session policies

Question 13

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

Accepted Answer

Microsoft 365 Copilot. Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Answer

Microsoft Viva Insights

Answer

Microsoft Editor

Answer

Microsoft Power Automate

Question 14

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

Accepted Answer

Microsoft Purview Information Protection with sensitivity labels and SharePoint Online. Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Answer

SharePoint Online External Sharing and Microsoft Entra B2B

Answer

Microsoft Entra B2B collaboration with Conditional Access

Answer

Microsoft Teams with guest access and sharing permissions

Question 15

A company is deploying Microsoft 365 Apps for Enterprise to 500 users. The IT team wants to minimize network traffic during installation by downloading only the apps that users need, instead of the full Office suite. Which deployment tool should they use?

Accepted Answer

Office Deployment Tool (ODT). The Office Deployment Tool (ODT) allows IT administrators to download and deploy only the specific Microsoft 365 Apps (e.g., Word, Excel) needed by users, using an XML configuration file to control which products and languages are installed. This minimizes network traffic by avoiding the download of the full suite, making it the correct choice for this scenario.

Answer

Microsoft Store for Business

Answer

Microsoft Configuration Manager

Answer

Microsoft Intune