mediummultiple choiceObjective-mapped

A non-profit organization with 300 users currently uses Microsoft 365 Business Basic. They want to add Microsoft Defender for Office 365 (Plan 1) and endpoint management capabilities using Microsoft Intune. They are eligible for non-profit pricing. What is the most cost-effective way to obtain these features?

Question 1mediummultiple choice
Full question →

A non-profit organization with 300 users currently uses Microsoft 365 Business Basic. They want to add Microsoft Defender for Office 365 (Plan 1) and endpoint management capabilities using Microsoft Intune. They are eligible for non-profit pricing. What is the most cost-effective way to obtain these features?

Answer choices

Why each option matters

Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.

A

Best answer

Upgrade to Microsoft 365 Business Premium

Business Premium includes Defender for Office 365 and Intune, meeting the requirements at the lowest cost for a non-profit.

B

Distractor review

Switch to Microsoft 365 E3 licenses

E3 lacks Defender for Office 365 and would require additional licensing, making it more expensive.

C

Distractor review

Add Microsoft 365 E5 Security add-on

The E5 Security add-on is applicable only to E5 licenses; it cannot be added to Business Basic or E3.

D

Distractor review

Add Microsoft 365 Business Extra File Storage

This add-on only provides additional storage, not security or management features.

Common exam trap

Common exam trap: NAT rules depend on direction and matching traffic

NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.

Technical deep dive

How to think about this question

NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.

KKey Concepts to Remember

  • Static NAT maps one inside address to one outside address.
  • PAT allows many inside hosts to share one public address using ports.
  • Inside local and inside global describe the private and translated addresses.
  • NAT ACLs identify traffic for translation, not always security filtering.

TExam Day Tips

  • Identify inside and outside interfaces first.
  • Check whether the scenario needs static NAT, dynamic NAT or PAT.
  • Do not confuse NAT matching ACLs with normal packet-filtering intent.

Related practice questions

Related MS-900 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

More questions from this exam

Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.

FAQ

Questions learners often ask

What does this MS-900 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Upgrade to Microsoft 365 Business Premium — Microsoft 365 Business Premium includes Microsoft Defender for Office 365 (Plan 1), Microsoft Intune, and other features like conditional access. Upgrading from Business Basic to Business Premium is the most cost-effective path because it bundles these services. E3 does not include Defender for Office 365 by default and would require separate add-ons. E5 Security is an add-on for E5 licenses only. Extra File Storage is unrelated to the requested services.

What should I do if I get this MS-900 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.

Discussion

Loading comments…

Sign in to join the discussion.