MS-900 Describe Microsoft 365 apps and services Practice Test 21 — 15 Questions

Question 1

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

Accepted Answer

Microsoft Purview Information Protection with sensitivity labels and SharePoint Online. Option B is correct because Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Answer

SharePoint Online External Sharing and Microsoft Entra B2B

Answer

Microsoft Entra B2B collaboration with Conditional Access

Answer

Microsoft Teams with guest access and sharing permissions

Question 2

A company is deploying Microsoft 365 Apps for Enterprise to 500 users. The IT team wants to minimize network traffic during installation by downloading only the apps that users need, instead of the full Office suite. Which deployment tool should they use?

Accepted Answer

Office Deployment Tool (ODT). The Office Deployment Tool (ODT) allows IT administrators to download and deploy only the specific Microsoft 365 Apps (e.g., Word, Excel) needed by users, using an XML configuration file to control which products and languages are installed. This minimizes network traffic by avoiding the download of the full suite, making it the correct choice for this scenario.

Answer

Microsoft Store for Business

Answer

Microsoft Configuration Manager

Answer

Microsoft Intune

Question 3

A user accidentally deletes a critical file from their OneDrive for Business. The IT admin needs to restore the file. What is the maximum number of days that OneDrive for Business retains deleted files by default for users without a retention policy?

Accepted Answer

93 days. By default, OneDrive for Business retains deleted files in the recycle bin for 93 days. This includes both the first-stage recycle bin (30 days) and the second-stage recycle bin (an additional 63 days), totaling 93 days before permanent deletion. This default retention applies when no specific retention policy or legal hold is configured.

Answer

30 days

Answer

60 days

Answer

183 days

Question 4

An organization uses Microsoft Teams for collaboration. The security team wants to ensure that external guests cannot download files shared in Teams channels. Compliance requirements also demand that all communication in Teams be encrypted at rest and in transit. Which built-in Teams capabilities address these requirements?

Accepted Answer

Teams information barriers and default encryption. Option D is correct because Teams information barriers can be configured to restrict external guest actions, such as preventing file downloads, while default encryption (Microsoft 365 uses BitLocker for disk-level encryption and TLS 1.2+ for data in transit) ensures all communication is encrypted at rest and in transit. These are built-in capabilities that directly address both the guest download restriction and encryption compliance requirements without additional licensing or complex configuration.

Answer

Sensitivity labels applied to the Teams site

Answer

Microsoft Purview Data Loss Prevention policies

Answer

Microsoft Entra Conditional Access policies

Question 5

A marketing department uses Microsoft 365 Copilot to generate content. The compliance officer is concerned about data leakage when users interact with Copilot. Which Microsoft Purview feature should the admin implement to prevent sensitive data from being used in Copilot prompts?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) for Copilot. Microsoft Purview Data Loss Prevention (DLP) for Copilot is the correct feature because it specifically inspects and blocks sensitive data (e.g., credit card numbers, PII) from being included in Copilot prompts or generated content. DLP policies can be applied to Copilot interactions to prevent data leakage by evaluating the content in real time against sensitive information types and enforcing actions like blocking or warning the user.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Purview Information Rights Management (IRM)

Answer

Microsoft Purview Sensitivity labels

Question 6

A small business with 10 employees wants to use professional email with custom domain, web versions of Office apps, and 1 TB of cloud storage per user. Which Microsoft 365 plan meets these requirements?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides professional email with a custom domain (Exchange Online), web versions of Office apps (Office for the web), and 1 TB of cloud storage per user (OneDrive for Business). This plan is designed for small businesses needing core productivity and communication tools at a lower cost, without desktop Office installations.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 E3

Answer

Microsoft 365 Business Standard

Question 7

A multinational corporation uses Microsoft 365 E5 and wants to implement a retention policy that automatically deletes emails in users' mailboxes after 7 years, except for emails from the legal department which must be retained indefinitely. Which approach should the admin use?

Accepted Answer

Create a default retention policy for 7 years and use auto-labeling for legal department emails. Option C is correct because it uses a retention policy with a 7-year deletion period for all content, then overrides that for legal department emails via auto-labeling with a 'retain indefinitely' label. This ensures that only legal emails are preserved forever while all other emails are automatically purged after 7 years, meeting the compliance requirement without manual intervention.

Answer

Apply a litigation hold to all mailboxes and a retention policy to delete after 7 years

Answer

Configure Exchange Online archive policies to move emails after 7 years

Answer

Use Microsoft Purview eDiscovery to manually delete emails after 7 years

Question 8

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Answer

SharePoint Online

Answer

Microsoft Lists

Answer

Excel Online

Question 9

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Accepted Answer

Microsoft Defender for Office 365 Plan 2. Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Defender for Office 365 Plan 1

Question 10

Which TWO Microsoft 365 services allow users to collaborate in real-time on the same document?

