MS-900 Describe Microsoft 365 apps and services Practice Test 2 — 15 Questions

Question 1

Drag and drop the steps to configure Microsoft 365 Multi-Factor Authentication (MFA) for a user into the correct order.

Accepted Answer

Enable MFA for the user in the Microsoft 365 admin center, then the user signs in and registers their verification methods.. MFA is enabled per user from the admin center, then the user must register their verification methods.

Answer

The user registers their verification methods first, then the admin enables MFA for the user.

Answer

Enable MFA for the user, then configure the default authentication method, then the user registers verification methods.

Answer

Configure the MFA service settings (e.g., number of methods required), then enable MFA for the user, then the user registers.

Question 2

Your organization is deploying Microsoft 365 Copilot and wants to ensure that users can generate meeting summaries from Teams recordings. Which licensing requirement must be met?

Accepted Answer

Microsoft 365 E5 plus the Microsoft 365 Copilot add-on license. Microsoft 365 Copilot can generate meeting summaries from Teams recordings, but this capability requires access to the Microsoft Graph API and the underlying AI processing, which is only available with the Microsoft 365 Copilot add-on license. This add-on must be assigned on top of a qualifying subscription such as Microsoft 365 E5, which provides the necessary Teams recording and transcription features. Without the E5 base license, the required recording and compliance features are not available, and without the Copilot add-on, the AI summarization is not enabled.

Answer

Microsoft 365 Copilot for Microsoft 365 with no additional license

Answer

Microsoft 365 Copilot standalone license without any other subscription

Answer

Microsoft 365 Business Basic

Question 3

Refer to the exhibit. The JSON snippet represents a Microsoft Purview sensitivity label policy. An administrator wants to prevent external users from accessing documents labeled 'Highly Confidential'. Which element in the policy achieves this?

Accepted Answer

encrypt. In Microsoft Purview, sensitivity labels enforce protection via encryption. To prevent external users from accessing labeled documents, you configure the label's encryption settings to restrict access to specific internal users/groups. There is no 'blockAccess' action in a sensitivity label policy.

Answer

blockAccess

Answer

applyWatermark

Answer

labels

Question 4

Refer to the exhibit. The ARM template is used to deploy an Azure resource. Which Microsoft 365 service is most likely to use this template for storing data?

Accepted Answer

SharePoint Online. The ARM template in the exhibit deploys an Azure resource, and SharePoint Online is the Microsoft 365 service that most commonly uses Azure Resource Manager (ARM) templates for provisioning and managing its storage infrastructure, such as Azure SQL Database or Azure Storage accounts that back SharePoint's content databases. SharePoint Online relies on Azure services for scalable storage, and ARM templates are the standard deployment mechanism for these underlying Azure resources.

Answer

Microsoft Teams

Answer

Exchange Online

Answer

OneDrive for Business

Question 5

A user reports that they cannot schedule a meeting with external participants using Microsoft Teams. The administrator confirms that external access is enabled. What is the most likely cause?

Accepted Answer

The user does not have a license that includes Microsoft Teams. Scheduling meetings with external participants in Microsoft Teams requires the user to have a license that includes Teams, such as Microsoft 365 Business Basic or Enterprise E3. Without this license, the user cannot initiate or organize meetings, even if external access is enabled. Option D is correct because licensing is a prerequisite for using Teams features, including meeting scheduling.

Answer

The user's Exchange Online mailbox is full

Answer

The Teams client is outdated

Answer

Guest access is disabled

Question 6

A company wants to implement a solution where employees can ask questions in natural language and get answers from internal knowledge bases. Which Microsoft 365 service should they use?

Accepted Answer

Copilot for Microsoft 365. Copilot for Microsoft 365 integrates with enterprise data, allowing employees to ask natural language questions and retrieve answers from internal knowledge bases. Option B (Microsoft Search) is a search tool but does not provide conversational answers. Option C (Bing Chat Enterprise) focuses on web search and cannot access internal data. Option D (Microsoft Viva Answers) is a Q&A feature but lacks the advanced AI capabilities of Copilot.

Answer

Microsoft Search

Answer

Bing Chat Enterprise

Answer

Microsoft Viva Answers

Question 7

Which TWO Microsoft 365 services provide real-time communication and collaboration features?

Accepted Answer

Microsoft Teams. Microsoft Teams (B) is correct because it is Microsoft 365's core hub for real-time communication and collaboration, providing persistent chat, channel conversations, threaded replies, and integrated audio/video calling and meetings via VoIP and PSTN connectivity. Yammer (D) is correct because it provides real-time enterprise social networking, enabling live conversations, community posts, and immediate feedback across the organization through its web and mobile clients. OneDrive for Business (A) is incorrect because it is primarily a per-user cloud file storage and synchronization service, not a real-time communication platform. Exchange Online (C) is incorrect because it delivers email, calendaring, and mailbox services that are store-and-forward rather than real-time interactive communication. SharePoint (E) is incorrect because it is a document management and intranet/content collaboration platform, not a real-time communication service.

Answer

OneDrive for Business

Answer

Exchange Online

Answer

SharePoint

Question 8

A company uses Microsoft 365 E5. They want to automatically retain all documents containing credit card numbers for 3 years and then delete them. Which THREE Microsoft Purview features should they use?

