mediumMultiple Choice
MS-900 Practice Question: A company with 50 users currently has Microsoft…
A company with 50 users currently has Microsoft 365 Business Standard licenses. They face new compliance regulations that require automatic data classification and retention policies across all Microsoft 365 workloads. They want to add these capabilities without replacing their existing licenses, and they want to minimize costs. What is the most cost-effective licensing strategy?
⚠ Common exam trap
Watch out — candidates often confuse the E5 Security add-on with the E5 Compliance add-on, assuming security features automatically include compliance capabilities, but they are separate add-ons with distinct feature sets.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add Microsoft 365 E5 Compliance add-on for all users
Microsoft 365 E5 Compliance is an add-on that provides advanced compliance features like automatic data classification and retention policies across all Microsoft 365 workloads. Since the company already has Microsoft 365 Business Standard licenses, adding this add-on is the most cost-effective way to meet the new regulatory requirements without replacing existing licenses.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add Microsoft 365 E5 Compliance add-on for all users
Why this is correct
Purchasing the Microsoft 365 E5 Compliance add-on as a per-user license directly addresses the requirement for advanced compliance capabilities without changing the organization's existing Microsoft 365 Business Standard base plan. This add-on provides data classification with auto-labeling, retention and lifecycle management, advanced eDiscovery, and Compliance Manager. It is the most cost-effective, targeted approach because each user can be licensed only for the compliance workloads they need, rather than forcing a higher-tier enterprise SKU across the entire tenant.
- ✗
Upgrade all users to Microsoft 365 E5
Why it's wrong here
Upgrading every user to Microsoft 365 E5 would indeed include the advanced compliance features, but it is an oversized, expensive license that also bundles unneeded enterprise capabilities such as Power BI Pro, advanced voice, and Microsoft 365 Defender for Office 365. E5 is an enterprise plan with a substantially higher per-user price, so this approach incurs significant avoidable costs. Additionally, it forces a migration from the Business plan family to the Enterprise plan family, which is more complex than simply adding the E5 Compliance add-on.
- ✗
Upgrade all users to Microsoft 365 Business Premium
Why it's wrong here
Microsoft 365 Business Premium is primarily a security-rich business SKU combining Office 365 Business capabilities with Microsoft Intune and Microsoft Entra ID Premium, but its built-in data governance tools lack auto-classification, advanced retention policies, and comprehensive eDiscovery. Business Premium provides only basic compliance features and does not include the underlying services such as Information Protection advanced settings that the scenario requires. Upgrading to it would thus fail to satisfy the requirement for advanced compliance while introducing security features not requested.
- ✗
Add Microsoft 365 E5 Security add-on for all users
Why it's wrong here
Adding the Microsoft 365 E5 Security add-on extends protection with services like Microsoft Defender for Identity, Defender for Office 365, and Microsoft Entra ID identity protection, but it contains no data classification, retention, or advanced eDiscovery functionality. Since the stated need is specifically for advanced compliance—auto-classification and retention—this add-on does nothing to address the gap. Applying the Security add-on alongside the existing Business Standard plan is therefore irrelevant to the requirement and would waste licensing cost.
Go deeper
Related to this question
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.