MS-900 Describe Microsoft 365 apps and services Practice Test 4 — 15 Questions

Question 1

The exhibit shows a Microsoft Purview auto-labeling policy configuration. A user uploads a document containing a credit card number to a SharePoint Online site. The document does not get automatically labeled. Which is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The document was uploaded before the policy was published.. Auto-labeling policies in Microsoft Purview apply labels to documents that are newly created or modified after the policy is published. Documents uploaded before the policy's publication date are not retroactively scanned or labeled unless a separate manual or scheduled labeling job is triggered. Since the user uploaded the document before the policy was published, it falls outside the policy's scope.

Answer

The credit card number does not meet the minimum confidence threshold of 75.

Answer

The policy is configured to apply to Exchange Online, not SharePoint.

Answer

The document is a PDF file, and auto-labeling only supports Office documents.

Question 2

An organization uses Microsoft Teams for collaboration. The security team wants to ensure that external guests cannot download files shared in Teams channels. Compliance requirements also demand that all communication in Teams be encrypted at rest and in transit. Which built-in Teams capabilities address these requirements?

Accepted Answer

Teams information barriers and default encryption. Teams information barriers can be configured to restrict external guest actions, such as preventing file downloads, while default encryption (Microsoft 365 uses BitLocker for disk-level encryption and TLS 1.2+ for data in transit) ensures all communication is encrypted at rest and in transit. These are built-in capabilities that directly address both the guest download restriction and encryption compliance requirements without additional licensing or complex configuration.

Answer

Sensitivity labels applied to the Teams site

Answer

Microsoft Purview Data Loss Prevention policies

Answer

Microsoft Entra Conditional Access policies

Question 3

WideWorldImporters is a retail company with 500 employees. They use Microsoft 365 Business Premium. The company has a shared mailbox for customer inquiries that several employees monitor. Recently, they noticed that some emails from the shared mailbox are being deleted before being read. The IT admin investigates and finds that a PowerShell script runs daily to clean up the shared mailbox by deleting emails older than 30 days. However, some emails are being deleted before 30 days. The admin needs to ensure that no emails are deleted from the shared mailbox before they are read by at least one person. The admin also wants to retain all emails for a minimum of 30 days for compliance purposes, even if they are read. Additionally, the admin wants to prevent users from accidentally deleting emails from the shared mailbox. Which three configurations should the admin implement? (Choose three. Each correct answer is part of the solution.)

Accepted Answer

Disable the PowerShell script that deletes emails older than 30 days.. Option A is correct because the daily PowerShell script is the root cause of emails being deleted before 30 days; disabling it stops premature deletion and allows the admin to replace it with a controlled retention mechanism. Option B is correct because placing the shared mailbox on litigation hold (an In-Place Hold / Litigation Hold via Exchange Online) preserves all mailbox items, including deleted ones, for the specified 30-day period, satisfying the compliance requirement that emails be retained at least 30 days even after being read. Option D is correct because removing the 'Delete' access (i.e., the DeleteItem permission) from users' mailbox permissions on the shared mailbox prevents them from accidentally deleting emails, addressing the last requirement. Option C is not correct because enabling archiving only moves older items to the archive mailbox; it does not prevent deletion or enforce a 30-day retention. Option E is not correct because an MRM policy that deletes emails after 30 days would actively remove messages, which conflicts with the requirement to retain all emails for a minimum of 30 days and to prevent deletion before they are read.

Answer

Enable the shared mailbox for archiving to move old emails to archive.

Answer

Apply a messaging records management (MRM) policy that deletes emails after 30 days.

Question 4

You are configuring Microsoft Entra ID Protection policies for your organization. The exhibit shows a configuration snippet. Which behavior will occur when a user signs in from a known malicious IP address?

Accepted Answer

The sign-in will be blocked immediately.. Microsoft Entra ID Protection policies can be configured to block sign-ins from known malicious IP addresses. When a user attempts to sign in from such an IP, the policy evaluates the risk and blocks the sign-in immediately, preventing unauthorized access. This is a core capability of ID Protection to mitigate compromised accounts.

Answer

The user's account will be disabled.

Answer

The user will be prompted to change their password.

Answer

The sign-in will be allowed but a multi-factor authentication challenge will be required.

Question 5

A user needs to collaborate on a document with colleagues in real time, but the document must be stored on a local network server due to regulatory requirements. Which Microsoft 365 app should the user use?

Accepted Answer

Microsoft SharePoint. Microsoft SharePoint can be deployed on-premises (SharePoint Server), allowing documents to be stored on a local network server while supporting real-time co-authoring. This meets the regulatory requirement for local storage. Options B, C, and D either lack real-time collaboration or rely on cloud storage.

