MS-900 Describe Microsoft 365 apps and services Practice Test 19 — 15 Questions

Question 1

You are configuring Microsoft Entra ID Protection policies for your organization. The exhibit shows a configuration snippet. Which behavior will occur when a user signs in from a known malicious IP address?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The sign-in will be blocked immediately.. The sign-in risk policy is enabled with risk level 'high' and blockAccess set to true, so a sign-in from a malicious IP (high risk) will be blocked. Option A is wrong because the policy is configured to block, not disable accounts. Option B is wrong because no password reset is triggered. Option C is wrong because the policy is configured to block, not just require MFA.

Answer

The user's account will be disabled.

Answer

The user will be prompted to change their password.

Answer

The sign-in will be allowed but a multi-factor authentication challenge will be required.

Question 2

A user needs to collaborate on a document with colleagues in real time, but the document must be stored on a local network server due to regulatory requirements. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint can be deployed on-premises (SharePoint Server), allowing documents to be stored on a local network server while supporting real-time co-authoring. This meets the regulatory requirement for local storage. Options B, C, and D either lack real-time collaboration or rely on cloud storage.

Answer

Microsoft Word (desktop)

Answer

Microsoft OneDrive

Answer

Microsoft Teams

Question 3

Your company has deployed Microsoft Defender XDR. A security analyst needs to investigate a suspicious email that was reported by a user. Which Microsoft 365 service should the analyst use to view the email's details and analyze threats?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct service because it provides a unified investigation and response experience across email, endpoints, identities, and cloud apps. The security analyst can use the Microsoft Defender portal (security.microsoft.com) to view the full email details, including headers, attachments, URLs, and threat analysis results from automated investigation and advanced hunting queries.

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 4

A large enterprise needs to enforce that all documents containing financial data are automatically classified and encrypted when shared externally. Which combination of Microsoft 365 services should be used?

Accepted Answer

Microsoft Purview Information Protection and Microsoft Defender for Cloud Apps. Microsoft Purview Information Protection provides the classification and labeling capabilities to automatically identify documents containing financial data, while Microsoft Defender for Cloud Apps enables policy-based encryption and protection controls when those documents are shared externally. Together, they enforce data loss prevention (DLP) by applying sensitivity labels that trigger encryption upon external sharing, meeting the enterprise requirement.

Answer

Microsoft Forms and Microsoft Stream

Answer

Microsoft Sentinel and Microsoft Defender XDR

Answer

Microsoft Intune and Microsoft Entra ID

Question 5

A user wants to create a custom dashboard that displays key performance indicators from multiple data sources, such as Excel files and SharePoint lists. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct choice because it is a business analytics service designed to connect to multiple data sources—including Excel files and SharePoint lists—and create interactive, custom dashboards with key performance indicators (KPIs). Unlike the other options, Power BI provides built-in data modeling, visualization, and real-time refresh capabilities, making it the only app in this list that fulfills the requirement for a multi-source KPI dashboard.

Answer

Microsoft Excel

Answer

Microsoft Lists

Answer

Microsoft Forms

Question 6

Which TWO Microsoft 365 services can be used to provide secure remote access to on-premises applications without requiring a VPN?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications by publishing them through an external endpoint in Azure AD, without requiring a VPN. It works by establishing outbound connections from the on-premises Application Proxy connector to the Azure AD service, which then proxies user requests. This eliminates the need to open inbound firewall ports or maintain VPN infrastructure, making it ideal for remote access to legacy apps.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 7

Which THREE Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage data lifecycle and retention?

Accepted Answer

Records Management. Records Management (B) is correct because it enables organizations to declare records, apply retention labels, and manage the disposition of content in a defensible manner. It is a core Purview feature for managing the data lifecycle, ensuring that records are retained for the required period and then disposed of appropriately.

Answer

Sensitivity Labels

Answer

Data Loss Prevention

Question 8

Which TWO Microsoft 365 apps are part of the Microsoft Viva suite?

Accepted Answer

Microsoft Viva Insights. Microsoft Viva Insights is correct because it is a core component of the Microsoft Viva employee experience platform, providing personalized wellbeing, productivity, and collaboration analytics derived from Microsoft 365 data. It uses signals from emails, meetings, and chats to deliver actionable insights to individuals, managers, and leaders.

