MS-900 Describe Microsoft 365 apps and services Practice Test 9 — 15 Questions

Question 1

Match each Microsoft 365 service to its primary purpose.

Question 2

Match each Microsoft 365 workload to its associated AI feature.

Question 3

Match each Microsoft 365 service level agreement (SLA) term to its meaning.

Question 4

Your organization is deploying Microsoft 365 Copilot and wants to ensure that users can generate meeting summaries from Teams recordings. Which licensing requirement must be met?

Accepted Answer

Microsoft 365 E5 plus the Microsoft 365 Copilot add-on license. Microsoft 365 Copilot can generate meeting summaries from Teams recordings, but this capability requires access to the Microsoft Graph API and the underlying AI processing, which is only available with the Microsoft 365 Copilot add-on license. This add-on must be assigned on top of a qualifying subscription such as Microsoft 365 E5, which provides the necessary Teams recording and transcription features. Without the E5 base license, the required recording and compliance features are not available, and without the Copilot add-on, the AI summarization is not enabled.

Answer

Microsoft 365 Copilot for Microsoft 365 with no additional license

Answer

Microsoft 365 Copilot standalone license without any other subscription

Answer

Microsoft 365 Business Basic

Question 5

A company uses Microsoft 365 E5 and wants to implement a zero-trust security model. They need to ensure that all external file sharing requires multi-factor authentication (MFA) and that sensitive documents are automatically labeled. Which combination of services should they use?

Accepted Answer

Microsoft Entra Conditional Access and Microsoft Purview Information Protection. Microsoft Entra Conditional Access can enforce MFA for external file sharing by requiring MFA as a condition for accessing SharePoint/OneDrive resources. Microsoft Purview Information Protection provides automatic sensitivity labeling for documents based on content or context, ensuring sensitive data is labeled without manual intervention. Together, these services directly address the zero-trust requirements of MFA for external sharing and automatic document labeling.

Answer

Microsoft Defender XDR and Microsoft Purview Audit

Answer

Microsoft Intune and Microsoft Defender for Cloud Apps

Answer

Microsoft Defender for Cloud Apps and Microsoft Purview Data Lifecycle Management

Question 6

Your organization wants to provide employees with a personalized news feed and internal communications dashboard. Which Microsoft 365 service should you use?

Accepted Answer

Microsoft Viva Connections. Microsoft Viva Connections is the correct choice because it provides a personalized news feed and internal communications dashboard directly within Microsoft Teams. It aggregates content from SharePoint, Yammer, and other sources to create a curated employee experience, aligning with the requirement for a centralized communications hub.

Answer

Microsoft Stream

Answer

Microsoft Viva Topics

Answer

SharePoint Online

Question 7

A hospital uses Microsoft 365 E5 and needs to ensure that patient health information (PHI) is not accidentally shared externally. They want to block sharing of emails containing credit card numbers or medical record numbers. Which Microsoft Purview feature should they configure?

Accepted Answer

Microsoft Purview Data Loss Prevention (DLP). Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect and block the accidental sharing of sensitive data, such as credit card numbers and medical record numbers, via email. DLP uses deep content analysis with built-in sensitive information types (e.g., Credit Card Number, U.S. Medical Record Number) to scan emails and enforce policies that prevent external sharing. This directly addresses the hospital's requirement to protect PHI from being leaked externally.

Answer

Microsoft Purview Privileged Access Management

Answer

Microsoft Purview Sensitivity Labels

Answer

Microsoft Purview Information Barriers

Question 8

Your company uses Microsoft 365 Business Premium and wants to enable remote wipe of company data on employees' personal mobile devices if they are lost or stolen. Which service provides this capability?

Accepted Answer

Microsoft Intune Mobile Application Management (MAM). Microsoft Intune Mobile Application Management (MAM) enables selective remote wipe of company data from personal mobile devices without wiping personal data. This is achieved through app-level policies that can remove corporate data from managed apps (e.g., Outlook, Teams) when a device is lost or stolen, using the Intune company portal or a wipe command triggered by an administrator.

Answer

Microsoft Entra ID

Answer

Microsoft Defender for Cloud Apps

Answer

Microsoft Purview Compliance Manager

Question 9

An organization has users who frequently collaborate on documents across departments. They want to ensure that when a document is shared with external partners, the external users must authenticate using Azure AD credentials and cannot download or print the document. Which combination of Microsoft 365 features should they use?