Accepted Answer

SharePoint Online. SharePoint Online and OneDrive for Business both support real-time co-authoring, allowing multiple users to edit the same document simultaneously. This is enabled by the Office Online Server infrastructure and the use of WebDAV and REST APIs to synchronize changes in near real-time. Co-authoring works in Word, Excel, and PowerPoint files stored in these services, with conflict resolution handled by the application.

Answer

Microsoft Viva

Answer

Yammer

Answer

Microsoft Teams

Question 11

Refer to the exhibit. An admin configures these two Conditional Access policies in Microsoft Entra ID. A user signs in from a new location with a device that is not compliant and is assigned a high risk level by identity protection. What will happen to the user's sign-in?

Accepted Answer

The user is blocked from signing in.. The first Conditional Access policy blocks all access for users assigned a high risk level. Since the user is assigned a high risk level by Identity Protection, this policy is triggered first, and because Conditional Access policies are evaluated in order and the first applicable policy that results in a block will prevent further evaluation, the user is blocked from signing in. The second policy requiring MFA for non-compliant devices is never evaluated because the block policy takes precedence.

Answer

The user is granted access because the second policy requires MFA.

Answer

The user is prompted for MFA due to the second policy.

Answer

The user is allowed access but with session restrictions.

Question 12

Contoso Ltd. is a medium-sized company with 2,000 users. They use Microsoft 365 E5 and have recently deployed Microsoft Teams for collaboration. The IT department has received complaints that external partners (guests) can see internal team names and member lists in the Teams directory. The compliance team requires that external guests must only see teams they are directly added to, and they must not be able to search for other teams or see internal team members who are not members of the same team. Additionally, the HR team wants to use a custom app in Teams that allows employees to submit leave requests, and this app must be available to all employees without requiring them to install anything manually. The IT admin needs to configure Teams settings to meet these requirements. Which two actions should the admin take? (Choose two. Each correct answer is part of the solution.)

Accepted Answer

Disable 'Show all teams' in the Teams admin center to prevent guests from seeing teams they are not members of.. Option A is correct because disabling 'Show all teams' in the Teams admin center (under Teams settings) prevents guests from seeing teams they are not members of in the Teams directory. This directly addresses the compliance requirement that external guests must only see teams they are directly added to and cannot search for other teams or see internal team members outside their own team.

Answer

Block all external access in Teams admin center to prevent guests from joining.

Answer

Configure external sharing settings in SharePoint admin center to limit guest access.

Answer

Enable external access in Teams admin center to allow guests to communicate with internal users.

Question 13

WideWorldImporters is a retail company with 500 employees. They use Microsoft 365 Business Premium. The company has a shared mailbox for customer inquiries that several employees monitor. Recently, they noticed that some emails from the shared mailbox are being deleted before being read. The IT admin investigates and finds that a PowerShell script runs daily to clean up the shared mailbox by deleting emails older than 30 days. However, some emails are being deleted before 30 days. The admin needs to ensure that no emails are deleted from the shared mailbox before they are read by at least one person. The admin also wants to retain all emails for a minimum of 30 days for compliance purposes, even if they are read. Additionally, the admin wants to prevent users from accidentally deleting emails from the shared mailbox. Which three configurations should the admin implement? (Choose three. Each correct answer is part of the solution.)

Accepted Answer

Disable the PowerShell script that deletes emails older than 30 days.. Option A is correct because the PowerShell script is the root cause of premature deletions. Disabling it stops the automated cleanup that deletes emails before they are read, allowing the admin to implement controlled retention policies instead.

Answer

Enable the shared mailbox for archiving to move old emails to archive.

Answer

Apply a messaging records management (MRM) policy that deletes emails after 30 days.

Question 14

A user reports that Microsoft Teams meetings frequently drop audio. During troubleshooting, you discover that the user's network has high jitter and packet loss. Which Microsoft 365 service should you use to analyze the user's connection quality and identify the root cause?

Accepted Answer

Microsoft 365 Network Connectivity Center. B is correct because Microsoft 365 Network Connectivity Center is specifically designed to analyze network performance metrics like jitter, packet loss, and latency in real time. It provides detailed insights into connection quality between a user's device and Microsoft 365 services, enabling you to pinpoint the root cause of audio drops in Teams meetings.

Answer

Microsoft Defender XDR

Answer

Microsoft Teams admin center

Answer

Microsoft Intune

Question 15

Your organization is migrating from on-premises Exchange to Exchange Online. You need to ensure that users can access their mailboxes using Outlook for Windows without re-entering credentials each time. Which Microsoft 365 service should you configure to enable single sign-on (SSO) and modern authentication?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides single sign-on (SSO) and modern authentication (OAuth 2.0, OpenID Connect) for Exchange Online. When configured, Outlook for Windows can use the Microsoft Entra ID token to authenticate silently, eliminating the need for users to re-enter credentials each time they access their mailbox.

Answer

Microsoft Intune

Answer

Microsoft Purview

Answer

Microsoft Sentinel