Courseiva

Microsoft 365 Fundamentals MS-900 (MS-900) — Questions 1–75

985 questions total · 14pages · All types, answers revealed

Take a mock examExam hub

Page 1 of 14

Page 2
1
MCQeasy

A user wants to schedule a meeting with colleagues and automatically find a time that works for everyone. Which Microsoft 365 app should they use?

A.Microsoft Bookings
B.Microsoft Teams
C.Microsoft Viva Insights
D.Microsoft Outlook
AnswerD

Outlook's Scheduling Assistant shows availability and suggests times.

Why this answer

Microsoft Outlook includes the Scheduling Assistant feature, which uses free/busy data from the Exchange Online calendar to automatically suggest meeting times that work for all attendees. This is the correct app for scheduling meetings with colleagues because it directly integrates with the organization's calendar system to find mutual availability.

Exam trap

The trap here is that candidates often confuse Microsoft Teams' ability to schedule a meeting (which uses Outlook's backend) with the primary app for finding mutual availability, leading them to select Teams instead of Outlook.

How to eliminate wrong answers

Option A is wrong because Microsoft Bookings is a scheduling tool for external customers to book appointments with a business, not for internal colleague meeting coordination. Option B is wrong because Microsoft Teams provides a scheduling feature that leverages Outlook's Scheduling Assistant, but it is not the primary app for finding mutual availability; Teams relies on Outlook for the underlying calendar and free/busy logic. Option C is wrong because Microsoft Viva Insights focuses on personal productivity analytics, wellbeing, and focus time suggestions, not on scheduling meetings with multiple colleagues.

Full explanation →
2
MCQmedium

A department asks for the Microsoft 365 service best suited for task tracking using boards and buckets. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Defender for Endpoint
B.Microsoft Planner
C.Microsoft Entra Privileged Identity Management
D.Microsoft Purview Compliance Manager
AnswerB

Planner provides lightweight team task management with buckets and boards.

Why this answer

Microsoft Planner is the correct service because it provides task tracking using boards and buckets, which are core features of its Kanban-style interface. It is designed for lightweight project management within Microsoft 365, allowing users to create plans, organize tasks into buckets, and track progress without requiring custom scripts or additional configuration.

Exam trap

The trap here is that candidates may confuse Microsoft Planner with Microsoft Project or To Do, but the question specifically requires 'boards and buckets'—a hallmark of Planner's Kanban interface—and explicitly prohibits custom scripts, ruling out more complex or script-dependent solutions.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a task tracking service with boards and buckets. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring access to privileged roles in Azure AD, not for task management. Option D is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory compliance risks, not a task tracking service.

Full explanation →
3
MCQmedium

A company with 50 users currently has Microsoft 365 Business Basic licenses. They now need to use desktop versions of Office apps (Word, Excel, PowerPoint) for all users. They also want to keep their existing business email and online meeting features. What is the most cost-effective licensing strategy?

A.Upgrade all users to Microsoft 365 Business Standard
B.Purchase Microsoft 365 Apps for business for all users
C.Purchase Microsoft 365 E3 for all users
D.No change needed – Business Basic already includes desktop apps
AnswerA

Business Standard includes all features of Business Basic plus the desktop Office apps, providing the needed functionality without extra costs for separate add-ons.

Why this answer

Microsoft 365 Business Basic includes only web and mobile versions of Office apps, not the desktop versions. Upgrading to Microsoft 365 Business Standard provides the full desktop Office suite (Word, Excel, PowerPoint) while retaining the existing business email (Exchange Online) and online meeting features (Teams), making it the most cost-effective option for 50 users.

Exam trap

The trap here is that candidates may assume Microsoft 365 Apps for business is sufficient because it includes desktop Office, but they overlook that it lacks Exchange Online and Teams, which are required to maintain the existing email and meeting features.

How to eliminate wrong answers

Option B is wrong because Microsoft 365 Apps for business provides desktop Office apps but does not include Exchange Online for business email or Teams for online meetings, which the company wants to keep. Option C is wrong because Microsoft 365 E3 is an enterprise-grade plan with advanced security and compliance features that are unnecessary for a 50-user company, making it significantly more expensive than Business Standard. Option D is wrong because Microsoft 365 Business Basic does not include desktop versions of Office apps; it only offers web and mobile versions.

Full explanation →
4
MCQmedium

Refer to the exhibit. The JSON shows Microsoft Entra ID role assignments using Privileged Identity Management (PIM). Which statement about user2@contoso.com is correct?

A.user2 is not assigned any administrative role
B.user2 cannot access any administrative features
C.user2 must activate the Global Administrator role before using it
D.user2 is permanently assigned the Global Administrator role
AnswerC

Eligible assignments require activation.

Why this answer

Option C is correct because the JSON shows that user2@contoso.com has an eligible assignment for the Global Administrator role via Microsoft Entra ID PIM. In PIM, an eligible assignment means the user must activate the role (e.g., through the PIM portal or API) before gaining administrative privileges. The JSON snippet includes a property like "assignmentType": "Eligible" (implied by the context), which requires activation to elevate permissions temporarily.

Exam trap

The trap here is that candidates may confuse 'eligible assignment' with 'no assignment' or 'permanent assignment,' failing to recognize that PIM requires activation for eligible roles, which is a core concept tested in MS-900.

How to eliminate wrong answers

Option A is wrong because the JSON explicitly includes a role assignment for user2 with the Global Administrator role, so user2 is assigned an administrative role. Option B is wrong because user2 has an eligible assignment, meaning they can access administrative features after activating the role; they are not permanently blocked from administrative features. Option D is wrong because the assignment is eligible, not permanent (active); a permanent assignment would have an "assignmentType": "Active" or no activation requirement, which is not indicated in the exhibit.

Full explanation →
5
MCQmedium

During a Microsoft 365 planning workshop, create a Microsoft 365 support request. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Microsoft Whiteboard
B.Microsoft Stream
C.Microsoft Forms
D.Microsoft 365 admin center support area
AnswerD

Support requests are created through the admin center by authorized administrators.

Why this answer

The question asks for the most relevant concept when creating a Microsoft 365 support request during a planning workshop. The Microsoft 365 admin center includes a dedicated support area (under Help & support) where administrators can create service requests, track their status, and access troubleshooting tools. This directly aligns with the scenario of initiating a support request, making D the correct answer.

Exam trap

The trap here is that candidates may confuse productivity apps (Whiteboard, Stream, Forms) with administrative support tools, overlooking that the admin center's support area is the specific interface for creating and managing support requests.

How to eliminate wrong answers

Option A is wrong because Microsoft Whiteboard is a collaborative digital canvas application, not a licensing, admin, or support concept; it does not involve creating support requests. Option B is wrong because Microsoft Stream is a video management service for storing and sharing videos, unrelated to support request creation or admin center functionality. Option C is wrong because Microsoft Forms is a survey and quiz creation tool, which has no role in generating support tickets or managing licensing and admin tasks.

Full explanation →
6
MCQmedium

During a Microsoft 365 planning workshop, provide baseline anti-spam and anti-malware filtering for Exchange Online. Microsoft security, identity, or compliance capability should it use?

A.Microsoft Stream
B.Microsoft Forms
C.Exchange Online Protection
D.Microsoft Planner
AnswerC

Exchange Online Protection filters spam, malware, and email threats.

Why this answer

Exchange Online Protection (EOP) is the cloud-based filtering service built into Exchange Online that provides baseline anti-spam and anti-malware protection. It scans all inbound and outbound messages using heuristics, signature-based detection, and connection filtering to block malicious content before it reaches user mailboxes.

Exam trap

The trap here is that candidates confuse general Microsoft 365 apps (Stream, Forms, Planner) with security services, failing to recognize that Exchange Online Protection is the dedicated anti-spam/anti-malware service for Exchange Online.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video sharing and management service, not a security filtering capability. Option B is wrong because Microsoft Forms is a survey and quiz creation tool, not a messaging security service. Option D is wrong because Microsoft Planner is a task management and project planning application, not a security or compliance feature.

Full explanation →
7
MCQmedium

A registered nonprofit organization with 100 employees wants to use Microsoft 365 Business Basic at no cost. Which program should they apply for to be eligible for donated or discounted subscriptions?

A.Microsoft Enterprise Agreement
B.Microsoft Open Licensing
C.Microsoft Nonprofit Program
D.Microsoft Cloud Solution Provider (CSP) program
AnswerC

This program offers eligible nonprofits donated and discounted subscriptions to Microsoft cloud services.

