MS-900 Describe Microsoft 365 apps and services Practice Test 23 — 15 Questions

Question 1

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection and surveys?

Accepted Answer

Microsoft Forms. Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes with automatic data collection into Excel Online. It provides a simple interface for designing forms, distributing them, and analyzing responses in real time, making it the primary tool for this task in Microsoft 365.

Answer

Microsoft Lists

Answer

Excel Online

Answer

SharePoint Lists

Question 2

A company uses Microsoft 365 E3 and wants to implement a collaboration solution that allows multiple users to co-author documents in real time, track version history, and set permissions at the document level. Which THREE Microsoft 365 services can fulfill these requirements?

Accepted Answer

SharePoint Online. SharePoint Online is correct because it provides document libraries that support real-time co-authoring, version history tracking, and granular permission settings at the document level. These features align directly with the requirements for collaborative document management in Microsoft 365 E3.

Answer

Exchange Online

Answer

Yammer

Question 3

A corporate IT department is planning to use Microsoft 365 services to improve employee productivity with AI-powered features. Which TWO services provide AI-generated content suggestions in real-time?

Accepted Answer

Copilot in Power Platform. Copilot in Power Platform provides AI-generated content suggestions in real-time by enabling users to describe their requirements in natural language, which then generates Power Apps, Power Automate flows, or Power BI reports. This real-time AI assistance directly improves employee productivity by automating the creation of business solutions.

Answer

Microsoft Viva Insights

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 4

A multinational organization uses Microsoft 365 E5 and needs to ensure compliance with data residency requirements for email and documents stored in Exchange Online and SharePoint Online. Which THREE services or features can help administrators enforce data location policies?

Accepted Answer

Multi-Geo Capabilities for SharePoint and OneDrive. Multi-Geo Capabilities for SharePoint and OneDrive (Option A) allows administrators to provision and store data at rest in specified geographic locations, ensuring compliance with data residency requirements. This feature enables a tenant to have multiple satellite geographies where content is stored, while the central location remains the primary data residency.

Answer

Microsoft Bookings

Answer

Microsoft Entra ID

Question 5

Refer to the exhibit. An IT administrator is using Microsoft Intune to assign Microsoft 365 Apps for Enterprise to a group called Contoso-Sales. The exhibit shows a JSON snippet from the Intune deployment configuration. Based on the snippet, what is the most likely outcome?

Accepted Answer

The app will be automatically installed on all devices in the Contoso-Sales group.. The JSON snippet shows an assignment with 'intent' set to 'Required' and 'targetGroupId' pointing to the Contoso-Sales group. In Microsoft Intune, a 'Required' assignment for a mobile app (like Microsoft 365 Apps for Enterprise) triggers automatic installation on all targeted devices without user intervention, making option A correct.

Answer

The app will be excluded from installation for the Contoso-Sales group.

Answer

The app will be available for users in the group to install from Company Portal.

Answer

The app will be assigned but requires user approval before installation.

Question 6

Your organization has 500 users and uses Microsoft 365 Business Basic. The sales team frequently works remotely and needs to access their work files on mobile devices. They also need to conduct video meetings with customers. The IT department has been asked to recommend additional Microsoft 365 services to meet these needs without upgrading the existing plan if possible. Which action should the IT department take?

Accepted Answer

Use the existing OneDrive and SharePoint mobile apps for file access and use Microsoft Teams for video meetings.. Option D is correct because Microsoft 365 Business Basic already includes OneDrive and SharePoint for mobile file access via their respective apps, and Microsoft Teams for video meetings. These services meet the sales team's requirements without any additional licensing or plan upgrade, as Teams supports video conferencing and OneDrive/SharePoint provide secure remote file access on mobile devices.

Answer

Subscribe to a Microsoft Teams Rooms license for each user.

Answer

Upgrade all users to Microsoft 365 Business Standard to get desktop Office and additional features.

Answer

Deploy a third-party VPN solution to secure remote access to files.

