MS-900 Describe Microsoft 365 apps and services Practice Test 18 — 15 Questions

Question 1

A helpdesk team needs to provide remote assistance to users by viewing and controlling their Windows devices. Which Microsoft 365 service enables this?

Accepted Answer

Microsoft Intune Remote Help. Remote Help via Intune allows support personnel to remotely view and control devices. Teams screen sharing is less secure. Quick Assist is not integrated. Windows 365 is a cloud PC.

Answer

Microsoft Teams screen sharing

Answer

Windows 365

Answer

Microsoft Quick Assist

Question 2

An organization needs to enforce that all external emails are automatically encrypted before delivery to recipients. Which feature should they configure in Microsoft 365?

Accepted Answer

Exchange Online mail flow rules. Exchange Online mail flow rules (also known as transport rules) can be configured to automatically encrypt all external emails by applying Office 365 Message Encryption (OME) based on conditions such as recipient domain or sender address. This allows the organization to enforce encryption for all outbound messages without requiring user intervention, meeting the stated requirement.

Answer

S/MIME

Answer

Microsoft Purview Data Loss Prevention

Answer

Microsoft Purview sensitivity labels

Question 3

Which THREE Microsoft 365 services are part of Microsoft Purview compliance suite?

Accepted Answer

Data Lifecycle Management. Data Lifecycle Management (C) is part of Microsoft Purview because it provides automated retention and deletion policies for sensitive data across Exchange, SharePoint, OneDrive, and Teams. It helps organizations comply with regulatory requirements by governing data from creation to disposal, directly supporting the Purview compliance portal's governance capabilities.

Answer

Microsoft Entra ID

Answer

Microsoft Defender for Cloud Apps

Question 4

Which TWO Microsoft 365 apps use AI to assist users with content creation?

Accepted Answer

Microsoft PowerPoint with Copilot. Microsoft PowerPoint with Copilot and Microsoft Word with Copilot are correct because Copilot in these apps leverages large language models (LLMs) integrated with the Microsoft Graph to generate, summarize, and refine content directly within the document or presentation. In PowerPoint, Copilot can create entire slide decks from a prompt or natural language outline, while in Word, it can draft text, rewrite paragraphs, or summarize documents, both using AI to assist users in content creation.

Answer

Microsoft Viva Insights

Answer

Microsoft Excel with Copilot

Answer

Microsoft Teams with Copilot

Question 5

A tenant administrator applies the above configuration for Microsoft 365 Copilot. What is the result of this configuration?

Accepted Answer

Copilot will be enabled but will only use data from SharePoint and OneDrive; Exchange and Teams data are excluded.. The configuration shows that the 'Copilot' toggle is enabled, but the 'Data sources' section explicitly lists only SharePoint and OneDrive, with Exchange and Teams unchecked. This means Copilot will be active for users but will only index and retrieve data from SharePoint and OneDrive, excluding emails and Teams messages. The empty GraphConnectors list further confirms no external data sources are connected, but this does not disable Copilot itself.

Answer

Copilot will be enabled for all users and will access data from all Microsoft 365 services.

Answer

Copilot will be disabled because GraphConnectors is empty.

Answer

Copilot will only work for users in the European Union.

Question 6

A company uses Microsoft 365 Business Premium and wants to enable secure remote access for employees using personal devices. Which Microsoft 365 app should they configure to enforce conditional access policies based on device compliance?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct answer because it is the Microsoft 365 app that provides mobile device management (MDM) and mobile application management (MAM). It allows administrators to define device compliance policies (e.g., requiring encryption, PIN, or a minimum OS version) and integrate those policies with Microsoft Entra ID (formerly Azure AD) Conditional Access. When a user attempts to access corporate resources from a personal device, Conditional Access checks the device's compliance status reported by Intune before granting access.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 7

An organization wants to use Microsoft 365 to automatically classify and protect sensitive data in emails and documents. Which service should they use?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides data classification, labeling, and protection capabilities directly within Microsoft 365. It uses sensitivity labels to automatically classify emails and documents based on conditions like content patterns or custom keywords, and then applies encryption, rights management, or visual markings (e.g., headers/footers) to protect sensitive data both at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Defender for Office 365

Answer

Microsoft Entra ID

Question 8

A user reports that they cannot access their Microsoft 365 email on their mobile device. The user can access Outlook on the web. Which Microsoft 365 app should the administrator check to verify the user's mobile device is compliant?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct answer because it is the mobile device management (MDM) and mobile application management (MAM) component within Microsoft 365. When a user cannot access email on a mobile device but can via Outlook on the web, the issue is likely a device compliance policy blocking access. Intune enforces conditional access policies by checking device compliance (e.g., encryption, jailbreak status, minimum OS version) before allowing Exchange Online connectivity.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Entra ID

Answer

Microsoft Purview

Question 9

A company uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across endpoints, email, and identities. Which service should they use?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically detects, investigates, and remediates threats across endpoints, email, and identities. It leverages AI and automation to correlate signals from Microsoft Defender for Endpoint, Defender for Office 365, and Defender for Identity, enabling coordinated incident response without manual intervention.