Why this answer

Option C is correct because the Microsoft Nonprofit Program provides eligible nonprofit organizations with donated or discounted subscriptions to Microsoft 365 Business Basic (and other products). A registered nonprofit with 100 employees qualifies for up to 10 donated licenses of Microsoft 365 Business Basic (or equivalent) and can purchase additional licenses at a significant discount. This program is specifically designed to support nonprofit missions by reducing technology costs.

Exam trap

The trap here is that candidates often confuse volume licensing programs (Enterprise Agreement, Open Licensing) or partner programs (CSP) with the dedicated nonprofit donation program, failing to recognize that only the Microsoft Nonprofit Program offers free or heavily discounted subscriptions specifically for eligible charitable organizations.

How to eliminate wrong answers

Option A is wrong because the Microsoft Enterprise Agreement is a volume licensing program for commercial and government organizations, not a donation or discount program for nonprofits; it requires a minimum commitment of 500 users and does not offer free subscriptions. Option B is wrong because Microsoft Open Licensing is a transactional volume licensing program for small to medium businesses, not a nonprofit-specific program, and it does not provide donated or discounted subscriptions for charitable organizations. Option D is wrong because the Microsoft Cloud Solution Provider (CSP) program is a partner-led reseller model for commercial customers, not a direct donation or discount program for nonprofits; while CSP partners can offer nonprofit pricing, the eligibility and donation mechanism are managed through the Nonprofit Program, not CSP itself.

Full explanation →
8
MCQeasy

A cloud provider bills a customer monthly based on the precise number of gigabytes of storage used and the number of virtual machine hours consumed. Which essential cloud computing characteristic does this billing model demonstrate?

A.Measured service
B.Resource pooling
C.On-demand self-service
D.Broad network access
AnswerA

Measured service enables metering of resource usage and pay-as-you-go billing, as described in the scenario.

Why this answer

The billing model charges based on exact gigabytes of storage used and virtual machine hours consumed, which directly aligns with the 'measured service' characteristic. This means the cloud provider meters resource usage (e.g., storage IOPS, compute hours) and bills only for what is consumed, enabling pay-as-you-go pricing. Measured service relies on telemetry and monitoring systems (e.g., Azure Monitor, AWS CloudWatch) to track usage and generate invoices.

Exam trap

Microsoft often tests the distinction between 'measured service' (billing granularity) and 'on-demand self-service' (provisioning capability), leading candidates to confuse the ability to spin up resources instantly with how those resources are billed.

How to eliminate wrong answers

Option B is wrong because resource pooling refers to the provider's ability to serve multiple customers from shared physical resources (e.g., multi-tenancy), not how usage is billed. Option C is wrong because on-demand self-service allows users to provision resources without human interaction (e.g., via Azure Portal or CLI), but does not define the billing granularity. Option D is wrong because broad network access describes the ability to access resources over the network via standard protocols (e.g., HTTPS, SSH), not the metering or charging model.

Full explanation →
9
MCQeasy

A user wants to access their work files from a personal laptop without installing any Microsoft 365 Apps. Which web-based service allows them to view and edit documents in a browser?

A.Microsoft OneDrive
B.Microsoft 365 for the web
C.Microsoft Teams
D.Microsoft SharePoint
AnswerB

Provides browser-based versions of Office apps for viewing and editing.

Why this answer

Microsoft 365 for the web (formerly Office Web Apps) provides browser-based versions of Word, Excel, PowerPoint, and OneNote, enabling users to view and edit documents without installing any local applications. This service is accessed through a web browser on any device, including a personal laptop, and requires only an internet connection and a valid Microsoft 365 subscription.

Exam trap

Microsoft often tests the distinction between storage services (OneDrive, SharePoint) and the actual web-based editing service (Microsoft 365 for the web), causing candidates to mistakenly choose OneDrive because it is the most familiar file-access option.

How to eliminate wrong answers

Option A is wrong because Microsoft OneDrive is primarily a cloud storage and file synchronization service, not a web-based document editing suite; while it can launch documents in Microsoft 365 for the web, OneDrive itself does not provide the editing capabilities. Option C is wrong because Microsoft Teams is a collaboration platform focused on chat, meetings, and channel-based communication, not a dedicated web-based document editor; although it integrates with Office for the web for file previews, its primary function is not browser-based document creation and editing. Option D is wrong because Microsoft SharePoint is a web-based document management and collaboration platform that stores and organizes files, but it relies on Microsoft 365 for the web or desktop apps to actually edit documents; SharePoint itself does not provide the in-browser editing functionality.

Full explanation →
10
MCQmedium

During requirements gathering, an IT manager says the organization must review employee messages for harassment or regulatory policy violations. Microsoft security, identity, or compliance capability should it use?

A.Microsoft Forms
B.Communication Compliance
C.Microsoft Stream
D.Microsoft Planner
AnswerB

Communication Compliance detects and routes potentially inappropriate or regulated communications for review.

Why this answer

Communication Compliance in Microsoft 365 is the correct capability because it is specifically designed to detect, capture, and act on inappropriate messages—such as harassment or regulatory policy violations—across email, Microsoft Teams, and third-party communications. It uses configurable policies with built-in classifiers for harassment, threats, and regulatory compliance, enabling automated review and remediation. This directly addresses the IT manager's requirement to monitor employee messages for policy violations.

Exam trap

The trap here is that candidates may confuse Communication Compliance with other Microsoft 365 tools that have 'communication' in their name (like Microsoft Teams) or assume any Microsoft 365 app can be repurposed for compliance, but only Communication Compliance provides the dedicated policy-based message surveillance and remediation workflow required for harassment and regulatory monitoring.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and data collection tool, not a compliance solution for monitoring employee messages. Option C is wrong because Microsoft Stream is a video hosting and sharing platform, lacking any capabilities for scanning text-based communications for harassment or regulatory violations. Option D is wrong because Microsoft Planner is a task and project management tool, with no features for message surveillance or compliance policy enforcement.

Full explanation →
11
MCQmedium

A project manager wants to create a visual dashboard that tracks project tasks, deadlines, and progress. The dashboard should pull data from a Microsoft List and update in real time. Which Microsoft 365 app is best suited for building this interactive dashboard?

A.Microsoft Lists
B.Power BI
C.SharePoint Online
D.Microsoft Forms
AnswerB

Power BI can connect to Microsoft Lists to create interactive, real-time dashboards with visualizations.

Why this answer

Power BI is the correct choice because it is designed to create interactive, real-time dashboards with live data connectivity. It can connect directly to a Microsoft List as a data source and refresh automatically, enabling real-time tracking of project tasks, deadlines, and progress with visualizations like charts and gauges.

Exam trap

The trap here is that candidates often confuse Microsoft Lists (a data source) with a dashboard tool, or assume SharePoint's built-in list views are sufficient for interactive, real-time dashboards, overlooking Power BI's specialized visualization and refresh capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data storage and tracking app, not a dashboard-building tool; it lacks native interactive visualization and real-time dashboard capabilities. Option C is wrong because SharePoint Online provides list and library functionality but does not offer the dedicated, interactive dashboard creation and real-time data refresh features of Power BI. Option D is wrong because Microsoft Forms is a survey and quiz tool for collecting responses, not for building dashboards or visualizing real-time data.

Full explanation →
12
Multi-Selecthard

A marketing manager wants to create a mobile-friendly app that field sales representatives can use to submit expense reports with photos of receipts. The app should automatically save the data to a SharePoint list and send an email notification to the manager. Which two Microsoft 365 technologies should the developer use to build this solution? (Choose two.)

Select 2 answers
A.Microsoft Power Apps
B.Microsoft Power Automate
C.Microsoft SharePoint
D.Microsoft Power BI
AnswersA, B

Power Apps allows building custom mobile apps with minimal code, connecting to data sources like SharePoint to capture receipts and data.

Why this answer

Microsoft Power Apps is correct because it enables rapid development of mobile-friendly apps with minimal code, allowing field sales representatives to capture expense data and receipt photos directly from their devices. It integrates seamlessly with SharePoint lists for data storage, making it the ideal low-code platform for this custom business app.

Exam trap

The trap here is that candidates often confuse SharePoint as a development tool for building apps, when in reality it is only a data storage service, while Power Apps and Power Automate are the actual low-code development and automation technologies required.

Full explanation →
13
Multi-Selecthard

Which TWO cloud deployment models allow an organization to run some workloads on-premises and some in the public cloud?

Select 2 answers
A.Community cloud
B.Private cloud
C.Multi-cloud
D.Hybrid cloud
E.Public cloud
AnswersA, D

Community cloud is shared by several organizations with common concerns and can include on-premises components.

