MS-900 Describe Microsoft 365 apps and services Practice Test 22 — 15 Questions

Question 1

A company wants to enable its sales team to automatically generate meeting summaries and action items from Microsoft Teams conversations. Which Microsoft 365 app or feature provides this capability?

Accepted Answer

Microsoft Copilot for Microsoft 365. Option A is correct because Microsoft Copilot for Microsoft 365 uses AI to summarize meetings and generate action items. Option B is wrong because Microsoft Viva Insights provides productivity analytics but not meeting summaries. Option C is wrong because Microsoft Stream hosts videos. Option D is wrong because Microsoft Forms creates surveys.

Answer

Microsoft Viva Insights

Answer

Microsoft Stream

Answer

Microsoft Forms

Question 2

Your organization uses Microsoft 365 E5 licenses and wants to implement a data loss prevention (DLP) policy that blocks sharing of credit card numbers in email. Which Microsoft 365 admin center should you use to create and manage this DLP policy?

Accepted Answer

Microsoft Purview compliance portal. The Microsoft Purview compliance portal is the correct admin center for creating and managing Data Loss Prevention (DLP) policies because it provides the unified compliance management interface for data protection, including DLP for Exchange Online email. DLP policies that block sharing of sensitive information like credit card numbers are configured under the 'Data loss prevention' section within the Purview portal, which leverages built-in sensitive information types and rules to enforce actions such as blocking email transmission.

Answer

Microsoft Security Center

Answer

Microsoft Entra admin center

Answer

Microsoft 365 admin center

Question 3

You are configuring Microsoft Entra ID Protection policies for your organization. The exhibit shows a configuration snippet. Which behavior will occur when a user signs in from a known malicious IP address?

Accepted Answer

The sign-in will be blocked immediately.. Option A is correct because the sign-in risk policy is enabled with risk level 'high' and blockAccess set to true, so a sign-in from a malicious IP (high risk) will be blocked. Option B is wrong because the user risk policy does not block (blockAccess false). Option C is wrong because the policy is configured to block, not just require MFA. Option D is wrong because no password reset is triggered.

Answer

The user's account will be disabled.

Answer

The user will be prompted to change their password.

Answer

The sign-in will be allowed but a multi-factor authentication challenge will be required.

Question 4

A user needs to collaborate on a document with colleagues in real time, but the document must be stored on a local network server due to regulatory requirements. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft OneDrive. Option C is correct because Microsoft OneDrive supports real-time co-authoring via its sync client and web interface, but crucially, when used with 'Files On-Demand' and local sync, the actual file can be stored on a local network server if the user syncs a SharePoint document library that resides on-premises via a cloud hybrid configuration. However, the question specifies the document must be stored on a local network server due to regulatory requirements; OneDrive for Business can sync files from a local server if the organization uses a cloud hybrid setup with SharePoint Server, but the core scenario is that OneDrive allows offline access and real-time collaboration while the authoritative copy remains on-premises. This meets the regulatory need for local storage while enabling real-time co-authoring.

Answer

Microsoft SharePoint

Answer

Microsoft Word (desktop)

Answer

Microsoft Teams

Question 5

Your company has deployed Microsoft Defender XDR. A security analyst needs to investigate a suspicious email that was reported by a user. Which Microsoft 365 service should the analyst use to view the email's details and analyze threats?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct service because it provides a unified investigation and response experience across email, endpoints, identities, and cloud apps. The security analyst can use the Microsoft Defender portal (security.microsoft.com) to view the full email details, including headers, attachments, URLs, and threat analysis results from automated investigation and advanced hunting queries.

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 6

A large enterprise needs to enforce that all documents containing financial data are automatically classified and encrypted when shared externally. Which combination of Microsoft 365 services should be used?

Accepted Answer

Microsoft Purview Information Protection and Microsoft Defender for Cloud Apps. Option C is correct because Microsoft Purview Information Protection provides the classification and labeling capabilities to automatically identify documents containing financial data, while Microsoft Defender for Cloud Apps enables policy-based encryption and protection controls when those documents are shared externally. Together, they enforce data loss prevention (DLP) by applying sensitivity labels that trigger encryption upon external sharing, meeting the enterprise requirement.

Answer

Microsoft Forms and Microsoft Stream

Answer

Microsoft Sentinel and Microsoft Defender XDR

Answer

Microsoft Intune and Microsoft Entra ID

Question 7

A user wants to create a custom dashboard that displays key performance indicators from multiple data sources, such as Excel files and SharePoint lists. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft Power BI. Microsoft Power BI is the correct choice because it is a business analytics service designed to connect to multiple data sources—including Excel files and SharePoint lists—and create interactive, custom dashboards with key performance indicators (KPIs). Unlike the other options, Power BI provides built-in data modeling, visualization, and real-time refresh capabilities, making it the only app in this list that fulfills the requirement for a multi-source KPI dashboard.

Answer

Microsoft Excel

Answer

Microsoft Lists

Answer

Microsoft Forms

Question 8

Which TWO Microsoft 365 services can be used to provide secure remote access to on-premises applications without requiring a VPN?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications by publishing them through an external endpoint in Azure AD, without requiring a VPN. It works by establishing outbound connections from the on-premises Application Proxy connector to the Azure AD service, which then proxies user requests. This eliminates the need to open inbound firewall ports or maintain VPN infrastructure, making it ideal for remote access to legacy apps.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 9

Which THREE Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage data lifecycle and retention?