Accepted Answer

SharePoint external sharing with 'Specific people' and Microsoft Purview Information Protection with 'View Only' permission. Option C is correct because SharePoint 'Specific people' external sharing restricts access to explicitly invited users who must authenticate with Azure AD credentials, while Microsoft Purview Information Protection's 'View Only' permission prevents downloading, printing, and copying of the document. This combination meets both requirements: enforced authentication and restricted document actions.

Answer

Microsoft Teams guest access and Microsoft Defender for Cloud Apps session policies

Answer

OneDrive sharing settings with 'Anyone' links and Microsoft Purview Data Loss Prevention

Answer

SharePoint anonymous sharing links and Microsoft Purview Sensitivity Labels

Question 10

Your organization is adopting Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on organizational data that the user has permission to access. Which Microsoft 365 feature ensures this?

Accepted Answer

Microsoft Graph permissions. Microsoft Graph permissions are the correct answer because Copilot uses Microsoft Graph to access organizational data. When a user asks a question, Copilot queries the Microsoft Graph API, which enforces the user's existing permissions (e.g., from Entra ID and SharePoint) to ensure responses are based only on data the user is authorized to see. This is the core mechanism that ties Copilot's responses to the user's access rights.

Answer

Microsoft Purview Compliance Manager

Answer

Microsoft Entra ID

Answer

Microsoft Intune

Question 11

A user wants to schedule a meeting with colleagues and automatically record the meeting for later viewing. Which Microsoft 365 apps should they use?

Accepted Answer

Microsoft Outlook and Microsoft Teams. Microsoft Outlook is used to schedule the meeting and send invitations, while Microsoft Teams provides the platform to conduct the online meeting with the capability to automatically record the session. The recording is saved to Microsoft Stream (or OneDrive/SharePoint depending on the version), but the core apps for scheduling and recording are Outlook and Teams.

Answer

Microsoft SharePoint and Microsoft Viva Topics

Answer

Microsoft Viva Engage and Microsoft Forms

Answer

Microsoft OneDrive and Microsoft Stream

Question 12

Your organization uses Microsoft 365 E5 and experiences a security incident where a user's account is compromised. You need to immediately prevent the attacker from accessing Microsoft 365 services while preserving the user's data for investigation. Which action should you take?

Accepted Answer

Block sign-in for the user in Microsoft Entra ID. Blocking sign-in for the user in Microsoft Entra ID immediately prevents the attacker from authenticating to any Microsoft 365 service, while the user's data remains intact in Exchange Online, SharePoint, and OneDrive for forensic analysis. This action does not delete or alter any data, preserving the full investigation trail.

Answer

Delete the user account from Microsoft Entra ID

Answer

Revoke the user's sessions using Microsoft Entra ID

Answer

Reset the user's password

Question 13

Which TWO Microsoft 365 services can be used to create and manage custom business processes without writing code?

Accepted Answer

Microsoft Power Automate. Microsoft Power Automate is a low-code automation platform that enables users to create custom workflows and business processes by connecting various applications and services through pre-built connectors. It allows the design of automated processes without writing code, using a visual designer to define triggers, conditions, and actions.

Answer

SharePoint Designer

Answer

Microsoft Flow

Answer

Microsoft Lists

Question 14

Which TWO Microsoft 365 apps are included in Microsoft 365 Business Basic?

Accepted Answer

Microsoft Teams. Microsoft Teams is included in Microsoft 365 Business Basic as a core app for chat, meetings, and collaboration. Exchange Online is also included, providing hosted email, calendars, and contacts with a 50 GB mailbox per user. Both are cloud-only services in this plan, with no desktop Office apps.

Answer

Microsoft Power BI Pro

Answer

Microsoft Project Online Plan 3

Answer

Microsoft Word (desktop app)

Question 15

Which THREE Microsoft 365 services can be used to enforce data classification and protection?

Accepted Answer

Microsoft Defender for Cloud Apps. Microsoft Defender for Cloud Apps (A) is correct because it acts as a Cloud Access Security Broker (CASB) that can enforce data classification and protection by applying policies to control data in transit and at rest across cloud applications. It can automatically classify sensitive data using built-in DLP engines and enforce actions like blocking downloads or applying encryption based on content inspection.

Answer

Microsoft Intune

Answer

Microsoft Entra ID