MS-900 Describe Microsoft 365 apps and services Practice Test 7 — 15 Questions

Question 1

An organization has users who frequently collaborate on documents across departments. They want to ensure that when a document is shared with external partners, the external users must authenticate using Azure AD credentials and cannot download or print the document. Which combination of Microsoft 365 features should they use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

SharePoint external sharing with 'Specific people' and Microsoft Purview Information Protection with 'View Only' permission. SharePoint 'Specific people' external sharing restricts access to explicitly invited users who must authenticate with Azure AD credentials, while Microsoft Purview Information Protection's 'View Only' permission prevents downloading, printing, and copying of the document. This combination meets both requirements: enforced authentication and restricted document actions.

Answer

Microsoft Teams guest access and Microsoft Defender for Cloud Apps session policies

Answer

OneDrive sharing settings with 'Anyone' links and Microsoft Purview Data Loss Prevention

Answer

SharePoint anonymous sharing links and Microsoft Purview Sensitivity Labels

Question 2

Your organization is adopting Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on organizational data that the user has permission to access. Which Microsoft 365 feature ensures this?

Accepted Answer

Microsoft Graph permissions. Microsoft Graph permissions are the correct answer because Copilot uses Microsoft Graph to access organizational data. When a user asks a question, Copilot queries the Microsoft Graph API, which enforces the user's existing permissions (e.g., from Entra ID and SharePoint) to ensure responses are based only on data the user is authorized to see. This is the core mechanism that ties Copilot's responses to the user's access rights.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Question 3

A user wants to schedule a meeting with colleagues and automatically record the meeting for later viewing. Which Microsoft 365 apps should they use?

Accepted Answer

Microsoft Outlook and Microsoft Teams. Microsoft Outlook is used to schedule the meeting and send invitations, while Microsoft Teams provides the platform to conduct the online meeting with the capability to automatically record the session. The recording is saved to Microsoft Stream (or OneDrive/SharePoint depending on the version), but the core apps for scheduling and recording are Outlook and Teams.

Answer

Microsoft SharePoint and Microsoft Viva Topics

Answer

Microsoft Viva Engage and Microsoft Forms

Answer

Microsoft OneDrive and Microsoft Stream

Question 4

Your organization uses Microsoft 365 E5 and experiences a security incident where a user's account is compromised. You need to immediately prevent the attacker from accessing Microsoft 365 services while preserving the user's data for investigation. Which action should you take?

Accepted Answer

Block sign-in for the user in Microsoft Entra ID. Blocking sign-in for the user in Microsoft Entra ID immediately prevents the attacker from authenticating to any Microsoft 365 service, while the user's data remains intact in Exchange Online, SharePoint, and OneDrive for forensic analysis. This action does not delete or alter any data, preserving the full investigation trail.

Answer

Delete the user account from Microsoft Entra ID

Answer

Revoke the user's sessions using Microsoft Entra ID

Answer

Reset the user's password

Question 5

Which TWO Microsoft 365 services can be used to create and manage custom business processes without writing code?

Accepted Answer

Microsoft Power Automate. Microsoft Power Automate is a low-code automation platform that enables users to create custom workflows and business processes by connecting various applications and services through pre-built connectors. It allows the design of automated processes without writing code, using a visual designer to define triggers, conditions, and actions.

Answer

SharePoint Designer

Answer

Microsoft Flow

Answer

Microsoft Lists

Question 6

Which TWO Microsoft 365 apps are included in Microsoft 365 Business Basic?

Accepted Answer

Microsoft Teams. Microsoft Teams is included in Microsoft 365 Business Basic as a core app for chat, meetings, and collaboration. Exchange Online is also included, providing hosted email, calendars, and contacts with a 50 GB mailbox per user. Both are cloud-only services in this plan, with no desktop Office apps.

Answer

Microsoft Power BI Pro

Answer

Microsoft Project Online Plan 3

Answer

Microsoft Word (desktop app)

Question 7

Which THREE Microsoft 365 services can be used to enforce data classification and protection?

Accepted Answer

Microsoft Defender for Cloud Apps. Microsoft Defender for Cloud Apps (A) is correct because it acts as a Cloud Access Security Broker (CASB) that can enforce data classification and protection by applying policies to control data in transit and at rest across cloud applications. It can automatically classify sensitive data using built-in DLP engines and enforce actions like blocking downloads or applying encryption based on content inspection.