Why this answer

Options B and D are correct: hybrid cloud explicitly mixes on-premises and public cloud; community cloud is used by multiple organizations with shared concerns and can include on-premises resources. Option A (private cloud) is solely for one organization, typically on-premises or hosted. Option C (public cloud) is solely off-premises.

Option E (multi-cloud) uses multiple public clouds but not necessarily on-premises.

Full explanation →
14
MCQmedium

A compliance manager wants a dashboard that maps Microsoft 365 controls to regulatory standards and gives recommended improvement actions. Which portal capability should they use?

A.Microsoft Purview Compliance Manager.
B.Microsoft Defender for Endpoint.
C.Exchange admin center message trace.
D.Microsoft Viva Connections.
AnswerA

It provides compliance assessments and recommended improvement actions.

Why this answer

Microsoft Purview Compliance Manager is the correct portal because it provides a centralized dashboard that maps Microsoft 365 controls to regulatory standards (e.g., ISO 27001, NIST, GDPR) and generates recommended improvement actions with implementation steps. It uses built-in assessments and control scoring to track compliance posture, directly meeting the compliance manager's need for a regulatory mapping and action-oriented dashboard.

Exam trap

The trap here is that candidates often confuse Microsoft Purview Compliance Manager with Microsoft Defender for Endpoint, mistakenly thinking a security monitoring tool can also handle compliance mapping, but Defender for Endpoint focuses on threat protection, not regulatory control frameworks or improvement recommendations.

How to eliminate wrong answers

Option B is wrong because Microsoft Defender for Endpoint is a security solution focused on endpoint detection and response (EDR), vulnerability management, and threat hunting—it does not provide a dashboard for mapping controls to regulatory standards or recommending compliance improvement actions. Option C is wrong because the Exchange admin center message trace is a mail flow troubleshooting tool used to track email delivery and routing, not a compliance dashboard for regulatory mapping or improvement recommendations. Option D is wrong because Microsoft Viva Connections is a employee experience platform that aggregates news, resources, and communications in Teams—it has no capability for compliance control mapping or regulatory standard assessments.

Full explanation →
15
MCQmedium

Contoso Ltd. is a mid-sized company with 1,200 employees. They currently use on-premises Exchange and SharePoint. They plan to migrate to Microsoft 365 and have decided to use Microsoft 365 E3 for all users. The IT department is concerned about the cost of add-on services. The CFO wants to minimize monthly expenses while ensuring that users have access to Exchange Online, SharePoint Online, Teams, and OneDrive. Additionally, the company needs to meet basic compliance requirements such as retention policies and eDiscovery. They do not require advanced security features like Microsoft Defender for Office 365 P2 or Microsoft Purview Data Loss Prevention. Which approach should the IT department recommend to meet these requirements at the lowest cost?

A.Use Microsoft 365 E3 and add Microsoft Purview Compliance Manager
B.Use Microsoft 365 Business Premium for all users
C.Use Microsoft 365 E3 without any add-ons
D.Use Microsoft 365 E5 for all users
AnswerC

E3 includes core services and basic compliance, meeting all requirements without extra cost.

Why this answer

Microsoft 365 E3 includes Exchange Online, SharePoint Online, Teams, and OneDrive, as well as core compliance features like retention policies and eDiscovery (via Microsoft Purview). Since the company does not require advanced security add-ons, no additional purchases are needed, making E3 the lowest-cost option that meets all stated requirements.

Exam trap

The trap here is that candidates may assume Microsoft 365 E3 lacks basic compliance features and incorrectly choose to add an add-on like Compliance Manager, or they may overlook the user count limitation of Business Premium, leading them to select a plan that is either overpriced or ineligible.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is an add-on that requires an additional license cost and is not needed for basic retention policies and eDiscovery, which are already included in E3. Option B is wrong because Microsoft 365 Business Premium is designed for organizations with up to 300 users, and Contoso has 1,200 employees, making it ineligible for this plan. Option D is wrong because Microsoft 365 E5 includes advanced security and compliance features (e.g., Microsoft Defender for Office 365 P2, Microsoft Purview Data Loss Prevention) that are not required, resulting in unnecessary higher monthly costs.

Full explanation →
16
MCQeasy

A company migrates its database to a cloud service where the provider manages the database engine, patching, backups, and replication. The customer only manages the data and schema. Which cloud service model is this?

A.Infrastructure as a Service (IaaS)
B.Platform as a Service (PaaS)
C.Software as a Service (SaaS)
D.On-premises
AnswerB

PaaS provides a managed platform where the provider handles the database engine, patches, backups, and replication; the customer focuses on data and schema.

Why this answer

Platform as a Service (PaaS) provides a managed hosting environment where the cloud provider handles the underlying infrastructure, including the database engine, operating system, patching, backups, and replication. The customer is responsible only for managing the data and schema, which aligns directly with the scenario described.

Exam trap

The trap here is that candidates often confuse PaaS with IaaS because both involve cloud-hosted databases, but the key differentiator is who manages the database engine and patching—PaaS offloads this entirely to the provider, while IaaS leaves it to the customer.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtualized computing resources where the customer manages the operating system, database engine, patching, and backups, not just the data and schema. Option C is wrong because Software as a Service (SaaS) delivers a complete application managed entirely by the provider, where the customer typically does not manage the database schema or data directly. Option D is wrong because an on-premises deployment requires the customer to manage all aspects of the database, including hardware, engine, patching, backups, and replication, which contradicts the provider-managed model described.

Full explanation →
17
MCQmedium

An administrator is reviewing a request from users who need to host training videos securely for employees. Microsoft 365 app or service is the best fit?

A.Microsoft Purview Audit
B.Microsoft Forms
C.Microsoft Planner
D.Microsoft Stream
AnswerD

Stream provides enterprise video experiences integrated with Microsoft 365.

Why this answer

Microsoft Stream is the correct choice because it is Microsoft 365's enterprise video service designed specifically for securely hosting, sharing, and managing training videos within an organization. It integrates with Azure AD for access control, supports permissions-based sharing, and provides features like transcripts, chapters, and engagement analytics, making it ideal for internal training content.

Exam trap

The trap here is that candidates may confuse Microsoft Stream with other Microsoft 365 apps that have 'video' or 'media' in their name or assume that any app with sharing capabilities (like Forms or Planner) can handle video, but only Stream is purpose-built for secure enterprise video hosting and management.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Audit is a compliance and auditing tool that logs user and admin activities across Microsoft 365, not a service for hosting or streaming video content. Option B is wrong because Microsoft Forms is a survey and quiz creation tool, not designed for video hosting or secure streaming of training materials. Option C is wrong because Microsoft Planner is a task management and project planning application, lacking any video storage, streaming, or permission management capabilities.

Full explanation →
18
MCQmedium

A project manager needs to create a detailed project schedule with a Gantt chart view, task dependencies, critical path analysis, and milestones. The schedule must be shared with team members who can update their tasks, and the manager wants to track progress against a baseline. Which Microsoft 365 app is specifically designed for this type of project management?

A.Microsoft Lists
B.Microsoft Project
C.Microsoft Planner
D.Microsoft Excel
AnswerB

Project is built for enterprise project management with Gantt charts, dependencies, critical path, baselines, and task tracking.

Why this answer

Microsoft Project is the correct answer because it is specifically designed for advanced project management, offering native support for Gantt charts, task dependencies, critical path analysis, milestones, baseline tracking, and collaborative task updates. Unlike simpler tools, Project provides the scheduling engine and analytical capabilities required for detailed, enterprise-grade project plans.

Exam trap

The trap here is that candidates confuse Microsoft Planner's Kanban-style task management with full project scheduling, overlooking that Planner lacks Gantt charts, dependency chains, critical path analysis, and baseline tracking—features that are exclusive to Microsoft Project in the Microsoft 365 ecosystem.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data-tracking and organization app for creating custom lists (e.g., issue trackers, inventories), not a project scheduling tool—it lacks Gantt charts, dependency modeling, critical path analysis, and baseline tracking. Option C is wrong because Microsoft Planner is a lightweight task management app for team collaboration with Kanban boards and basic due dates, but it does not support Gantt charts, task dependencies, critical path analysis, or baseline tracking. Option D is wrong because Microsoft Excel is a spreadsheet application that can manually simulate a Gantt chart or schedule, but it has no built-in project management engine for automatic dependency resolution, critical path calculation, or baseline comparison.