Answer

Microsoft Word (desktop)

Answer

Microsoft OneDrive

Answer

Microsoft Teams

Question 6

Which TWO Microsoft 365 services can be used to provide secure remote access to on-premises applications without requiring a VPN?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy (Option A) is correct because it publishes on-premises web applications to the internet and provides secure remote access through Microsoft Entra ID, using an outbound-only connector on the internal network, so no inbound firewall ports or VPN are required. Microsoft Defender for Cloud Apps (Option E) is correct because its Conditional Access App Control integration can work with Entra Application Proxy to enforce session policies and secure access to on-premises apps without a VPN. Microsoft Purview (Option B) is incorrect because it is a data governance, compliance, and risk management suite, not a remote-access service. Microsoft Sentinel (Option C) is incorrect because it is a SIEM/SOAR platform for security analytics and automation, not an application publishing or remote-access solution. Microsoft Intune (Option D) is incorrect because it is a mobile device and endpoint management service, not a mechanism for providing VPN-less access to on-premises applications.

Answer

Microsoft Purview

Answer

Microsoft Sentinel

Answer

Microsoft Intune

Question 7

A corporate IT department is planning to use Microsoft 365 services to improve employee productivity with AI-powered features. Which TWO services provide AI-generated content suggestions in real-time?

Accepted Answer

Copilot in Power Platform. Microsoft Copilot for Microsoft 365 (B) is correct because it embeds AI directly into Word, Excel, PowerPoint, Outlook, and Teams, generating real-time content suggestions such as drafting text, summarizing threads, and creating slides as the user works. Copilot in Power Platform (A) is also correct because it brings AI-generated suggestions into Power Apps, Power Automate, and Power Virtual Agents, helping makers build apps, flows, and bots with real-time natural-language assistance. Microsoft Viva Insights (C) is not correct because it focuses on productivity and wellbeing analytics and recommendations rather than generating content. Microsoft Forms (D) is a survey and quiz tool without AI content generation, and Microsoft Stream (E) is a video hosting and sharing service, so neither provides real-time AI content suggestions.

Answer

Microsoft Viva Insights

Answer

Microsoft Forms

Answer

Microsoft Stream

Question 8

A multinational organization uses Microsoft 365 E5 and needs to ensure compliance with data residency requirements for email and documents stored in Exchange Online and SharePoint Online. Which THREE services or features can help administrators enforce data location policies?

Accepted Answer

Multi-Geo Capabilities for SharePoint and OneDrive. Multi-Geo Capabilities for SharePoint and OneDrive (A) is correct because it lets a single Microsoft 365 tenant store and process SharePoint site and OneDrive user content in specified satellite geographies, directly satisfying data residency for documents. Data Location for Exchange Online (B) is correct because it allows an E5 tenant to provision Exchange Online mailboxes in a chosen geography (for example, a specific EU or APAC datacenter region) so email at rest remains in the required jurisdiction. Microsoft Purview Data Lifecycle Management (D) is correct because its retention labels and policies can be scoped to specific locations and geographies, ensuring content is retained or deleted according to residency-driven compliance rules. Microsoft Bookings (C) is a scheduling service with no role in controlling where email or documents are stored, and Microsoft Entra ID (E) is the identity and access management service, which governs authentication and authorization rather than data-at-rest location.

Answer

Microsoft Bookings

Answer

Microsoft Entra ID

Question 9

A medium-sized business uses Microsoft 365 Business Premium. The HR department needs a secure way to collect employee feedback anonymously. They also need to store the results in a structured format that can be analyzed later. They are considering using Microsoft Forms and Excel. However, the IT department is concerned about data retention and wants to ensure that responses are automatically deleted after 90 days. What should the IT department configure?

Accepted Answer

Apply a Microsoft Purview retention label to the folder storing the Excel responses with a 90-day retention period.. Microsoft Purview retention labels can be applied to the folder in SharePoint or OneDrive where the Excel responses are stored, enforcing a 90-day retention period that automatically deletes the data after that time. This meets the IT department's data retention requirement without manual intervention or complex automation, and it integrates directly with the storage location of the structured results.

Answer

Create a Power Automate flow that deletes responses after 90 days.

Answer

Manually delete the responses every 90 days using the Forms interface.

Answer

Set the Forms settings to automatically delete responses after 90 days.

Question 10

A company is planning to deploy Microsoft 365 and needs to meet the following requirements: enable secure remote access to on-premises applications, provide a unified search experience across SharePoint and external data sources, and allow users to create custom dashboards from multiple data sources. Which TWO Microsoft 365 services should the company use?

Accepted Answer

Microsoft Entra Application Proxy. Microsoft Entra Application Proxy (option B) is correct because it publishes on-premises web applications to the internet with secure remote access, using the Application Proxy connector to broker connections without opening inbound firewall ports, and it integrates with Entra ID for authentication and Conditional Access. Power BI (option D) is correct because it lets users build custom dashboards and reports that combine data from multiple sources, including SharePoint and external systems, via connectors and datasets. Microsoft Loop (A) is a co-creation workspace for portable components and pages, not a remote-access or dashboarding service. Microsoft Search (C) provides unified search across Microsoft 365 and connected external sources, but the question asks for two services and the dashboard requirement is met by Power BI, not Search. Microsoft Forms (E) only creates surveys, quizzes, and polls, so it does not satisfy either requirement.