Accepted Answer

Auto-labeling policies. Auto-labeling policies (A) are correct because they can automatically apply a sensitivity label to items matching sensitive information types such as credit card numbers, which is the trigger mechanism needed to classify the documents at scale. Sensitivity labels (E) are correct because they are the classification container that auto-labeling applies; the label itself can then be configured with retention settings. Retention labels (D) are correct because they are what actually enforce the 3-year retention period followed by deletion, and they can be published or auto-applied based on the sensitivity label. DLP policies (B) are not the right tool because they detect and block or warn on sensitive data in motion, not retain and delete it after a set period. eDiscovery (C) is for identifying, preserving, and collecting content for legal cases, not for automated lifecycle retention and deletion.

Answer

Data Loss Prevention (DLP) policies

Answer

eDiscovery

Question 9

An employee uses Microsoft 365 Business Basic. They need to schedule a meeting with external clients who have Gmail accounts. Which Microsoft 365 app should they use?

Accepted Answer

Outlook on the web. Outlook on the web (OWA) is the correct choice because it includes a full-featured calendar that supports scheduling meetings with external participants, including those with Gmail accounts, via standard iCalendar invitations. OWA sends an .ics file attachment in the email invitation, which Gmail can parse and add to the recipient's Google Calendar, enabling the external client to accept the meeting regardless of their email provider.

Answer

Microsoft Teams

Answer

Microsoft Bookings

Answer

Microsoft To Do

Question 10

A small business uses Microsoft 365 Business Premium. They want to ensure that company data on lost or stolen mobile devices is automatically removed. Which Microsoft Intune policy should they configure?

Accepted Answer

Remote wipe. Remote wipe (option B) is the correct Intune policy for automatically removing company data from lost or stolen mobile devices. When configured, Remote wipe sends a command to the device that performs a factory reset, erasing all data including corporate information. This is specifically designed for device-level data removal scenarios, unlike other policies that manage access or app-level data.

Answer

Conditional Access

Answer

App protection policies

Answer

Compliance policies

Question 11

A tenant administrator sees the above JSON snippet for a Copilot for Microsoft 365 license assignment. What is the result of this configuration?

Accepted Answer

The user receives Copilot for Microsoft 365 but cannot use Bing Chat Enterprise or Teams meeting recordings.. It describes the typical result when a Copilot for Microsoft 365 license is assigned with certain service plans disabled, such as Bing Chat Enterprise and Teams meeting recordings. The JSON assignment method allows administrators to disable specific service plans by setting their status to 'Disabled'. In this scenario, the user receives the Copilot license but without the disabled features. The other options are incorrect: Option A is wrong because not all features are enabled if any service plans are disabled. Option B is wrong because JSON can be used to assign licenses via Graph API. Option D is wrong because the JSON snippet specifies a Copilot license, not an E5 license.

Answer

The user receives Copilot for Microsoft 365 with all features enabled.

Answer

The license assignment is invalid because Copilot for Microsoft 365 cannot be assigned via JSON.

Answer

The user is assigned a Microsoft 365 E5 license instead.

Question 12

A security analyst runs the above KQL query in Microsoft 365 Defender. What is the primary purpose of this query?

Accepted Answer

Count emails that failed SPF/DKIM/DMARC.. The KQL query uses `EmailEvents` with a filter on `EmailAuthenticationResult` for failed authentication (e.g., `where AuthenticationResult == 'Fail'`), then summarizes by `SenderMailFromDomain`, counts, sorts descending, and takes the top 10. The `where Timestamp > ago(7d)` restricts to the last week. Thus, the query identifies the top 10 sender domains that failed SPF/DKIM/DMARC in the last week.

Answer

Show the number of phishing clicks per user.

Answer

Identify the top 10 sender domains that were blocked in the last week.

Answer

List all emails that were allowed despite containing malware.

Question 13

Refer to the exhibit. A JSON snippet from a Microsoft Purview compliance policy. What is the effect of this policy when applied to a document?

Accepted Answer

It encrypts the document and adds a watermark.. The Microsoft Purview sensitivity label policy configures both encryption (via protection settings) and watermarking (via marking settings). When applied to a document, it enforces both actions simultaneously, resulting in the document being encrypted and watermarked. Therefore, option A is correct.

Answer

It prevents any sharing of the document.

Answer

It only adds a watermark.

Answer

It only encrypts the document.

Question 14

Which TWO Microsoft 365 apps are primarily used for real-time communication and collaboration?

Accepted Answer

Microsoft Teams. Microsoft Teams (A) is correct because it is Microsoft 365's core hub for real-time communication and collaboration, providing persistent chat, channel conversations, 1:1 and group calls, and scheduled or ad hoc meetings with audio, video, and screen sharing. Microsoft Viva Engage (E) is correct because it delivers enterprise social networking with communities, conversations, and live events that enable real-time interaction and collaboration across the organization. Microsoft Planner (B) is a task and plan management tool for organizing work, not a real-time communication platform. Microsoft Forms (C) is used to create surveys, quizzes, and polls for data collection rather than live interaction. OneNote (D) is a note-taking and digital notebook app for capturing and sharing content, but it does not provide real-time communication features.

Answer

Microsoft Planner

Answer

Microsoft Forms

Answer

OneNote

Question 15

An administrator runs the above PowerShell command and receives output of '14'. What does this value indicate?

Accepted Answer

Items in the Deleted Items folder are permanently deleted after 14 days.. The value '14' indicates that the retention policy for the Deleted Items folder permanently deletes items after 14 days. This is a common retention setting applied to the Deleted Items folder.

Answer

Inbox rules are retained for 14 days after deletion.

Answer

The mailbox has a litigation hold for 14 days.

Answer

Calendar items are retained for 14 days after the meeting end.