MS-900 Describe Microsoft 365 apps and services Practice Test 22 — 15 Questions

Question 1

Which THREE Microsoft 365 services are part of Microsoft Defender XDR (Extended Detection and Response)? (Select three.)

Accepted Answer

Microsoft Defender for Endpoint. Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, and email/collaboration. Microsoft Defender for Endpoint is correct because it provides endpoint detection and response (EDR) capabilities, collecting telemetry from Windows, macOS, Linux, Android, and iOS devices to detect and remediate advanced threats.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Question 2

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Accepted Answer

Microsoft Outlook. Microsoft Outlook (A) is correct because its AI-powered features, such as Microsoft Copilot in Outlook, can summarize long email threads and generate concise recaps directly within the mailbox. Microsoft Word (E) is correct because Copilot in Word can summarize lengthy documents, producing key points and overviews of the file's content. Excel (B) focuses on data analysis, formulas, and spreadsheet insights rather than email or document summarization, so it does not fit. OneNote (C) is a note-taking app and does not provide the specified email-thread and document summarization features. PowerPoint (D) is designed for creating and summarizing presentations, not email threads or general documents, so it is not one of the two correct answers.

Answer

Microsoft Excel

Answer

Microsoft OneNote

Answer

Microsoft PowerPoint

Question 3

Contoso Ltd. is a medium-sized company with 500 employees using Microsoft 365 E5. They have a mixed environment: 300 Windows 10 devices are managed by Microsoft Intune, and 200 are unmanaged but Azure AD joined. The company uses Microsoft Teams for collaboration and SharePoint Online for document storage. The security team wants to implement the following: restrict access to company data from unmanaged devices, require multi-factor authentication (MFA) for all external users accessing SharePoint, and ensure that sensitive documents labeled 'Highly Confidential' are automatically encrypted when shared via email. Currently, the company has no conditional access policies, no MFA enforced, and no data classification policies. The administrator needs to design a solution using Microsoft 365 built-in capabilities without purchasing additional licenses. What should the administrator do?

Accepted Answer

Create a conditional access policy to grant access from compliant devices, require MFA for external users, and configure a sensitivity label with auto-labeling for 'Highly Confidential' documents.. It uses Conditional Access policies to require compliant devices for access (addressing unmanaged devices), requires MFA specifically for external users (not all users, aligning with the requirement), and uses a sensitivity label with auto-labeling to automatically encrypt 'Highly Confidential' documents when shared via email. This leverages built-in Microsoft 365 capabilities without additional licenses.

Answer

Configure SharePoint to block access from unmanaged devices, enable MFA for all users, and use Microsoft Purview Data Loss Prevention (DLP) to encrypt sensitive emails.

Answer

Use Intune app protection policies to restrict data access, enable MFA for SharePoint, and use Microsoft Purview auto-labeling for encryption.

Answer

Create a conditional access policy to require MFA for all users, use Intune compliance policies to mark devices as compliant, and create a sensitivity label to encrypt documents.

Question 4

A company uses Microsoft 365 Business Premium. A user reports that when they try to access a file in SharePoint Online, they receive an error that the file is blocked by policy. The IT admin needs to identify which policy is blocking the file. Which tool should the admin use?

Accepted Answer

Microsoft Purview Data Loss Prevention policies. Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to detect and block the sharing or access of sensitive information, such as credit card numbers or personally identifiable information, in Microsoft 365 services like SharePoint Online. When a file is blocked with a 'blocked by policy' error, it is typically because a DLP rule has matched the file's content and applied an action to restrict access. The admin can use the Microsoft Purview compliance portal to review DLP policy matches and identify the exact rule that triggered the block.

Answer

Microsoft Intune compliance policies

Answer

Microsoft Entra ID Conditional Access policies

Answer

Microsoft Defender for Cloud Apps session policies

Question 5

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

Accepted Answer

Microsoft 365 Copilot. Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Answer

Microsoft Viva Insights

Answer

Microsoft Editor

Answer

Microsoft Power Automate

Question 6

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

Accepted Answer

Microsoft Purview Information Protection with sensitivity labels and SharePoint Online. Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Answer

SharePoint Online External Sharing and Microsoft Entra B2B

Answer

Microsoft Entra B2B collaboration with Conditional Access

Answer

Microsoft Teams with guest access and sharing permissions

Question 7

A company is deploying Microsoft 365 Apps for Enterprise to 500 users. The IT team wants to minimize network traffic during installation by downloading only the apps that users need, instead of the full Office suite. Which deployment tool should they use?

