MS-900 Multiple Select — 10 Questions

Question 1

An organization wants to investigate emails that may be part of a phishing campaign. Which two statements are accurate about the Microsoft 365 capability involved?

Accepted Answer

Threat Explorer in Microsoft Defender for Office 365. Threat Explorer in Microsoft Defender for Office 365 is a powerful tool for investigating phishing campaigns. It allows security analysts to view and filter email threat data, including malware, phishing, and spam, in near real-time. This enables the organization to identify, analyze, and remediate malicious emails that are part of a phishing campaign, making option A correct.

Answer

It replaces the need for identity and access management

Answer

It requires every document to be made public

Question 2

Which THREE of the following are benefits of the Microsoft 365 E5 license compared to E3?

Accepted Answer

Power BI Pro. Power BI Pro is included with Microsoft 365 E5 but not with E3, enabling advanced data visualization and analytics capabilities. This is a key differentiator for organizations requiring self-service business intelligence tools integrated with Microsoft 365.

Answer

Exchange Online

Answer

Microsoft Entra ID P1

Question 3

Which THREE Microsoft 365 apps are part of the Microsoft Viva employee experience platform?

Accepted Answer

Viva Insights. Viva Insights is correct because it is a core module of the Microsoft Viva employee experience platform that provides data-driven, privacy-protected insights to help individuals and managers improve productivity, wellbeing, and work-life balance. It leverages Microsoft Graph data to analyze collaboration patterns and deliver actionable recommendations directly within Microsoft Teams and the Viva Insights app.

Answer

Viva Engage

Answer

Microsoft Teams

Question 4

Which of the following are key characteristics of cloud computing as defined by the National Institute of Standards and Technology (NIST)? (Choose all that apply. There are four correct answers.)

Accepted Answer

Resource pooling. The NIST SP 800-145 definition identifies five essential characteristics of cloud computing: on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. On-demand self-service allows users to provision computing capabilities automatically without requiring human interaction with each service provider. Broad network access means capabilities are available over the network and accessed through standard mechanisms (e.g., mobile phones, laptops, workstations). Resource pooling enables the provider's computing resources to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand. Rapid elasticity allows capabilities to be elastically provisioned and released, in some cases automatically, to scale rapidly outward and inward commensurate with demand.

Answer

Fixed, non-scalable capacity

Answer

Locally installed software only

Question 5

A project team needs to collaborate on Teams channel conversations and meetings and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Accepted Answer

Microsoft Teams. Microsoft Teams is the correct answer because it provides the central hub for channel conversations, meetings, and real-time collaboration. SharePoint Online document storage is also correct because Teams channels use SharePoint as the underlying storage for all shared files, enabling co-authoring of Office documents directly within the Teams interface.

Answer

Microsoft Purview eDiscovery case

Answer

Exchange anti-malware policy

Question 6

A business wants to use a cloud solution where they can scale computing resources up or down automatically based on demand and only pay for what they use. The cloud provider manages the underlying hardware. Which two cloud characteristics are being described? (Choose two.)

Accepted Answer

Elasticity. Elasticity is correct because it describes the ability to automatically scale computing resources up or down based on demand, which is a key characteristic of cloud computing. The scenario explicitly states that resources scale automatically, which aligns with elasticity rather than just the ability to scale (scalability). Measured service is correct because the business pays only for what they use, which is the pay-per-use billing model enabled by metering resource consumption.

Answer

Scalability

Answer

High availability

Question 7

A company uses a cloud service where they pay only for the compute hours their virtual machines run. They can increase or decrease the number of VMs instantly based on demand. Which two cloud computing characteristics are demonstrated? (Choose two.)

Accepted Answer

Rapid elasticity. B is correct because rapid elasticity allows the company to instantly increase or decrease the number of virtual machines based on demand, scaling resources up or down automatically. C is correct because measured service ensures that the company pays only for the compute hours their VMs run, with usage metered and billed accordingly.

Answer

On-demand self-service

Answer

Resource pooling

Question 8

Which three of the following are characteristics of Microsoft 365 subscription plans? (Choose three.)

Accepted Answer

Add-on services, such as Microsoft 365 Copilot, can be purchased to supplement existing plans.. Microsoft 365 subscription plans offer monthly and annual commitment terms, giving customers flexibility in billing. Business plans are specifically categorized as Business Basic, Business Standard, and Business Premium, each with different feature sets. Add-on services like Microsoft 365 Copilot can be purchased to enhance existing subscriptions, allowing organizations to scale capabilities without changing their base plan.

Answer

All subscription plans include the full desktop version of Office applications.

Answer

Plans can be upgraded or downgraded at any time without any restrictions.

Answer

Enterprise plans are licensed on a per-user basis with a minimum of 5 seats.

Question 9

A multinational corporation must comply with GDPR. They need to ensure that personal data of EU residents is retained for a specific period and then securely deleted. Additionally, they must be able to respond to data subject access requests (DSARs) within 30 days by finding and exporting relevant data. Which two Microsoft Purview solutions should they use together? (Choose two.)

Accepted Answer

Retention policies. Retention policies (A) are correct because they allow organizations to define rules that retain personal data for a specific period and then automatically delete it, meeting GDPR retention and secure deletion requirements. eDiscovery (Premium) (C) is correct because it enables searching, collecting, and exporting data from various Microsoft 365 workloads to fulfill data subject access requests (DSARs) within the 30-day regulatory timeframe.

Answer

Data Lifecycle Management (via sensitivity labels)

Answer

Audit (Standard)

Question 10

An organization wants to retain mailbox content for legal investigation. Which two statements are accurate about the Microsoft 365 capability involved?

Accepted Answer

eDiscovery and retention capabilities in Microsoft Purview. Security and compliance controls should be selected by risk scenario and tested before tenant-wide enforcement.

Answer

It requires every document to be made public

Answer

It replaces the need for identity and access management