MS-900 Describe Microsoft 365 apps and services Practice Test 20 — 15 Questions

Question 1

An organization uses Microsoft 365 and wants to implement a retention policy for all Exchange Online mailboxes that automatically deletes emails older than 7 years, except for emails from the legal department which must be kept for 10 years. What should the administrator configure?

Accepted Answer

Create two retention policies: one for all mailboxes with 7-year retention, and another for the legal department with 10-year retention using adaptive scopes.. Option D is correct because Microsoft 365 retention policies can be scoped using adaptive scopes to apply different retention settings to different groups of users. By creating two policies—one with a 7-year deletion rule for all mailboxes and another with a 10-year deletion rule for the legal department—the administrator meets the requirement without conflicting settings. Adaptive scopes allow dynamic membership based on attributes like department, ensuring the legal department's emails are kept longer while others are deleted after 7 years.

Answer

Create a single retention policy with 7-year retention and apply preservation lock.

Answer

Configure retention tags in Exchange Online for each mailbox.

Answer

Place the legal department mailboxes on litigation hold and set a 7-year retention for others.

Question 2

A user needs to co-author a Word document stored in Microsoft SharePoint Online with external partners who do not have Microsoft 365 licenses. What must the administrator enable?

Accepted Answer

External sharing in SharePoint Online. External sharing in SharePoint Online must be enabled at the tenant or site level to allow users to share documents with external partners who lack Microsoft 365 licenses. This setting controls the ability to send sharing invitations or generate shareable links for people outside the organization, which is the prerequisite for co-authoring with unlicensed external users.

Answer

Azure AD B2B collaboration

Answer

Anonymous access links for documents

Answer

Guest access in Microsoft Teams

Question 3

An organization uses Microsoft Viva Learning to provide training content. They want to ensure that only employees in the Sales department see sales-specific courses. Which feature should they use?

Accepted Answer

Create learning paths and assign them to the Sales department group in Viva Learning.. Option C is correct because Viva Learning allows administrators to create learning paths and assign them to specific Microsoft 365 groups, such as the Sales department group. This ensures that only members of that group see the assigned sales-specific courses, providing targeted content delivery without affecting other users' views.

Answer

Set permissions on the SharePoint site hosting the courses.

Answer

Configure Viva Connections dashboard to show only Sales courses.

Answer

Use Viva Topics to tag courses and let users discover them.

Question 4

A company uses Microsoft Intune to manage devices. They want to deploy a custom line-of-business (LOB) app to Windows 10 devices that are not enrolled in Intune but are joined to Azure AD. Which deployment method should they use?

Accepted Answer

Deploy the app as a Microsoft Store for Business app and assign to Azure AD-joined devices.. Option A is correct because Microsoft Store for Business allows you to deploy apps to Azure AD-joined devices that are not enrolled in Intune. The app can be assigned directly to Azure AD-joined devices via the Store for Business portal, which uses the Azure AD identity to push the app without requiring Intune enrollment.

Answer

Use sideloading by enabling developer mode on each device.

Answer

Use Intune to deploy the app as a line-of-business app.

Answer

Use Group Policy to deploy the app via Active Directory.

Question 5

An organization wants to provide employees with a personalized news feed from internal and external sources. Which Microsoft 365 app should they use?

Accepted Answer

Microsoft Viva Engage. Microsoft Viva Engage (formerly Yammer) is the correct app because it provides a personalized news feed that aggregates content from both internal sources (e.g., company announcements, community posts) and external sources (e.g., RSS feeds, external news). It enables employees to discover relevant updates in a social-style feed, aligning with the requirement for a unified internal and external news experience.

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Answer

Microsoft SharePoint

Question 6

A company uses Microsoft 365 and wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and apply encryption when shared externally. Which solution should they use?

Accepted Answer

Microsoft Purview Information Protection with auto-labeling. Microsoft Purview Information Protection with auto-labeling is the correct solution because it uses trainable classifiers or exact data match (EDM) to detect sensitive data types like credit card numbers, automatically apply a 'Highly Confidential' sensitivity label, and enforce encryption when the document is shared externally. This capability is built into Microsoft 365 compliance center and integrates with sensitivity labels to protect data at rest and in transit.

Answer

Microsoft Intune

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps

Question 7

A multinational organization uses Microsoft 365 and wants to comply with data residency requirements. They need to ensure that data for European users stays within the European Union. Which Microsoft 365 feature should they configure?

Accepted Answer

Configure multi-geo capabilities in SharePoint Online and OneDrive.. Multi-Geo capabilities in SharePoint Online and OneDrive allow organizations to provision and store data at rest in specific geographic locations, such as the European Union, to meet data residency requirements. This feature enables tenant administrators to define a preferred data location for users, ensuring their content remains within the EU boundary.

Answer

Create retention policies for EU users.

Answer

Set conditional access policies to restrict access from outside EU.

Answer

Use data loss prevention policies to block data movement.

Question 8

Which TWO Microsoft 365 apps are primarily used for business process automation and workflow? (Select two.)

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is a low-code application development platform that enables users to build custom business apps for process automation, while Microsoft Power Automate (formerly Flow) is a cloud-based service for creating automated workflows between apps and services. Together, they form the core of Microsoft's Power Platform for business process automation and workflow orchestration.