Accepted Answer

Office Deployment Tool (ODT). The Office Deployment Tool (ODT) allows IT administrators to download and deploy only the specific Microsoft 365 Apps (e.g., Word, Excel) needed by users, using an XML configuration file to control which products and languages are installed. This minimizes network traffic by avoiding the download of the full suite, making it the correct choice for this scenario.

Answer

Microsoft Store for Business

Answer

Microsoft Configuration Manager

Answer

Microsoft Intune

Question 8

A user accidentally deletes a critical file from their OneDrive for Business. The IT admin needs to restore the file. What is the maximum number of days that OneDrive for Business retains deleted files by default for users without a retention policy?

Accepted Answer

93 days. By default, OneDrive for Business retains deleted files in the recycle bin for 93 days. This includes both the first-stage recycle bin (30 days) and the second-stage recycle bin (an additional 63 days), totaling 93 days before permanent deletion. This default retention applies when no specific retention policy or legal hold is configured.

Answer

30 days

Answer

60 days

Answer

183 days

Question 9

A marketing department uses Microsoft 365 Copilot to generate content. The compliance officer is concerned about data leakage when users interact with Copilot. Which Microsoft Purview feature should the admin implement to prevent sensitive data from being used in Copilot prompts?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP) for Copilot. Microsoft Purview Data Loss Prevention (DLP) for Copilot is the correct feature because it specifically inspects and blocks sensitive data (e.g., credit card numbers, PII) from being included in Copilot prompts or generated content. DLP policies can be applied to Copilot interactions to prevent data leakage by evaluating the content in real time against sensitive information types and enforcing actions like blocking or warning the user.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Purview Information Rights Management (IRM)

Answer

Microsoft Purview Sensitivity labels

Question 10

A small business with 10 employees wants to use professional email with custom domain, web versions of Office apps, and 1 TB of cloud storage per user. Which Microsoft 365 plan meets these requirements?

Accepted Answer

Microsoft 365 Business Basic. Microsoft 365 Business Basic provides professional email with a custom domain (Exchange Online), web versions of Office apps (Office for the web), and 1 TB of cloud storage per user (OneDrive for Business). This plan is designed for small businesses needing core productivity and communication tools at a lower cost, without desktop Office installations.

Answer

Microsoft 365 Apps for Business

Answer

Microsoft 365 E3

Answer

Microsoft 365 Business Standard

Question 11

A multinational corporation uses Microsoft 365 E5 and wants to implement a retention policy that automatically deletes emails in users' mailboxes after 7 years, except for emails from the legal department which must be retained indefinitely. Which approach should the admin use?

Accepted Answer

Create a default retention policy for 7 years and use auto-labeling for legal department emails. It uses a retention policy with a 7-year deletion period for all content, then overrides that for legal department emails via auto-labeling with a 'retain indefinitely' label. This ensures that only legal emails are preserved forever while all other emails are automatically purged after 7 years, meeting the compliance requirement without manual intervention.

Answer

Apply a litigation hold to all mailboxes and a retention policy to delete after 7 years

Answer

Configure Exchange Online archive policies to move emails after 7 years

Answer

Use Microsoft Purview eDiscovery to manually delete emails after 7 years

Question 12

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Answer

SharePoint Online

Answer

Microsoft Lists

Answer

Excel Online

Question 13

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Accepted Answer

Microsoft Defender for Office 365 Plan 2. Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Answer

Microsoft Purview Audit (Standard)

Answer

Microsoft Defender for Office 365 Plan 1

Question 14

Which TWO Microsoft 365 services allow users to collaborate in real-time on the same document?

Accepted Answer

SharePoint Online. SharePoint Online and OneDrive for Business both support real-time co-authoring, allowing multiple users to edit the same document simultaneously. This is enabled by the Office Online Server infrastructure and the use of WebDAV and REST APIs to synchronize changes in near real-time. Co-authoring works in Word, Excel, and PowerPoint files stored in these services, with conflict resolution handled by the application.

Answer

Microsoft Viva

Answer

Yammer

Answer

Microsoft Teams

Question 15

Refer to the exhibit. An admin configures these two Conditional Access policies in Microsoft Entra ID. A user signs in from a new location with a device that is not compliant and is assigned a high risk level by identity protection. What will happen to the user's sign-in?

Accepted Answer

The user is blocked from signing in.. The first Conditional Access policy blocks all access for users assigned a high risk level. Since the user is assigned a high risk level by Identity Protection, this policy is triggered first, and because Conditional Access policies are evaluated in order and the first applicable policy that results in a block will prevent further evaluation, the user is blocked from signing in. The second policy requiring MFA for non-compliant devices is never evaluated because the block policy takes precedence.

Answer

The user is granted access because the second policy requires MFA.

Answer

The user is prompted for MFA due to the second policy.

Answer

The user is allowed access but with session restrictions.