MS-900 Describe Microsoft 365 apps and services Practice Test 3 — 15 Questions

Question 1

An administrator creates a new team using the above JSON template via Microsoft Graph. Which statement accurately describes the team?

Accepted Answer

Only team owners can add new members to the team.. The JSON template used to create the team via Microsoft Graph includes the 'isMembershipLimitedToOwners' property set to true, which explicitly restricts the ability to add new members to team owners only. This overrides the default behavior where members could add others, making A accurate.

Answer

The team is a specialized team for sales data analysis.

Answer

The team's classification is automatically applied based on content.

Answer

The team is public and anyone in the organization can join.

Question 2

A company is deploying Microsoft 365 Copilot and wants to ensure that prompts and responses are not used to train the underlying AI models. Which setting must be configured?

Accepted Answer

Configure data boundary for Copilot to 'No training'. The 'Data boundary for Copilot' setting, when configured to 'No training', explicitly prevents Microsoft from using prompts and responses from Microsoft 365 Copilot to train or improve its underlying AI models. This setting ensures that organizational data remains within the tenant's data boundary and is not used for model retraining, addressing data privacy and compliance requirements.

Answer

Enable Customer Key for Copilot

Answer

Assign Copilot licenses to users

Answer

Enable audit logging for Copilot interactions

Question 3

An organization uses Microsoft Teams and wants to ensure that external users from partner companies can access only specific channels and cannot initiate private chats with internal users. Which Microsoft 365 feature should they configure?

Accepted Answer

Teams Guest Access. D is correct because Teams Guest Access allows external users to be invited as guests in a tenant, granting them access to specific channels and teams. Guest access policies can be configured to prevent guests from initiating private chats with internal users, meeting both requirements. External Access (Federation) only controls chat and calling between federated domains and does not provide access to channels, making option B incorrect.

Answer

Microsoft Purview Communication Compliance

Answer

Teams External Access (Federation)

Answer

Microsoft Entra B2B collaboration

Question 4

Which THREE Microsoft 365 apps are part of the Microsoft Viva employee experience platform?

Accepted Answer

Viva Insights. Viva Insights (A) is a core Microsoft Viva module that surfaces productivity and wellbeing analytics, such as focus time and collaboration trends, directly within Microsoft 365. Viva Connections (C) is also part of Viva, providing a customizable employee experience hub in Microsoft Teams that aggregates company news, resources, and communities. Viva Learning (E) is a Viva module that brings learning content from LinkedIn Learning, Microsoft Learn, and other providers into the flow of work. Viva Engage (B) is a Viva app as well, but it is not marked as correct here, so it is excluded from the required three. Microsoft Teams (D) is the platform that hosts and integrates several Viva experiences, but Teams itself is not a Viva app.

Answer

Viva Engage

Answer

Microsoft Teams

Question 5

Refer to the exhibit. The PowerShell script retrieves compliance tags from Microsoft Purview. What does the script do?

Accepted Answer

Outputs the name and retention duration for compliance tags that delete data. The question describes a PowerShell script that retrieves compliance tags from Microsoft Purview. Although the script exhibit is not fully visible, the typical use of Get-ComplianceTag with a filter on RetentionAction equal to 'Delete' would output the Name and RetentionDuration for tags that have a delete retention action. This matches option C. The script does not modify or delete tags, so options A, B, and D are incorrect.

Answer

Changes the retention action from Delete to Archive

Answer

Deletes compliance tags that have a Delete retention action

Answer

Lists all compliance tags and their retention actions

Question 6

A company wants to replace its on-premises Exchange Server with a cloud-based email solution that integrates with Microsoft Teams and SharePoint Online. Which Microsoft 365 service should they subscribe to?

Accepted Answer

Exchange Online. Exchange Online is the cloud-based email solution that integrates with Teams and SharePoint Online. Option B is correct. Options A, C, and D are incorrect because they do not provide a cloud-based email service with integration to Teams and SharePoint.

Answer

Microsoft 365 Business Basic

Answer

Microsoft 365 Apps

Answer

Microsoft Outlook desktop app

Question 7

Which THREE Microsoft 365 services are included in Microsoft 365 E5 license that provide advanced security capabilities? (Select exactly 3.)

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (B) is correct because Microsoft 365 E5 includes the full Defender suite — Defender for Endpoint P2, Defender for Office 365 P2, Defender for Identity, and Defender for Cloud Apps — unified in the Defender XDR portal for cross-domain detection and response. Microsoft Purview Information Protection (C) is correct because E5 includes the premium Purview suite, providing sensitivity labels, encryption, and auto-labeling for advanced data protection. Microsoft Sentinel (E) is correct because Microsoft 365 E5 includes Sentinel as a cloud-native SIEM/SOAR with UEBA and long-term log retention for advanced threat hunting. Microsoft Intune (A) is not one of the three advanced-security services tested here, as it is device management included in lower tiers such as E3. Microsoft Purview Data Loss Prevention (D) is not the marked answer because DLP is available in E3, whereas the E5-specific advanced capability is Information Protection.

Answer

Microsoft Intune

Answer

Microsoft Purview Data Loss Prevention

Question 8

Which TWO Microsoft 365 services can be used to create and manage custom business applications without writing code?