Question 7

A financial services company uses Microsoft 365 E5 and wants to implement a data loss prevention (DLP) policy that blocks users from sharing credit card numbers via email and Teams messages. The compliance team also wants to generate reports on policy violations. They are considering using Microsoft Purview. Which approach should they take to meet these requirements with minimum administrative overhead?

Accepted Answer

Create a unified DLP policy in the Microsoft Purview compliance portal that covers Exchange and Teams.. Option A is correct because Microsoft Purview DLP policies can be created in the Microsoft Purview compliance portal to monitor and block sensitive data in Exchange Online and Teams. Option B is wrong because creating individual policies per service is more overhead. Option C is wrong because Microsoft Defender for Cloud Apps is for cloud app security, not primary DLP for email and Teams. Option D is wrong because Microsoft Sentinel is a SIEM and not designed for DLP policy enforcement.

Answer

Create separate DLP policies in Exchange admin center and Teams admin center.

Answer

Use Microsoft Sentinel to create analytics rules that detect sharing of credit card numbers.

Answer

Use Microsoft Defender for Cloud Apps to create session policies for email and Teams.

Question 8

Your company has 10,000 users across multiple regions and uses Microsoft 365 E5. You need to ensure that all users have access to Microsoft Copilot for Microsoft 365 to boost productivity. However, due to licensing costs, management wants to minimize expenses by only assigning Copilot licenses to users who will actively use it. They also want to track usage to make informed renewal decisions. What should you do?

Accepted Answer

Assign Copilot licenses to a pilot group and use Microsoft 365 usage reports to identify active users before expanding.. Option A is correct because it aligns with the management's goal of minimizing costs by first assigning Copilot licenses to a pilot group, then using Microsoft 365 usage reports (which track Copilot-specific metrics like active users, sessions, and feature adoption) to identify active users before expanding license assignment. This approach ensures only engaged users receive licenses, optimizing spend while providing data for renewal decisions.

Answer

Disable Copilot by default and allow users to request it via a helpdesk ticket.

Answer

Assign Copilot licenses to all users via group-based licensing in Microsoft Entra ID.

Answer

Use Power Automate to automatically assign Copilot licenses to users who send more than 50 emails per day.

Question 9

A medium-sized business uses Microsoft 365 Business Premium. The HR department needs a secure way to collect employee feedback anonymously. They also need to store the results in a structured format that can be analyzed later. They are considering using Microsoft Forms and Excel. However, the IT department is concerned about data retention and wants to ensure that responses are automatically deleted after 90 days. What should the IT department configure?

Accepted Answer

Apply a Microsoft Purview retention label to the folder storing the Excel responses with a 90-day retention period.. Option B is correct because Microsoft Purview retention labels can be applied to the folder in SharePoint or OneDrive where the Excel responses are stored, enforcing a 90-day retention period that automatically deletes the data after that time. This meets the IT department's data retention requirement without manual intervention or complex automation, and it integrates directly with the storage location of the structured results.

Answer

Create a Power Automate flow that deletes responses after 90 days.

Answer

Manually delete the responses every 90 days using the Forms interface.

Answer

Set the Forms settings to automatically delete responses after 90 days.

Question 10

A non-profit organization uses Microsoft 365 Business Basic. They have 50 staff members who need to collaborate on documents in real time. The executive director wants to set up a centralized repository for all organizational policies that can be accessed by staff both online and offline on their mobile devices. Which solution should the organization use?

Accepted Answer

Create a SharePoint Online document library with versioning and enable offline sync.. SharePoint Online document libraries support versioning, granular permissions, and offline sync via the OneDrive sync client or mobile app, making them ideal for a centralized, always-accessible policy repository. This meets the requirements for real-time collaboration and offline access on mobile devices.

Answer

Store documents in Exchange Online mailboxes as attachments.

Answer

Create a Microsoft Teams team with a channel for policies and use the Files tab.

Answer

Use OneDrive for Business shared folders for each policy document.