Full explanation →
19
MCQeasy

A sales team needs to collaborate on documents in real time, track changes, and co-author using familiar desktop tools. Which Microsoft 365 app should they use?

A.Microsoft Teams
B.Microsoft OneNote
C.Microsoft Word
D.Microsoft Planner
AnswerC

Word supports real-time co-authoring and track changes.

Why this answer

Microsoft Word is the correct choice because it is the desktop app that natively supports real-time co-authoring, change tracking, and simultaneous editing by multiple users. These features are built into Word for Microsoft 365, allowing teams to collaborate on documents using the familiar desktop interface without needing to switch to a web or mobile app.

Exam trap

The trap here is that candidates often confuse Microsoft Teams' file-sharing capability with actual document editing, assuming Teams itself provides co-authoring, when in fact it merely hosts the file and launches Word for editing.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, but it does not provide native desktop co-authoring or change tracking within its interface; documents opened in Teams are edited in Word Online or the Word desktop app. Option B is wrong because Microsoft OneNote is a digital notebook for free-form note-taking and does not support structured document co-authoring with tracked changes like a word processor. Option D is wrong because Microsoft Planner is a task management and project planning tool that organizes work with boards and checklists, not a document editing or co-authoring application.

Full explanation →
20
MCQeasy

South Ridge School District uses Microsoft 365 Education A5. They have 10,000 students and 1,000 staff. The district wants to ensure that student data is protected and that only authorized staff can access student records. They also need to comply with FERPA (Family Educational Rights and Privacy Act). The IT team has created security groups for teachers, administrators, and support staff. They want to restrict access to a specific SharePoint site containing student records to only the teachers group. Additionally, they want to prevent teachers from sharing the site with external users. What should you configure?

A.In the SharePoint site settings, set the site permissions to 'Only members of the Teachers group can access' and set external sharing to 'Only people in your organization'.
B.Apply a sensitivity label to the site that restricts access to the teachers group.
C.Add the teachers group as site collection administrators.
D.Create a private channel in Microsoft Teams for teachers only.
AnswerA

This restricts access to the teachers group and prevents external sharing.

Why this answer

Option A is correct. Sharing controls in SharePoint site settings can be used to limit access to specific groups and disable external sharing. Option B (private channel) is for Teams, not SharePoint.

Option C (sensitivity label) can restrict access but is not site-specific. Option D (site collection admin) does not restrict sharing.

Full explanation →
21
MCQhard

A company is deploying Microsoft Teams Rooms for its meeting rooms. They need to ensure that room calendars are automatically updated when a meeting is booked via Outlook. Which Microsoft 365 service enables this integration?

A.Microsoft Intune
B.Exchange Online
C.Microsoft Teams
D.SharePoint Online
AnswerB

Exchange Online manages resource mailboxes and calendar processing for room mailboxes.

Why this answer

Exchange Online is the correct answer because it provides the mailbox and calendar infrastructure that Microsoft Teams Rooms relies on. When a meeting is booked via Outlook, the Exchange Online calendar processes the booking and automatically updates the room's calendar, enabling the Teams Rooms device to display the meeting details. This integration uses the Exchange Web Services (EWS) or REST APIs to synchronize calendar events between Outlook and the room resource mailbox.

Exam trap

The trap here is that candidates often assume Microsoft Teams directly manages room calendars because Teams Rooms is a Teams feature, but in reality, the calendar integration is entirely dependent on Exchange Online's resource mailbox and calendar processing capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service used for managing devices and apps, not for calendar synchronization or room mailbox updates. Option C is wrong because Microsoft Teams is the collaboration platform that provides the meeting experience, but it does not directly manage room calendars; it relies on Exchange Online for calendar data. Option D is wrong because SharePoint Online is a document management and collaboration platform focused on content storage and sharing, with no native capability to process room bookings or update room calendars.

Full explanation →
22
MCQmedium

An organization wants to ensure that only compliant devices can access Microsoft 365 resources. They use Microsoft Intune for device management. Which policy should they configure?

A.Enable device enrollment in Intune
B.Create a Conditional Access policy in Microsoft Entra ID
C.Create a compliance policy in Intune
D.Create a device configuration policy in Intune
AnswerB

Conditional Access evaluates device compliance and grants or blocks access accordingly.

Why this answer

Option B is correct. Conditional Access in Microsoft Entra ID uses compliance status from Intune to allow or block access. Option A is wrong because compliance policies define what compliance means, but the access control is done by Conditional Access.

Option C is wrong because configuration policies configure settings, not access. Option D is wrong because device enrollment is the process of joining devices to management.

Full explanation →
23
MCQeasy

Your organization needs to provide access to Microsoft 365 for 50 temporary contractors who will work for 6 months. They require email and Teams. Which licensing approach is most cost-effective?

A.Purchase Microsoft 365 F3 licenses
B.Purchase Microsoft 365 E5 licenses
C.Purchase Microsoft 365 E3 licenses
D.Purchase Microsoft 365 Business Basic licenses
AnswerD

Business Basic provides Exchange Online (50 GB mailbox) and Teams at a low monthly cost, ideal for temporary contractors.

Why this answer

Microsoft 365 Business Basic is the most cost-effective option for temporary contractors needing only email (Exchange Online) and Teams, as it provides these core services at the lowest per-user price. It is designed for small and medium businesses (up to 300 users) and includes web and mobile versions of Office apps, which are sufficient for basic communication needs. F3, E3, and E5 licenses include additional features (e.g., desktop Office apps, advanced security, compliance) that are unnecessary for short-term contractors, making them more expensive.

Exam trap

The trap here is that candidates often choose F3 thinking it is the cheapest option for temporary workers, but they overlook that Business Basic is actually lower cost and sufficient for basic email and Teams, while F3 is designed for shift workers with specific frontline scenarios and includes extra features that increase price.

How to eliminate wrong answers

Option A is wrong because Microsoft 365 F3 is a Frontline Worker license that, while lower cost than E3/E5, is still more expensive than Business Basic and includes features like desktop Office apps and advanced analytics that are not needed for temporary contractors. Option B is wrong because Microsoft 365 E5 includes advanced security, compliance, and analytics features (e.g., Microsoft Defender for Office 365, eDiscovery, Power BI Pro) that are overkill and significantly more costly for short-term email and Teams access. Option C is wrong because Microsoft 365 E3 includes full desktop Office apps, advanced security, and compliance capabilities (e.g., DLP, legal hold) that are unnecessary for temporary contractors, leading to wasted spend.

Full explanation →
24
MCQmedium

A company has 150 users with Microsoft 365 Business Basic licenses. They need to add Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for device management, but they want to retain their existing Basic subscriptions to minimize costs. What is the most cost-effective licensing strategy to meet these requirements?

A.Upgrade all users to Microsoft 365 Business Premium.
B.Purchase add-on subscriptions for Microsoft Defender for Office 365 Plan 1 and Microsoft Intune for all users.
C.Upgrade all users to Microsoft 365 Business Standard.
D.Purchase Microsoft 365 E3 licenses for all users.
AnswerB

Correct. Add-on licenses provide the required features at a lower cost than upgrading to a plan that includes them for all users, while retaining the existing Business Basic subscriptions.

Why this answer

Microsoft 365 Business Basic supports purchasing add-on licenses such as Microsoft Defender for Office 365 Plan 1 and Microsoft Intune. Upgrading all users to Business Premium would include these features but at a higher per-user cost if only these two add-ons are needed. Business Standard does not include Intune or Defender.

Purchasing add-ons for all 150 users is the most cost-effective way to add the specific capabilities without changing the base license.

Full explanation →
25
MCQmedium

An administrator is reviewing a request from users who need to let support staff troubleshoot without tenant-wide change permissions. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Microsoft Stream
B.Assign least-privileged support or reader roles
C.Microsoft Forms
D.Microsoft Whiteboard
AnswerB

Support roles should be scoped to the minimum access needed.

Why this answer

The correct answer is B because the scenario requires granting support staff the ability to troubleshoot without tenant-wide change permissions, which directly maps to the principle of least privilege. In Microsoft 365, this is achieved by assigning a role like Helpdesk Administrator or a reader role (e.g., Global Reader), which provides read-only or limited administrative access without allowing modifications to tenant-wide settings. This aligns with the 'Describe Microsoft 365 pricing and support' domain, specifically the support and admin concepts.