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Answer

Microsoft Power BI

Question 9

Your organization, Contoso Ltd., uses Microsoft 365 E5 licenses and has 10,000 users. The company is planning to deploy Microsoft Copilot for Microsoft 365 to all users. The IT department has identified the following requirements: 1. Users must be able to use Copilot across Microsoft Teams, Word, Excel, PowerPoint, and Outlook. 2. Copilot must be able to access user data from Exchange Online, SharePoint Online, and Microsoft Graph. 3. The deployment must comply with the company's data residency policy, which requires that all data processed by Copilot remains within the European Union (EU). 4. The company wants to use a phased rollout, starting with a pilot group of 500 users. Which configuration should the IT administrator implement to meet these requirements?

Accepted Answer

Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in the Microsoft 365 admin center, configure the data storage location to 'EU'.. The Microsoft 365 admin center provides a tenant-level setting to configure the data storage location for Microsoft Copilot for Microsoft 365, ensuring all processed data remains within the EU. Assigning licenses to the pilot group enables the phased rollout, while the data residency setting satisfies the compliance requirement without needing a separate tenant or manual user configuration.

Answer

Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in Microsoft Purview, create a data residency policy that restricts data to the EU.

Answer

Enable Microsoft Copilot for Microsoft 365 in the Microsoft 365 admin center for all users, then ask each user to customize their Copilot permissions in Graph.

Answer

Create a separate Microsoft 365 tenant in the EU region, move pilot users to that tenant, and assign Copilot licenses there.

Question 10

A mid-sized company, Fabrikam, uses Microsoft 365 Business Premium. The company has 500 users and wants to implement a solution to protect against phishing attacks that target user credentials. The solution must: 1. Automatically detect and block malicious links in emails and Teams messages. 2. Provide real-time protection when users click on links in emails. 3. Allow users to report suspicious emails to the security team. 4. Integrate with Microsoft Entra ID to enforce conditional access policies based on user risk. Which combination of Microsoft 365 services should Fabrikam deploy?

Accepted Answer

Deploy Microsoft Defender for Office 365 and enable Microsoft Defender XDR.. Microsoft Defender for Office 365 (formerly Office 365 ATP) provides Safe Links and Safe Attachments to automatically detect and block malicious links in email and Teams messages, and offers real-time protection when users click links. Microsoft Defender XDR (Extended Detection and Response) correlates signals across Defender for Office 365, Defender for Endpoint, and Microsoft Entra ID to enforce conditional access policies based on user risk, fulfilling all four requirements.

Answer

Deploy Microsoft Intune and enforce conditional access policies that require compliant devices.

Answer

Deploy Microsoft Sentinel and configure analytics rules for phishing.

Answer

Deploy Microsoft Purview Data Loss Prevention and set up an email policy.

Question 11

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Answer

Microsoft Teams

Answer

Microsoft Power Apps

Answer

Microsoft OneDrive

Question 12

A company uses Microsoft 365 Business Premium. All users have Microsoft 365 E3 licenses, but the IT team wants to enforce conditional access policies to require multifactor authentication (MFA) for all external access to SharePoint Online. Which service should they use to create and manage these policies?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides Conditional Access policies, which can require MFA for external access to SharePoint Online. These policies are evaluated at authentication time based on signals like user location, device state, and application, and they are independent of the underlying Microsoft 365 license (E3 or Business Premium).

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 13

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection and surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes with automatic data collection into Excel Online. It provides a simple interface for designing forms, distributing them, and analyzing responses in real time, making it the primary tool for this task in Microsoft 365.

Answer

Microsoft Lists

Answer

Excel Online

Answer

SharePoint Lists

Question 14

A corporate IT department is planning to use Microsoft 365 services to improve employee productivity with AI-powered features. Which TWO services provide AI-generated content suggestions in real-time?

Accepted Answer

Copilot in Power Platform. Copilot in Power Platform provides AI-generated content suggestions in real-time by enabling users to describe their requirements in natural language, which then generates Power Apps, Power Automate flows, or Power BI reports. This real-time AI assistance directly improves employee productivity by automating the creation of business solutions.

Answer

Microsoft Viva Insights

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 15

A multinational organization uses Microsoft 365 E5 and needs to ensure compliance with data residency requirements for email and documents stored in Exchange Online and SharePoint Online. Which THREE services or features can help administrators enforce data location policies?

Accepted Answer

Multi-Geo Capabilities for SharePoint and OneDrive. Multi-Geo Capabilities for SharePoint and OneDrive (Option A) allows administrators to provision and store data at rest in specified geographic locations, ensuring compliance with data residency requirements. This feature enables a tenant to have multiple satellite geographies where content is stored, while the central location remains the primary data residency.

Answer

Microsoft Bookings

Answer

Microsoft Entra ID