Answer

Microsoft Planner

Answer

Microsoft To Do

Answer

Microsoft Forms

Question 9

Which THREE Microsoft 365 services are part of Microsoft Defender XDR (Extended Detection and Response)? (Select three.)

Accepted Answer

Microsoft Defender for Endpoint. Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, and email/collaboration. Microsoft Defender for Endpoint is correct because it provides endpoint detection and response (EDR) capabilities, collecting telemetry from Windows, macOS, Linux, Android, and iOS devices to detect and remediate advanced threats.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Question 10

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Accepted Answer

Microsoft Outlook. Option A (Microsoft Outlook) is correct because Outlook has Copilot to summarize email threads. Option D (Microsoft Word) is correct because Word has Copilot to summarize documents. Option B is wrong because Excel Copilot analyzes data, not summarization. Option C is wrong because PowerPoint Copilot creates presentations. Option E is wrong because OneNote Copilot helps with notes.

Answer

Microsoft Excel

Answer

Microsoft OneNote

Answer

Microsoft PowerPoint

Question 11

The exhibit shows a mail flow rule in an Exchange Online environment. An administrator notices that emails from a trusted partner domain are being marked with [External]. The partner domain is configured as a domain in Microsoft 365. What should the administrator do to prevent this while maintaining the rule for other external senders?

Accepted Answer

Add an exception to the rule to exclude the partner domain.. The mail flow rule is configured to mark all external senders with [External]. Since the partner domain is already configured as an accepted domain in Microsoft 365, Exchange Online treats it as internal, but the rule still applies because it matches the sender domain pattern. Adding an exception for the partner domain explicitly excludes it from the rule, ensuring emails from that domain are not marked [External] while the rule continues to apply to all other external senders.

Answer

Disable the rule.

Answer

Change the rule priority to a lower number.

Answer

Change the rule mode to 'Test' and review the results.

Question 12

The exhibit shows a Microsoft Purview auto-labeling policy configuration. A user uploads a document containing a credit card number to a SharePoint Online site. The document does not get automatically labeled. Which is the most likely reason?

Accepted Answer

The document was uploaded before the policy was published.. Option B is correct because auto-labeling policies in Microsoft Purview apply labels to documents that are newly created or modified after the policy is published. Documents uploaded before the policy's publication date are not retroactively scanned or labeled unless a separate manual or scheduled labeling job is triggered. Since the user uploaded the document before the policy was published, it falls outside the policy's scope.

Answer

The credit card number does not meet the minimum confidence threshold of 75.

Answer

The policy is configured to apply to Exchange Online, not SharePoint.

Answer

The document is a PDF file, and auto-labeling only supports Office documents.

Question 13

Contoso Ltd. is a medium-sized company with 500 employees using Microsoft 365 E5. They have a mixed environment: 300 Windows 10 devices are managed by Microsoft Intune, and 200 are unmanaged but Azure AD joined. The company uses Microsoft Teams for collaboration and SharePoint Online for document storage. The security team wants to implement the following: restrict access to company data from unmanaged devices, require multi-factor authentication (MFA) for all external users accessing SharePoint, and ensure that sensitive documents labeled 'Highly Confidential' are automatically encrypted when shared via email. Currently, the company has no conditional access policies, no MFA enforced, and no data classification policies. The administrator needs to design a solution using Microsoft 365 built-in capabilities without purchasing additional licenses. What should the administrator do?

Accepted Answer

Create a conditional access policy to grant access from compliant devices, require MFA for external users, and configure a sensitivity label with auto-labeling for 'Highly Confidential' documents.. Option D is correct because it uses Conditional Access policies to require compliant devices for access (addressing unmanaged devices), requires MFA specifically for external users (not all users, aligning with the requirement), and uses a sensitivity label with auto-labeling to automatically encrypt 'Highly Confidential' documents when shared via email. This leverages built-in Microsoft 365 capabilities without additional licenses.

Answer

Configure SharePoint to block access from unmanaged devices, enable MFA for all users, and use Microsoft Purview Data Loss Prevention (DLP) to encrypt sensitive emails.

Answer

Use Intune app protection policies to restrict data access, enable MFA for SharePoint, and use Microsoft Purview auto-labeling for encryption.

Answer

Create a conditional access policy to require MFA for all users, use Intune compliance policies to mark devices as compliant, and create a sensitivity label to encrypt documents.

Question 14

A company uses Microsoft 365 Business Premium. A user reports that when they try to access a file in SharePoint Online, they receive an error that the file is blocked by policy. The IT admin needs to identify which policy is blocking the file. Which tool should the admin use?

Accepted Answer

Microsoft Purview Data Loss Prevention policies. Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to detect and block the sharing or access of sensitive information, such as credit card numbers or personally identifiable information, in Microsoft 365 services like SharePoint Online. When a file is blocked with a 'blocked by policy' error, it is typically because a DLP rule has matched the file's content and applied an action to restrict access. The admin can use the Microsoft Purview compliance portal to review DLP policy matches and identify the exact rule that triggered the block.

Answer

Microsoft Intune compliance policies

Answer

Microsoft Entra ID Conditional Access policies

Answer

Microsoft Defender for Cloud Apps session policies

Question 15

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

Accepted Answer

Microsoft 365 Copilot. Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Answer

Microsoft Viva Insights

Answer

Microsoft Editor

Answer

Microsoft Power Automate