Exam trap

The trap here is that candidates may confuse a specific Microsoft 365 service (like Stream, Forms, or Whiteboard) with an admin or support concept, failing to recognize that the question is about role-based access control and least privilege, not about a particular application.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video service for recording and sharing videos, not an admin or support concept for granting granular permissions. Option C is wrong because Microsoft Forms is a survey and quiz tool, unrelated to role-based access control or troubleshooting permissions. Option D is wrong because Microsoft Whiteboard is a collaborative digital canvas, not a mechanism for assigning least-privileged support roles.

Full explanation →
26
MCQhard

Your organization is adopting Microsoft 365 Copilot and wants to prevent the AI from using internal customer data in its training models. Which data protection option should be enabled?

A.Microsoft Commercial Data Protection
B.Microsoft Defender for Cloud Apps
C.Microsoft Purview Audit
D.Conditional Access policies
AnswerA

This commitment ensures customer data is not used for training.

Why this answer

Microsoft Commercial Data Protection ensures that Copilot does not use customer data for training models. Option D is correct. Options A, B, and C do not address training data usage.

Full explanation →
27
MCQmedium

A business stakeholder asks how Microsoft 365 can help them access cloud resources from laptops, tablets, and phones over the internet. Cloud concept or benefit best matches this requirement?

A.Sensitivity labels
B.Microsoft Planner
C.Data Loss Prevention (DLP)
D.Broad network access
AnswerD

Broad network access means cloud services are reachable over standard networks from different client platforms.

Why this answer

Broad network access is a core NIST cloud computing characteristic that enables resources to be accessed over the network by standard mechanisms (e.g., mobile phones, tablets, laptops, and workstations). This directly matches the stakeholder's requirement for accessing cloud resources from various devices over the internet, as Microsoft 365 leverages HTTPS and standard protocols to provide ubiquitous access.

Exam trap

The trap here is that candidates may confuse operational features (like sensitivity labels or DLP) with fundamental cloud characteristics, or incorrectly associate Microsoft Planner with cloud access, when the question specifically targets the NIST-defined cloud benefit of broad network access.

How to eliminate wrong answers

Option A is wrong because sensitivity labels are a Microsoft Information Protection (MIP) feature used to classify and protect data based on sensitivity, not to enable network access from multiple devices. Option B is wrong because Microsoft Planner is a task management and collaboration tool within Microsoft 365, not a cloud concept or benefit related to device accessibility. Option C is wrong because Data Loss Prevention (DLP) policies help prevent accidental sharing of sensitive information, but they do not address the ability to access cloud resources from laptops, tablets, and phones.

Full explanation →
28
MCQeasy

A company moves its on-premises servers to a cloud provider. The provider supplies the physical hardware, networking, and storage. The company installs and manages the operating system and applications on the virtual machines. Which cloud service model does this scenario represent?

A.Infrastructure as a Service (IaaS)
B.Platform as a Service (PaaS)
C.Software as a Service (SaaS)
D.Function as a Service (FaaS)
AnswerA

IaaS gives the customer control over the OS and applications while the provider manages the underlying hardware, storage, and networking.

Why this answer

This scenario describes Infrastructure as a Service (IaaS) because the cloud provider supplies the physical hardware, networking, and storage, while the customer retains full control over the operating system and applications. In IaaS, the provider manages the underlying infrastructure (e.g., hypervisor, physical servers, network switches), and the customer is responsible for the guest OS, middleware, and application stack. This aligns with the shared responsibility model where the customer handles OS patching, application configuration, and data management.

Exam trap

The trap here is that candidates confuse IaaS with PaaS because both involve virtual machines, but PaaS removes OS management — the key differentiator is who installs and patches the operating system.

How to eliminate wrong answers

Option B (PaaS) is wrong because PaaS abstracts the OS and runtime environment; the provider manages the OS, middleware, and runtime, while the customer only deploys code — here the customer installs and manages the OS. Option C (SaaS) is wrong because SaaS delivers fully managed applications accessed via a browser or API; the customer has no control over the underlying OS or infrastructure. Option D (FaaS) is wrong because FaaS (Function as a Service) is a serverless compute model where the provider manages all infrastructure and the customer only deploys individual functions triggered by events — it does not involve managing an OS or full applications.

Full explanation →
29
MCQmedium

During a Microsoft 365 planning workshop, store personal work files in the cloud, sync them to a laptop, and share selected files. Microsoft 365 app or service is the best fit?

A.Microsoft Purview Audit
B.Microsoft Planner
C.OneDrive for Business
D.Microsoft Forms
AnswerC

OneDrive for Business is intended for individual work file storage, synchronization, and controlled sharing.

Why this answer

OneDrive for Business is the correct answer because it provides cloud storage for personal work files, syncs them to a laptop via the OneDrive sync client (using the Windows or macOS sync engine), and allows granular sharing of selected files with internal or external users through shareable links with configurable permissions (e.g., view, edit, expiry). This directly matches the scenario's requirements for storing, syncing, and sharing personal work files.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task-sharing capabilities with file sharing, or assume that Microsoft Purview Audit's logging of file access implies storage functionality, but neither service provides the core cloud storage, sync, and selective file sharing that OneDrive for Business uniquely offers.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Audit is a compliance and auditing solution that logs user and admin activities across Microsoft 365 services; it does not provide cloud storage, file sync, or file sharing capabilities. Option B is wrong because Microsoft Planner is a task management and project planning tool that uses boards, buckets, and tasks; it is not designed for storing, syncing, or sharing personal work files. Option D is wrong because Microsoft Forms is a survey and quiz creation tool that collects responses; it lacks cloud storage, file sync, and file sharing features.

Full explanation →
30
MCQmedium

During a Microsoft 365 planning workshop, manage users, licenses, billing, and tenant settings. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Microsoft 365 admin center
B.Microsoft Whiteboard
C.Microsoft Forms
D.Microsoft Stream
AnswerA

The Microsoft 365 admin center is the central location for common tenant administration.

Why this answer

The Microsoft 365 admin center is the centralized web-based portal for managing users, licenses, billing, and tenant-wide settings. It provides a single pane of glass for administrative tasks such as assigning licenses, resetting passwords, viewing invoices, and configuring service settings, making it the most relevant tool for the described workshop activities.

Exam trap

The trap here is that candidates may confuse productivity tools (Whiteboard, Forms, Stream) with administrative tools, overlooking that the admin center is the only option designed for managing users, licenses, billing, and tenant settings.

How to eliminate wrong answers

Option B is wrong because Microsoft Whiteboard is a digital canvas app for collaboration and brainstorming, not a management tool for users, licenses, billing, or tenant settings. Option C is wrong because Microsoft Forms is a survey and quiz creation tool, with no administrative capabilities for licensing or billing. Option D is wrong because Microsoft Stream is a video hosting and sharing service, focused on recording and managing videos, not on tenant administration or license management.

Full explanation →
31
MCQmedium

A security team wants to ensure that only devices that are compliant with company security policies (e.g., antivirus enabled, disk encrypted) can access Exchange Online and SharePoint Online. Which feature should they configure in Microsoft 365?

A.Conditional Access policies
B.Data loss prevention (DLP) policies
C.Information Rights Management (IRM)
D.Microsoft Defender for Office 365
AnswerA

Correct. Conditional Access policies can enforce device compliance by checking with Intune before allowing access to cloud apps.

Why this answer

Conditional Access policies in Microsoft Entra ID (formerly Azure AD) allow administrators to enforce device compliance as a condition for granting access to cloud apps like Exchange Online and SharePoint Online. By integrating with Microsoft Intune device compliance policies (e.g., requiring antivirus, disk encryption), Conditional Access can block or allow access based on real-time device health signals, ensuring only compliant devices can connect.

Exam trap

The trap here is that candidates often confuse Conditional Access with DLP or IRM because all three involve security policies, but only Conditional Access can enforce device compliance as a gate before access is granted.

How to eliminate wrong answers

Option B (Data loss prevention policies) is wrong because DLP is designed to identify, monitor, and protect sensitive data (e.g., credit card numbers) in transit or at rest, not to enforce device compliance or block access based on device health. Option C (Information Rights Management) is wrong because IRM protects content through encryption and usage restrictions (e.g., preventing forwarding or printing) after access is granted, but it does not evaluate device compliance before granting access. Option D (Microsoft Defender for Office 365) is wrong because it focuses on threat protection against malicious links, attachments, and phishing in email and collaboration tools, not on device-level compliance checks for access control.

Full explanation →
32
Drag & Dropmedium

Drag and drop the steps to create a new user account in Microsoft 365 admin center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Creating a user in M365 admin center requires signing in, navigating to active users, adding a user, entering details, and assigning licenses/roles.

Full explanation →
33
Multi-Selecthard

Which THREE of the following are benefits of the Microsoft 365 E5 license compared to E3?