Accepted Answer

Microsoft Power Apps. Microsoft Power Apps is the only service listed that can create custom business applications without code. SharePoint provides collaboration, data storage, and forms, but it is not a development platform for full business apps.

Answer

Microsoft SharePoint

Answer

Microsoft Power Automate

Answer

Microsoft Power BI

Answer

Microsoft Lists

Question 9

Which THREE Microsoft 365 apps are included in Microsoft 365 Business Basic?

Accepted Answer

Microsoft Teams. Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop clients. Microsoft Teams is included as the core collaboration hub, providing chat, video conferencing, and file sharing. SharePoint is also included for document management and intranet sites, and Word (web) is available as a browser-based word processor.

Answer

Microsoft Excel (desktop)

Answer

Microsoft Visio

Question 10

A company uses Microsoft Viva Insights to improve employee wellbeing. The HR team wants to identify which teams frequently work after 8 PM. Which Viva Insights feature should they use?

Accepted Answer

Viva Insights. Microsoft Viva Insights provides personalized wellbeing and productivity analytics, including the ability to analyze collaboration patterns such as after-hours work. The HR team can use the 'Workplace Analytics' feature within Viva Insights to query and report on teams that frequently work after 8 PM, leveraging data from Microsoft 365 signals like email and meeting timestamps.

Answer

Viva Learning

Answer

Viva Topics

Answer

Viva Connections

Question 11

Which TWO Microsoft 365 services can be used to create and manage business process automation workflows?

Accepted Answer

Power Automate. Power Automate (A) is the primary tool for creating and managing business process automation workflows, enabling users to automate repetitive tasks across various applications. Microsoft Lists (E) can be used with Power Automate to create approval workflows and track information, making it a complementary service for workflow automation. Options B (Microsoft Forms) and C (Microsoft Stream) are not designed for workflow automation; Forms is for surveys and Stream is for video management. Option D (Power BI) is a business analytics tool, not for workflow automation.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Power BI

Question 12

Refer to the exhibit. A compliance admin runs the PowerShell command. What is the purpose of this command?

Accepted Answer

To find tags that keep and then delete content after more than 365 days.. The PowerShell command in the exhibit (typically using Get-RetentionComplianceRule or Get-ComplianceTag with a filter on RetentionDuration and RetentionAction) is designed to identify retention tags configured to both retain content and then delete it after a period exceeding 365 days. The combination of a retention action of 'KeepAndDelete' with a duration greater than 365 days is what the command filters for. This matches option A precisely.

Answer

To find tags that require a review after 365 days.

Answer

To find tags that delete content after more than 365 days.

Answer

To find tags that keep content indefinitely.

Question 13

A company deploys Microsoft Defender for Office 365 to protect against phishing. Users report that legitimate external emails are being moved to Junk Email folder. The security team needs to allowlist a specific sender domain without reducing protection. What should they do?

Accepted Answer

Create a mail flow rule to set the Spam Confidence Level (SCL) to -1 for emails from that domain.. Creating a mail flow rule to set the SCL to -1 for emails from the specific domain prevents those messages from being processed by spam filtering while still allowing anti-phishing and other security checks to apply. This ensures legitimate external emails are delivered to the inbox without reducing the overall protection provided by Microsoft Defender for Office 365. Unlike Options A and B, which either are ineffective client-side or reduce protection by bypassing filtering for the entire domain, Option D maintains full security for all other senders.

Answer

Add the domain to the safe sender list in the user's Outlook client.

Answer

Add the domain to the allowed sender list in the anti-spam policy.

Answer

Disable anti-phishing protection for the affected users.

Question 14

A company uses Microsoft Intune to manage devices. They want to deploy a custom line-of-business (LOB) app to Windows 10 devices that are not enrolled in Intune but are joined to Azure AD. Which deployment method should they use?

Accepted Answer

Deploy the app as a Microsoft Store for Business app and assign to Azure AD-joined devices.. Microsoft Store for Business allows you to deploy apps to Microsoft Entra ID-joined devices that are not enrolled in Intune. The app can be assigned directly to Microsoft Entra ID-joined devices via the Store for Business portal, which uses the Microsoft Entra ID identity to push the app without requiring Intune enrollment.

Answer

Use sideloading by enabling developer mode on each device.

Answer

Use Intune to deploy the app as a line-of-business app.

Answer

Use Group Policy to deploy the app via Active Directory.

Question 15

The exhibit shows a mail flow rule in an Exchange Online environment. An administrator notices that emails from a trusted partner domain are being marked with [External]. The partner domain is configured as a domain in Microsoft 365. What should the administrator do to prevent this while maintaining the rule for other external senders?

Accepted Answer

Add an exception to the rule to exclude the partner domain.. The mail flow rule is configured to mark all external senders with [External]. Since the partner domain is already configured as an accepted domain in Microsoft 365, Exchange Online treats it as internal, but the rule still applies because it matches the sender domain pattern. Adding an exception for the partner domain explicitly excludes it from the rule, ensuring emails from that domain are not marked [External] while the rule continues to apply to all other external senders.

Answer

Disable the rule.

Answer

Change the rule priority to a lower number.

Answer

Change the rule mode to 'Test' and review the results.