Accepted Answer

Records Management. Records Management (B) is correct because it enables organizations to declare records, apply retention labels, and manage the disposition of content in a defensible manner. It is a core Purview feature for managing the data lifecycle, ensuring that records are retained for the required period and then disposed of appropriately.

Answer

Sensitivity Labels

Answer

Data Loss Prevention

Question 10

Which TWO Microsoft 365 apps are part of the Microsoft Viva suite?

Accepted Answer

Microsoft Viva Insights. Microsoft Viva Insights is correct because it is a core component of the Microsoft Viva employee experience platform, providing personalized wellbeing, productivity, and collaboration analytics derived from Microsoft 365 data. It uses signals from emails, meetings, and chats to deliver actionable insights to individuals, managers, and leaders.

Answer

Microsoft Teams

Answer

Microsoft SharePoint

Answer

Microsoft Power BI

Question 11

Your organization, Contoso Ltd., uses Microsoft 365 E5 licenses and has 10,000 users. The company is planning to deploy Microsoft Copilot for Microsoft 365 to all users. The IT department has identified the following requirements: 1. Users must be able to use Copilot across Microsoft Teams, Word, Excel, PowerPoint, and Outlook. 2. Copilot must be able to access user data from Exchange Online, SharePoint Online, and Microsoft Graph. 3. The deployment must comply with the company's data residency policy, which requires that all data processed by Copilot remains within the European Union (EU). 4. The company wants to use a phased rollout, starting with a pilot group of 500 users. Which configuration should the IT administrator implement to meet these requirements?

Accepted Answer

Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in the Microsoft 365 admin center, configure the data storage location to 'EU'.. Option C is correct because the Microsoft 365 admin center provides a tenant-level setting to configure the data storage location for Microsoft Copilot for Microsoft 365, ensuring all processed data remains within the EU. Assigning licenses to the pilot group enables the phased rollout, while the data residency setting satisfies the compliance requirement without needing a separate tenant or manual user configuration.

Answer

Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in Microsoft Purview, create a data residency policy that restricts data to the EU.

Answer

Enable Microsoft Copilot for Microsoft 365 in the Microsoft 365 admin center for all users, then ask each user to customize their Copilot permissions in Graph.

Answer

Create a separate Microsoft 365 tenant in the EU region, move pilot users to that tenant, and assign Copilot licenses there.

Question 12

A mid-sized company, Fabrikam, uses Microsoft 365 Business Premium. The company has 500 users and wants to implement a solution to protect against phishing attacks that target user credentials. The solution must: 1. Automatically detect and block malicious links in emails and Teams messages. 2. Provide real-time protection when users click on links in emails. 3. Allow users to report suspicious emails to the security team. 4. Integrate with Microsoft Entra ID to enforce conditional access policies based on user risk. Which combination of Microsoft 365 services should Fabrikam deploy?

Accepted Answer

Deploy Microsoft Defender for Office 365 and enable Microsoft Defender XDR.. Microsoft Defender for Office 365 (formerly Office 365 ATP) provides Safe Links and Safe Attachments to automatically detect and block malicious links in email and Teams messages, and offers real-time protection when users click links. Microsoft Defender XDR (Extended Detection and Response) correlates signals across Defender for Office 365, Defender for Endpoint, and Microsoft Entra ID to enforce conditional access policies based on user risk, fulfilling all four requirements.

Answer

Deploy Microsoft Intune and enforce conditional access policies that require compliant devices.

Answer

Deploy Microsoft Sentinel and configure analytics rules for phishing.

Answer

Deploy Microsoft Purview Data Loss Prevention and set up an email policy.

Question 13

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Answer

Microsoft Teams

Answer

Microsoft Power Apps

Answer

Microsoft OneDrive

Question 14

A company uses Microsoft 365 Business Premium. All users have Microsoft 365 E3 licenses, but the IT team wants to enforce conditional access policies to require multifactor authentication (MFA) for all external access to SharePoint Online. Which service should they use to create and manage these policies?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides Conditional Access policies, which can require MFA for external access to SharePoint Online. These policies are evaluated at authentication time based on signals like user location, device state, and application, and they are independent of the underlying Microsoft 365 license (E3 or Business Premium).

Answer

Microsoft Defender XDR

Answer

Microsoft Intune

Answer

Microsoft Purview

Question 15

An organization uses Microsoft 365 E5 and wants to automatically classify and protect sensitive documents stored in SharePoint Online based on content patterns (e.g., credit card numbers). They need to apply encryption and restrict access when such content is detected. Which Microsoft 365 service should they configure?

Accepted Answer

Microsoft Purview Information Protection. Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides content-based classification and protection for sensitive data. It uses trainable classifiers and sensitive information types (e.g., credit card numbers) to automatically apply encryption and restrict access via sensitivity labels in SharePoint Online.

Answer

Microsoft Entra ID

Answer

Microsoft Sentinel

Answer

Microsoft Defender for Cloud Apps