Select 3 answers
A.Exchange Online
B.Power BI Pro
C.Microsoft Purview Communication Compliance
D.Microsoft Defender for Office 365 Plan 2
E.Microsoft Entra ID P1
AnswersB, C, D

E5 includes Power BI Pro, while E3 does not.

Why this answer

Power BI Pro is included with Microsoft 365 E5 but not with E3, enabling advanced data visualization and analytics capabilities. This is a key differentiator for organizations requiring self-service business intelligence tools integrated with Microsoft 365.

Exam trap

The trap here is that candidates often assume all core productivity services like Exchange Online are exclusive to higher tiers, when in fact they are baseline features across E3 and E5, while the real differentiators are advanced security, compliance, and analytics add-ons.

Full explanation →
34
MCQmedium

A sales team uses Microsoft Teams for collaboration. They need to securely share large files (up to 15 GB) with external partners without requiring the partners to sign in. Which Microsoft 365 service should they use?

A.OneDrive for Business
B.Microsoft Lists
C.Microsoft Stream
D.SharePoint Online
AnswerA

Correct. OneDrive can share large files with anyone via anonymous links.

Why this answer

OneDrive for Business allows users to share files with external partners via a secure link that does not require the partner to sign in, and supports file sizes up to 250 GB (including the 15 GB requirement). This meets the need for large file sharing without authentication, leveraging OneDrive's external sharing capabilities with anonymous guest links.

Exam trap

The trap here is that candidates may choose SharePoint Online because it is a general-purpose collaboration platform, but they overlook the specific requirement of 'without requiring the partners to sign in,' which is more natively and commonly achieved via OneDrive for Business anonymous links, whereas SharePoint Online typically enforces authentication or a verification code by default.

How to eliminate wrong answers

Option B is wrong because Microsoft Lists is a data-tracking and organization app for creating lists, not designed for file sharing or external collaboration with large files. Option C is wrong because Microsoft Stream is a video hosting and management service, not intended for sharing arbitrary large files like documents or archives. Option D is wrong because SharePoint Online supports external sharing but, by default, requires recipients to sign in or verify their identity via a one-time code; anonymous sharing without sign-in is possible only if explicitly enabled by the admin, and the question specifies 'without requiring the partners to sign in,' making OneDrive for Business the more straightforward and commonly used solution for this scenario.

Full explanation →
35
MCQmedium

Refer to the exhibit. You are reviewing a Microsoft Defender for Cloud Apps access policy configuration. What does this policy do?

A.Allows access but prevents downloads from the specified IP range
B.Allows access to the SharePoint site only from the specified IP range
C.Blocks access from the specified IP range to the SharePoint site and prevents downloads
D.Disables the policy for the SharePoint site
AnswerC

The policy blocks access from the IP range and blocks downloads.

Why this answer

Option C is correct. The policy is enabled, targets a specific SharePoint site, blocks downloads, and is set to 'Block' access type with an IP range. This means access from the specified IP range is blocked.

Option A is wrong because it allows access from all IPs except the range. Option B is wrong because it does not allow downloads. Option D is wrong because the policy is not disabled.

Full explanation →
36
MCQeasy

Tailwind Traders is a small business with 50 users. They use Microsoft 365 Business Basic. They need to: (1) Create a central repository for company news and policies that all employees can access; (2) Set up a shared calendar for company events; (3) Enable employees to participate in online meetings with screen sharing; (4) Provide a simple way to collect feedback from customers via forms. Which combination of Microsoft 365 services meets these requirements?

A.SharePoint Online, Exchange Online, Microsoft Teams, Microsoft Forms
B.SharePoint Online, Exchange Online, Microsoft Stream, Microsoft Forms
C.OneDrive, Exchange Online, Microsoft Teams, Microsoft Forms
D.SharePoint Online, Microsoft Teams, Microsoft Stream, Microsoft Forms
AnswerA

Correct: SharePoint for news/policies, Exchange for shared calendar, Teams for meetings, Forms for feedback.

Why this answer

SharePoint Online can host a news and policies site. Exchange Online includes shared calendars. Microsoft Teams enables online meetings with screen sharing.

Microsoft Forms allows collecting customer feedback. Microsoft Stream is for video, not forms.

Full explanation →
37
MCQmedium

A marketing team needs to create a professional-looking newsletter that includes embedded videos, images, and links to documents. The newsletter should be viewable on any device and allow team members to collaborate on the content. Which Microsoft 365 app is best suited for this purpose?

A.Word Online
B.Sway
C.Publisher
D.OneNote
AnswerB

Sway is designed for creating interactive, web-based newsletters that look great on any device, supporting embedded videos, images, and collaboration.

Why this answer

Sway is the correct choice because it is specifically designed for creating interactive, web-based reports and newsletters that can embed videos, images, and links to documents. It provides responsive design that automatically adapts to any device, and it supports real-time collaboration through sharing a link, allowing team members to co-author content.

Exam trap

The trap here is that candidates often confuse Sway with Word Online or Publisher because they associate newsletters with traditional document creation, but Sway is the only Microsoft 365 app that combines rich media embedding, responsive web output, and real-time collaboration in a single tool.

How to eliminate wrong answers

Option A is wrong because Word Online is primarily a word processor for creating text-heavy documents; while it can embed images and links, it lacks native support for embedded videos and its layout is not optimized for responsive, device-agnostic newsletters. Option C is wrong because Publisher is a desktop publishing app focused on print layouts (e.g., brochures, flyers) and does not support embedded videos or responsive web viewing; it also lacks real-time collaboration features. Option D is wrong because OneNote is a digital notebook for capturing notes and ideas, not designed for creating polished, professional newsletters with embedded media and collaborative editing in a presentation-style format.

Full explanation →
38
MCQmedium

A cloud provider offers a service where customers can provision virtual machines, storage, and networks on-demand through a web portal. The customer is responsible for patching the guest operating system. Which cloud service model best describes this offering?

A.Software as a Service (SaaS)
B.Platform as a Service (PaaS)
C.Infrastructure as a Service (IaaS)
D.Desktop as a Service (DaaS)
AnswerC

Correct. The customer provisions the VMs and is responsible for OS updates and patches, while the provider manages the underlying hardware.

Why this answer

The correct answer is C (Infrastructure as a Service) because the customer provisions fundamental compute, storage, and networking resources on-demand, and retains control over the guest OS, including patching. In IaaS, the provider manages only the physical infrastructure (hypervisor, networking, storage hardware), while the customer is responsible for the OS and applications, matching the scenario exactly.

Exam trap

The trap here is that candidates confuse PaaS with IaaS because both involve 'platform' or 'infrastructure' terms, but the key differentiator is who patches the guest OS — in PaaS, the provider patches it, while in IaaS, the customer does.

How to eliminate wrong answers

Option A is wrong because SaaS delivers fully managed applications (e.g., Office 365) where the provider handles all patching, including the OS, and the customer only uses the software via a browser or client. Option B is wrong because PaaS provides a managed platform (runtime, middleware, database) where the provider patches the underlying OS and runtime, and the customer only deploys code, not managing VMs or guest OS patches. Option D is wrong because DaaS delivers virtual desktops as a managed service, where the provider typically manages the guest OS image and patching, shifting OS responsibility away from the customer.

Full explanation →
39
MCQhard

A startup wants to build a custom application with minimal infrastructure management and only pay for the resources consumed. Which cloud service model should they choose?

A.Functions as a Service (FaaS)
B.Software as a Service (SaaS)
C.Infrastructure as a Service (IaaS)
D.Platform as a Service (PaaS)
AnswerD

PaaS provides a platform to build and deploy custom apps without managing infrastructure, with pay-as-you-go pricing.

Why this answer

Option B is correct because Platform as a Service (PaaS) allows you to deploy applications without managing underlying infrastructure, and you pay only for what you use. Option A (IaaS) requires you to manage VMs and still pay for allocated resources. Option C (SaaS) provides pre-built applications, not a platform for custom apps.

Option D (FaaS) is a subset of PaaS for event-driven functions, but PaaS is broader and more suitable for a custom app.

Full explanation →
40
MCQeasy

A company uses a cloud provider that charges them only for the actual storage and compute resources they consume each month. They can start or stop machines at any time and are billed precisely for what they use. Which cloud computing characteristic does this billing model demonstrate?

A.Rapid elasticity
B.On-demand self-service
C.Resource pooling
D.Measured service
AnswerD

Measured service means usage is metered, enabling pay-per-use billing. This scenario directly illustrates that characteristic.