Answer

Microsoft Purview

Answer

Microsoft Defender for Cloud

Answer

Microsoft Sentinel

Question 10

An organization wants to provide employees with a personalized news feed and learning resources within Microsoft 365. Which app should they use?

Accepted Answer

Microsoft Viva. Microsoft Viva is the correct app because it is an employee experience platform that integrates with Microsoft 365 to deliver personalized news feeds via Viva Connections and curated learning resources through Viva Learning. Unlike other apps, Viva is specifically designed to aggregate content from across the organization and external sources into a single, tailored dashboard.

Answer

Microsoft Teams

Answer

Microsoft Stream

Answer

Microsoft SharePoint

Question 11

A company needs to ensure that sensitive documents stored in SharePoint Online are automatically encrypted and cannot be shared with external users. Which Microsoft Purview feature should they use?

Accepted Answer

Sensitivity labels. Sensitivity labels are the correct choice because they enforce encryption and access restrictions directly on documents, including blocking external sharing. Unlike DLP policies, which detect and prevent sharing after the fact, sensitivity labels apply persistent protection that travels with the file, ensuring it remains encrypted even if downloaded or shared outside SharePoint Online.

Answer

Communication compliance

Answer

Data Loss Prevention (DLP) policies

Answer

Retention labels

Question 12

An administrator needs to restrict access to Microsoft 365 admin centers based on user location. Which Microsoft Entra ID feature should they configure?

Accepted Answer

Conditional Access. Conditional Access is the correct feature because it allows administrators to enforce policies that grant or block access to Microsoft 365 admin centers based on conditions such as user location (IP address ranges or countries). By configuring a Conditional Access policy with a location condition, you can restrict access to sensitive admin portals like the Microsoft 365 admin center or Exchange admin center to trusted networks only.

Answer

Identity Protection

Answer

Entra ID Governance

Answer

Privileged Identity Management (PIM)

Question 13

Which TWO Microsoft 365 services are specifically designed to help organizations manage and monitor data compliance?

Accepted Answer

Microsoft Purview Communication Compliance. Microsoft Purview Communication Compliance (A) is a purpose-built compliance solution that uses policies and machine learning to detect, triage, and remediate inappropriate or risky communications across Teams, Exchange, and other channels, making it a core data-compliance monitoring service. Microsoft Purview (E) is the overarching compliance platform that provides data mapping, classification, sensitivity labels, Data Loss Prevention, Insider Risk Management, and audit/eDiscovery capabilities for managing and monitoring compliance across the organization's data estate. Microsoft Defender for Office 365 (B) is a threat-protection service focused on phishing, malware, and zero-day attacks rather than compliance management. Microsoft Intune (C) is a mobile device and endpoint management (MDM/MAM) service for enforcing configuration and app policies, not a data-compliance monitoring tool. Microsoft Sentinel (D) is a cloud-native SIEM/SOAR platform for security analytics, threat detection, and incident response, not a dedicated compliance-management service.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Question 14

Which TWO Microsoft 365 services provide capabilities for insider risk management?

Accepted Answer

Microsoft Purview Insider Risk Management. Microsoft Purview Insider Risk Management (option B) is a dedicated service that uses machine learning and behavioral analytics to detect, investigate, and respond to risky user activities such as data theft, policy violations, or unauthorized access. It correlates signals from Microsoft 365 logs, HR data, and user behavior to identify potential insider threats, making it the primary tool for insider risk management.

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Answer

Microsoft Defender XDR

Question 15

Refer to the exhibit. The JSON shows a device compliance policy assignment in Microsoft Intune. Based on the exhibit, what is the current compliance status of the devices in the target group?

Accepted Answer

Not compliant, because the encryption setting is not compliant. The exhibit shows a device compliance policy in Microsoft Intune with two settings: 'require device encryption' set to 'Required' and 'minimum password length' set to '6'. The compliance status for the target group is 'Not compliant, because the encryption setting is not compliant'. This is because the JSON indicates that the encryption requirement is not being met by the devices in the group, likely due to BitLocker or device encryption not being enabled. The password setting alone does not override the encryption non-compliance, as all required settings must be satisfied for a device to be marked compliant.

Answer

Not compliant, only because the password setting is missing

Answer

Compliant, because both settings are compliant

Answer

Compliant, because the password setting is compliant