Question 11

A global enterprise uses Microsoft 365 E5 and has users in Europe, Asia, and North America. They need to ensure that user data in Exchange Online and SharePoint Online remains within the European Union for EU users. They also want to apply a retention policy to keep all data for at least 7 years. Which combination of Microsoft 365 features should an administrator use?

Accepted Answer

Enforce data residency using Multi-Geo capabilities in Exchange Online and SharePoint Online, and apply a retention policy via Microsoft Purview Data Lifecycle Management.. Option A is correct because Multi-Geo capabilities in Exchange Online and SharePoint Online allow the administrator to pin user data at the tenant level to a specific geographic location (e.g., the EU), ensuring data residency. A retention policy configured via Microsoft Purview Data Lifecycle Management can then be applied to retain all data for a minimum of 7 years, meeting both compliance requirements.

Answer

Use Microsoft Purview Compliance Manager to configure data residency and retention settings.

Answer

Use Data Location for Exchange Online and a SharePoint multi-geo tenant, then create a retention policy in Purview for 7 years.

Answer

Configure Microsoft Entra ID Conditional Access policies to restrict data access based on location.

Question 12

A school uses Microsoft 365 A3 for faculty and staff. They want to create a hub for teachers to share lesson plans, collaborate on documents, and communicate via instant messaging. They also need to integrate with third-party educational apps. Which Microsoft 365 service should they use as the primary platform?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct primary platform because it integrates chat, document collaboration (via SharePoint and OneDrive), and third-party app connectors into a single hub. For teachers sharing lesson plans, collaborating on documents, and using instant messaging, Teams provides persistent chat, file sharing, and a rich app ecosystem that supports third-party educational app integration through tabs, connectors, and bots.

Answer

Yammer

Answer

SharePoint Online

Answer

OneNote for Windows 10

Question 13

A healthcare organization uses Microsoft 365 E5 and must comply with HIPAA. They need to ensure that all emails containing protected health information (PHI) are encrypted both in transit and at rest. They also need to prevent users from accidentally sending PHI to external recipients. What should they implement?

Accepted Answer

Implement Microsoft Purview Message Encryption and create DLP policies to detect and block PHI sent externally.. Microsoft Purview Message Encryption (MPME) provides the necessary encryption for PHI in transit and at rest by using Azure Rights Management (RMS) to protect emails. Data Loss Prevention (DLP) policies in Microsoft Purview can be configured to detect patterns like social security numbers or medical record numbers and automatically block or warn users before sending such emails externally, preventing accidental PHI exposure.

Answer

Use Microsoft Entra ID Conditional Access to require MFA for all email access.

Answer

Configure Microsoft Defender for Office 365 Safe Attachments and Safe Links policies.

Answer

Deploy Microsoft Purview Compliance Manager to assess compliance with HIPAA.

Question 14

A company is planning to deploy Microsoft 365 and needs to meet the following requirements: enable secure remote access to on-premises applications, provide a unified search experience across SharePoint and external data sources, and allow users to create custom dashboards from multiple data sources. Which TWO Microsoft 365 services should the company use?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy (option B) enables secure remote access to on-premises web applications by publishing them through Azure AD, using pre-authentication and application-layer security without requiring a VPN. Power BI (option D) allows users to create custom dashboards and reports from multiple data sources, including SharePoint, SQL databases, and cloud services, meeting the requirement for custom dashboards from diverse data.

Answer

Microsoft Loop

Answer

Microsoft Search

Answer

Microsoft Forms

Question 15

A healthcare organization is adopting Microsoft 365 and must meet compliance requirements: retain all communications for 7 years, prevent accidental deletion of documents, and classify sensitive data automatically. Which THREE Microsoft Purview features should the organization use?

Accepted Answer

Auto-labeling. Auto-labeling (Option C) is correct because it enables the organization to automatically classify sensitive data based on content patterns (e.g., healthcare records, PII) without manual intervention. This aligns directly with the requirement to classify sensitive data automatically, using trainable classifiers or sensitive info types in Microsoft Purview.

Answer

Data loss prevention (DLP) policies

Answer

eDiscovery