Why this answer

The billing model described—paying only for actual storage and compute resources consumed, with the ability to start/stop machines at any time—directly demonstrates 'Measured service'. This characteristic, defined by NIST SP 800-145, means cloud systems automatically control and optimize resource usage by leveraging a metering capability at some level of abstraction appropriate to the type of service (e.g., storage, processing, bandwidth, active user accounts). Usage is monitored, controlled, and reported, providing transparency for both the provider and consumer.

Exam trap

The trap here is that candidates confuse 'Measured service' with 'On-demand self-service' because both involve user control, but measured service specifically addresses the metering and pay-per-use billing aspect, not the ability to provision without human interaction.

How to eliminate wrong answers

Option A is wrong because 'Rapid elasticity' refers to the ability to quickly scale resources up or down, often automatically, to match demand—not to the billing model based on consumption. Option B is wrong because 'On-demand self-service' means a consumer can unilaterally provision computing capabilities (like server time or network storage) without requiring human interaction with each service provider—it describes the provisioning mechanism, not the pay-per-use billing. Option C is wrong because 'Resource pooling' means the provider's computing resources are pooled to serve multiple consumers using a multi-tenant model, with physical and virtual resources dynamically assigned and reassigned according to consumer demand—it is about multi-tenancy and location independence, not billing granularity.

Full explanation →
41
MCQmedium

A company uses Microsoft 365 Business Premium. All users have Microsoft 365 E3 licenses, but the IT team wants to enforce conditional access policies to require multifactor authentication (MFA) for all external access to SharePoint Online. Which service should they use to create and manage these policies?

A.Microsoft Defender XDR
B.Microsoft Intune
C.Microsoft Entra ID
D.Microsoft Purview
AnswerC

Entra ID provides Conditional Access policies for MFA enforcement.

Why this answer

Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides Conditional Access policies, which can require MFA for external access to SharePoint Online. These policies are evaluated at authentication time based on signals like user location, device state, and application, and they are independent of the underlying Microsoft 365 license (E3 or Business Premium).

Exam trap

The trap here is that candidates confuse Microsoft Intune's device compliance policies with Conditional Access policies, but Intune only provides the compliance state signal, while Entra ID is the service that evaluates and enforces the access decision.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender XDR is a security analytics and threat response platform that correlates signals across endpoints, email, and identities, but it does not create or manage Conditional Access policies. Option B is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service that enforces device compliance and app protection policies, but it does not handle Conditional Access policy creation. Option D is wrong because Microsoft Purview is a data governance, compliance, and risk management solution that focuses on data classification, retention, and eDiscovery, not on identity-based access controls like Conditional Access.

Full explanation →
42
MCQmedium

A compliance officer needs to automatically detect documents stored in SharePoint Online that contain sensitive data types (e.g., credit card numbers) and apply a sensitivity label that restricts access to only certain users. The classification should occur without user intervention and the label must be applied to the document. Which Microsoft Purview solution should be configured?

A.Data Loss Prevention (DLP)
B.Sensitivity labels with auto-labeling
C.Retention labels
D.Information barriers
AnswerB

Auto-labeling policies can scan content for sensitive info types and automatically apply a sensitivity label that includes encryption and permissions.

Why this answer

Sensitivity labels with auto-labeling are the correct solution because they can automatically classify documents based on sensitive data types (such as credit card numbers) and apply a sensitivity label that enforces protection actions like restricting access to specific users. This occurs without user intervention, meeting the requirement for automatic classification and labeling in SharePoint Online.

Exam trap

The trap here is that candidates often confuse DLP policies with auto-labeling, but DLP only detects and blocks sharing actions, whereas auto-labeling applies the sensitivity label and its associated protection directly to the document.

How to eliminate wrong answers

Option A is wrong because Data Loss Prevention (DLP) policies detect and prevent the sharing of sensitive data but do not apply sensitivity labels or enforce access restrictions on documents; they trigger alerts or block actions. Option C is wrong because retention labels are designed to manage data retention and deletion policies, not to classify documents based on sensitive data types or apply access restrictions. Option D is wrong because information barriers are used to restrict communication and collaboration between specific groups or users, not to automatically detect sensitive data or apply labels to documents.

Full explanation →
43
MCQmedium

An administrator is reviewing an ARM template for a storage account. The template includes a storage account with Standard_LRS redundancy. Which Microsoft 365 licensing feature does this relate to?

A.OneDrive for Business storage
B.Microsoft Purview audit log storage
C.SharePoint Online storage quotas
D.Exchange Online mailbox limits
AnswerB

Purview can use Azure Storage accounts for long-term retention of audit logs, and ARM templates can be used to deploy the storage.

Why this answer

The ARM template's Standard_LRS redundancy is used for Azure storage accounts, which underpin Microsoft 365's audit log storage in Microsoft Purview. Audit logs are stored in Azure Blob Storage, and Standard_LRS (Locally Redundant Storage) is the default redundancy tier for this data, providing three copies within a single datacenter. This directly links to the Purview audit log storage feature, not user-facing storage quotas or limits.

Exam trap

The trap here is that candidates confuse Azure storage redundancy (Standard_LRS) with Microsoft 365 user storage features like OneDrive or SharePoint quotas, but the question specifically ties to the backend infrastructure for audit log storage in Microsoft Purview.

How to eliminate wrong answers

Option A is wrong because OneDrive for Business storage is provisioned per user and managed through SharePoint Online quotas, not directly via ARM templates or Azure storage redundancy settings. Option C is wrong because SharePoint Online storage quotas are tenant-level limits for site collections and document libraries, controlled through SharePoint admin center settings, not Azure storage account redundancy. Option D is wrong because Exchange Online mailbox limits are defined by licensing plans and managed via Exchange admin center, unrelated to Azure storage account configurations like Standard_LRS.

Full explanation →
44
Multi-Selecthard

Which TWO Microsoft 365 apps use AI to assist users with content creation?

Select 2 answers
A.Microsoft PowerPoint with Copilot
B.Microsoft Word with Copilot
C.Microsoft Viva Insights
D.Microsoft Excel with Copilot
E.Microsoft Teams with Copilot
AnswersA, B

Copilot in PowerPoint helps create presentations from prompts.

Why this answer

Microsoft PowerPoint with Copilot and Microsoft Word with Copilot are correct because Copilot in these apps leverages large language models (LLMs) integrated with the Microsoft Graph to generate, summarize, and refine content directly within the document or presentation. In PowerPoint, Copilot can create entire slide decks from a prompt or natural language outline, while in Word, it can draft text, rewrite paragraphs, or summarize documents, both using AI to assist users in content creation.

Exam trap

The trap here is that candidates may assume any Copilot-enabled app (like Excel or Teams) qualifies as 'content creation,' but the MS-900 exam specifically distinguishes between AI for content generation (Word, PowerPoint) and AI for data analysis or meeting summarization (Excel, Teams), so you must identify which apps focus on creating new textual or visual content.

Full explanation →
45
MCQhard

A multinational corporation uses Microsoft 365 E5 and wants to implement a retention policy that automatically deletes emails in users' mailboxes after 7 years, except for emails from the legal department which must be retained indefinitely. Which approach should the admin use?

A.Apply a litigation hold to all mailboxes and a retention policy to delete after 7 years
B.Configure Exchange Online archive policies to move emails after 7 years
C.Create a default retention policy for 7 years and use auto-labeling for legal department emails
D.Use Microsoft Purview eDiscovery to manually delete emails after 7 years
AnswerC

Default policy deletes after 7 years; auto-labeling applies indefinite retention label to legal emails.

Why this answer

Option C is correct because it uses a retention policy with a 7-year deletion period for all content, then overrides that for legal department emails via auto-labeling with a 'retain indefinitely' label. This ensures that only legal emails are preserved forever while all other emails are automatically purged after 7 years, meeting the compliance requirement without manual intervention.

Exam trap

The trap here is that candidates confuse litigation hold (which preserves everything indefinitely) with a retention label that allows indefinite retention for a subset of items, leading them to choose Option A instead of understanding that litigation hold blocks deletion for all content.

How to eliminate wrong answers

Option A is wrong because a litigation hold preserves all mailbox content indefinitely, preventing the 7-year deletion policy from taking effect on any emails, including non-legal ones. Option B is wrong because Exchange Online archive policies only move emails to the archive mailbox after a specified period; they do not delete emails, so they cannot meet the deletion requirement. Option D is wrong because eDiscovery is a search and export tool, not a retention or deletion mechanism; manually deleting emails after 7 years is impractical, error-prone, and violates the automated compliance requirement.