Answer

Microsoft Loop

Answer

Microsoft Search

Answer

Microsoft Forms

Question 11

Fabrikam Inc. is a legal firm with 500 users. They are deploying Microsoft 365 Business Premium. Requirements: (1) All sensitive emails must be automatically encrypted when sent to external recipients; (2) Users must be able to securely share files with external clients without requiring them to sign in; (3) The IT department must enforce multi-factor authentication (MFA) for all users but allow exceptions for a small group of executives; (4) All user actions in Exchange Online must be audited. Which services or features should Fabrikam use?

Accepted Answer

Microsoft Purview Message Encryption, SharePoint Online, Microsoft Entra Conditional Access, Exchange mailbox auditing. Microsoft Purview Message Encryption automatically encrypts sensitive emails to external recipients, SharePoint Online allows anonymous file sharing links, Microsoft Entra Conditional Access enforces MFA with exceptions for executive groups, and Exchange mailbox auditing tracks all user actions in Exchange Online. These four services directly satisfy all four requirements.

Answer

Microsoft Purview Double Key Encryption, Microsoft Teams, Microsoft Entra Conditional Access, Microsoft 365 audit log

Answer

Microsoft Purview Message Encryption, OneDrive, Microsoft Entra ID Protection, Microsoft 365 audit log

Answer

Azure Information Protection, SharePoint Online, Microsoft Entra ID Protection, Exchange mailbox auditing

Question 12

Tailwind Traders is a small business with 50 users. They use Microsoft 365 Business Basic. They need to: (1) Create a central repository for company news and policies that all employees can access; (2) Set up a shared calendar for company events; (3) Enable employees to participate in online meetings with screen sharing; (4) Provide a simple way to collect feedback from customers via forms. Which combination of Microsoft 365 services meets these requirements?

Accepted Answer

SharePoint Online, Exchange Online, Microsoft Teams, Microsoft Forms. SharePoint Online provides a central repository for news and policies; Exchange Online provides shared calendars; Microsoft Teams enables online meetings with screen sharing; and Microsoft Forms collects customer feedback. This combination directly maps to all four requirements. Microsoft 365 Business Basic includes all these services.

Answer

SharePoint Online, Exchange Online, Microsoft Stream, Microsoft Forms

Answer

OneDrive, Exchange Online, Microsoft Teams, Microsoft Forms

Answer

SharePoint Online, Microsoft Teams, Microsoft Stream, Microsoft Forms

Question 13

Adventure Works is a non-profit with 200 users. They use Microsoft 365 for Nonprofits. They need to: (1) Restrict access to sensitive donor information to only specific users; (2) Automatically archive emails older than 5 years; (3) Allow volunteers to access shared files from their personal devices without enrolling them in device management; (4) Use AI to summarize long email threads and suggest replies. Which Microsoft 365 services or features should they use?

Accepted Answer

Sensitivity labels, Exchange Online archiving, SharePoint Online, Microsoft Copilot for Microsoft 365. Sensitivity labels (from Microsoft Purview) restrict access to sensitive information by applying encryption and access controls. Exchange Online archiving automatically moves emails older than a specified period to an archive mailbox. SharePoint Online allows external sharing with volunteers on personal devices without device enrollment. Microsoft Copilot for Microsoft 365 uses AI to summarize email threads and suggest replies. Together, these services meet all four requirements.

Answer

Sensitivity labels, Exchange Online in-place hold, SharePoint Online, Microsoft Editor

Answer

Microsoft Purview Data Loss Prevention, Exchange Online archiving, Microsoft Teams, Microsoft Copilot for Microsoft 365

Answer

Azure Information Protection, Exchange Online retention policies, OneDrive, Microsoft Copilot for Microsoft 365

Question 14

A financial institution uses Microsoft 365 E5. They need to ensure that sensitive documents are protected even when shared externally, and that only authorized users can access them, regardless of where they are stored. Which Microsoft 365 service should they use?

Accepted Answer

Microsoft Information Protection. Microsoft Information Protection is the service that enables sensitivity labels and encryption to protect data at rest and in transit. It ensures that protection travels with the document, even when shared externally, and integrates with Microsoft 365 apps and services. This meets the financial institution's need to safeguard sensitive information.

Answer

Microsoft Cloud App Security

Answer

Azure Information Protection

Answer

Microsoft Defender for Office 365

Question 15

A project manager at a construction firm needs to create a detailed project schedule that shows task dependencies, critical path, resource assignments, and progress tracking. The project involves multiple teams and will run for six months. The company subscribes to Microsoft 365 Business Standard. Which Microsoft 365 app should the project manager use?

Accepted Answer

Microsoft Project. Microsoft Project is the only Microsoft 365 app that natively supports advanced project scheduling, including task dependencies, critical path analysis, resource assignment, and Gantt charts. Planner, To Do, and Lists offer task or list management but lack the depth required for a complex six-month project with multiple teams and resource tracking.

Answer

Microsoft To Do

Answer

Microsoft Lists

Answer

Microsoft Planner