Answer

Microsoft Intune

Answer

Microsoft Entra ID

Question 8

A company wants to enable employees to securely access work files and collaborate in real-time from any device. Which Microsoft 365 service should the company use?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct choice because it provides a unified platform for real-time collaboration, including chat, video conferencing, and file sharing, with integrated security and compliance features. It allows employees to access and co-author work files from any device while leveraging Azure Active Directory for conditional access and data encryption in transit and at rest.

Answer

Exchange Online

Answer

SharePoint Online

Answer

OneDrive for Business

Question 9

A marketing team needs to create a shared workspace to manage projects, store documents, and track tasks. Which Microsoft 365 service should the administrator recommend?

Accepted Answer

SharePoint Online. SharePoint Online is the correct recommendation because it provides a centralized platform for creating team sites that serve as shared workspaces. It includes document libraries for storing and co-authoring files, lists for tracking tasks, and integration with Microsoft Teams and Planner for project management, directly meeting all the stated requirements.

Answer

Microsoft Sway

Answer

Microsoft Bookings

Answer

Microsoft Stream

Question 10

An organization decides to implement Microsoft 365 Business Premium. The security team wants to ensure that all devices accessing company data are compliant with security policies. Which service should they use?

Accepted Answer

Microsoft Intune. Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service that enforces compliance policies on devices accessing company data. Option A is incorrect because Microsoft Defender for Office 365 protects against email and collaboration threats, not device compliance. Option B is incorrect because Microsoft Entra ID is for identity and access management, not device compliance enforcement. Option D is incorrect because Microsoft Purview focuses on data governance and compliance, not device management.

Answer

Microsoft Defender for Office 365

Answer

Microsoft Entra ID

Answer

Microsoft Purview

Question 11

A user reports that they cannot access their email on their mobile device. The IT administrator suspects a device compliance issue. Which Microsoft 365 service can the administrator use to check the device's compliance status?

Accepted Answer

Microsoft Intune. Microsoft Intune is the correct tool because it is the mobile device management (MDM) and mobile application management (MAM) component of Microsoft 365. It allows administrators to define compliance policies (e.g., requiring encryption, a minimum OS version, or a healthy device attestation) and then check a device's compliance status in real time. When a device is non-compliant, Intune can block access to corporate resources like email, which matches the user's reported issue.

Answer

Microsoft Purview compliance portal

Answer

Microsoft Exchange admin center

Answer

Microsoft Defender for Cloud Apps

Question 12

A company wants to provide employees with a personal cloud storage solution that syncs files across devices and allows sharing with external partners. Which Microsoft 365 service should they use?

Accepted Answer

OneDrive for Business. OneDrive for Business provides personal cloud storage that syncs files across devices via the OneDrive sync client and enables secure sharing with external partners through granular permission controls. This directly meets the requirement for individual file storage, cross-device synchronization, and external sharing.

Answer

Exchange Online

Answer

Microsoft Teams

Answer

SharePoint Online

Question 13

An organization uses Microsoft 365 and wants to automatically detect and remediate security incidents across identities, endpoints, and cloud apps. Which Microsoft 365 service should they deploy?

Accepted Answer

Microsoft Defender XDR. Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically detects and remediates security incidents across identities, endpoints, and cloud apps. It correlates signals from Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps to deliver automated investigation and response, aligning directly with the scenario's requirement for holistic incident management.

Answer

Microsoft Sentinel

Answer

Microsoft Purview

Answer

Microsoft Defender for Office 365

Question 14

Which TWO Microsoft 365 services can be used to create and manage corporate training content and track employee completion?

Accepted Answer

Microsoft Viva Learning. Microsoft Viva Learning (A) is a centralized learning hub within Microsoft Teams that allows organizations to create, assign, and track corporate training content from internal sources (like SharePoint) and external providers (like LinkedIn Learning). SharePoint Online (E) enables the creation and management of training materials as documents, pages, or custom learning portals, and can integrate with Viva Learning to track employee completion via list-based progress tracking or Power Automate workflows.

Answer

Microsoft Forms

Answer

Microsoft Stream

Answer

Microsoft To Do

Question 15

Which THREE Microsoft 365 services are part of the Microsoft Viva employee experience platform?

Accepted Answer

Viva Insights. Options A, C, and E are correct. Microsoft Viva includes Viva Connections (employee portal), Viva Insights (wellbeing and productivity analytics), and Viva Learning (learning hub). Option B (Microsoft SharePoint) is a content management platform, not a Viva service. Option D (Microsoft Teams) is the platform that hosts Viva apps, not a Viva service itself.

Answer

Microsoft SharePoint

Answer

Microsoft Teams