Full explanation →
46
MCQeasy

A marketing team needs to collaborate on a campaign document in real time and track changes. Which Microsoft 365 app should they use?

A.Teams
B.Word
C.OneNote
D.SharePoint
AnswerB

Word Online enables real-time collaboration and track changes.

Why this answer

Option A is correct because Word Online supports real-time co-authoring and change tracking. Option B is wrong because OneNote is for note-taking, not document collaboration. Option C is wrong because SharePoint is a document management platform, not a real-time editing app.

Option D is wrong because Teams is for chat and meetings.

Full explanation →
47
MCQhard

A security team needs to ensure that all Microsoft 365 administrative actions—such as creating user accounts or resetting passwords—are logged and searchable for at least 90 days. They also need to create custom alert rules for suspicious admin activity. Which Microsoft Purview solution should they use?

A.Microsoft Purview Audit (Standard)
B.Microsoft Purview Audit (Premium)
C.Microsoft Entra ID sign-in logs
D.Microsoft Defender for Cloud Apps
AnswerA

Correct. Audit (Standard) records admin and user activities with 90-day retention and supports custom alert rules via the Microsoft Purview compliance portal.

Why this answer

Microsoft Purview Audit (Standard) logs and retains all administrative actions (e.g., creating users, resetting passwords) for 90 days by default, meeting the retention requirement. It also supports creating custom alert rules for suspicious admin activity via the Microsoft 365 Defender portal, which queries the audit log. This makes it the correct solution for both logging and alerting on admin actions.

Exam trap

The trap here is that candidates often confuse Audit (Premium) as mandatory for any alerting or retention beyond 30 days, but the question's 90-day requirement is exactly met by Audit (Standard), and Premium is only needed for longer retention or specific high-value events.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit (Premium) extends retention up to 1 year (or more with add-ons) and provides higher-value events like MailItemsAccessed, but the question specifically requires only 90 days of retention, which Standard already covers. Option C is wrong because Microsoft Entra ID sign-in logs capture authentication events (e.g., user logins, MFA failures), not administrative actions like creating accounts or resetting passwords, and they are retained for 30 days by default (or 30 days with Azure AD P1/P2). Option D is wrong because Microsoft Defender for Cloud Apps focuses on cloud app discovery, session controls, and anomaly detection for SaaS apps, not on logging and alerting for Microsoft 365 administrative actions within the audit log.

Full explanation →
48
MCQmedium

A security analyst receives an alert about a user who downloaded a large number of files from a SharePoint document library in a short period. The analyst needs to investigate the user's activities across Exchange, SharePoint, and Teams to determine if data exfiltration is occurring. Which Microsoft Purview solution should the analyst use to review detailed activity logs?

A.Microsoft Purview Audit (Premium)
B.Microsoft Purview eDiscovery (Premium)
C.Microsoft Purview Communication Compliance
D.Microsoft Purview Data Loss Prevention (DLP)
AnswerA

Audit (Premium) captures a comprehensive record of user activities, enabling investigation of potential data exfiltration.

Why this answer

Microsoft Purview Audit (Premium) provides detailed, searchable activity logs for user actions across Exchange, SharePoint, and Teams, including file downloads, access events, and admin operations. The analyst can use the Audit log search to filter by user, date range, and activity type (e.g., 'FileDownloaded') to identify potential data exfiltration patterns. Audit (Premium) also offers longer retention (up to 1 year by default, extendable to 10 years) and higher-bandwidth APIs for large-scale investigations.

Exam trap

The trap here is that candidates confuse the investigative capability of Audit logs with the preventive or content-focused tools like DLP or eDiscovery, assuming that any security-related alert must be handled by DLP or eDiscovery, when in fact Audit (Premium) is the correct tool for reviewing historical activity logs.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview eDiscovery (Premium) is designed for legal discovery and content search (e.g., identifying, preserving, and exporting relevant documents and emails), not for real-time or historical activity log review of user actions like file downloads. Option C is wrong because Microsoft Purview Communication Compliance focuses on monitoring internal and external communications (e.g., email, Teams messages) for policy violations like harassment or insider trading, not on tracking file download activities from SharePoint. Option D is wrong because Microsoft Purview Data Loss Prevention (DLP) is a policy-based solution that prevents data exfiltration by blocking or alerting on sensitive content in transit or at rest, but it does not provide a searchable log of past user activities for forensic investigation.

Full explanation →
49
MCQmedium

A financial services firm uses Microsoft 365 and must retain all business communications for 7 years to comply with SEC regulations. They also need to prevent users from permanently deleting emails. Which Microsoft Purview feature should they implement?

A.Retention policies and retention labels
B.Sensitivity labels
C.eDiscovery (Standard)
D.Data Loss Prevention (DLP) policies
AnswerA

Retention policies enforce retention and prevent deletion.

Why this answer

Option C is correct because retention policies and labels can enforce retention periods and prevent permanent deletion. Option A is incorrect because DLP prevents data loss, not retention. Option B is incorrect because eDiscovery is for search and hold, not retention enforcement.

Option D is incorrect because sensitivity labels classify data but do not enforce retention.

Full explanation →
50
Multi-Selectmedium

A company needs to provide support to its Microsoft 365 users. They want a plan that includes 24/7 phone support, web support, and the ability to submit an unlimited number of incidents. Which TWO support plans offer these features?

Select 2 answers
A.Microsoft 365 Business Basic
B.Microsoft 365 Business Premium
C.Microsoft 365 E3 with Standard support
D.Microsoft 365 E5
E.Microsoft 365 E1 with Professional Direct
AnswersB, D

Business Premium includes 24/7 phone and web support with unlimited incidents.

Why this answer

Microsoft 365 Business Premium includes 24/7 phone and web support with unlimited incidents as part of its standard support offering. This plan is designed for small and medium businesses that need advanced security and device management alongside comprehensive support.

Exam trap

The trap here is that candidates often assume all paid plans include unlimited support incidents, but only specific plans (Business Premium, E5) include Standard support by default, while others require an additional support plan purchase.

Full explanation →
51
MCQmedium

A legal department requires that when an employee deletes any email message in Exchange Online that is related to active litigation, the message must be automatically retained for an additional 5 years after deletion. The retention must be applied based on keywords found in the email content. Which Microsoft Purview solution should be configured?

A.Microsoft Purview retention labels with auto-labeling based on keywords
B.Microsoft Purview Data Loss Prevention (DLP) policies
C.Microsoft Purview eDiscovery
D.Microsoft Purview Audit
AnswerA

Correct. Retention labels can automatically detect keyword patterns and retain deleted emails for the specified duration.

Why this answer

Microsoft Purview retention labels with auto-labeling based on keywords can automatically apply a retention label to emails that match specific keywords in their content. When the label is configured to retain items for 5 years after deletion, it ensures that emails related to active litigation are preserved even after the user deletes them. This meets the legal department's requirement for content-based, automatic retention.

Exam trap

The trap here is that candidates often confuse retention labels (which manage lifecycle and deletion) with DLP policies (which prevent data loss) or eDiscovery (which finds and holds data), failing to recognize that auto-labeling based on keywords is the precise mechanism for content-driven retention.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Data Loss Prevention (DLP) policies are designed to prevent data leaks by detecting and blocking sensitive information, not to enforce retention after deletion. Option C is wrong because Microsoft Purview eDiscovery is used to search, hold, and export content for legal cases, but it does not automatically apply retention based on keywords in email content. Option D is wrong because Microsoft Purview Audit logs user and admin activities for compliance investigation, but it does not retain deleted messages or apply retention policies based on content keywords.

Full explanation →
52
MCQeasy

A development team wants to deploy a custom web application to the cloud. They want to upload their code and let the cloud provider handle server infrastructure, operating system updates, and automatic scaling. Which cloud service model best fits this requirement?

A.Infrastructure as a Service (IaaS)
B.Platform as a Service (PaaS)
C.Software as a Service (SaaS)
D.On-premises deployment
AnswerB

Correct. PaaS abstracts the underlying infrastructure, allowing developers to focus on code while the provider manages server, OS, and scaling.

Why this answer

Platform as a Service (PaaS) is the correct choice because it provides a managed hosting environment where the development team can upload their custom web application code without managing the underlying server infrastructure, operating system updates, or scaling. Azure App Service, a PaaS offering, automatically handles OS patching, load balancing, and auto-scaling based on demand, aligning perfectly with the requirement to let the cloud provider handle these tasks.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS, mistakenly thinking that IaaS also abstracts OS updates and scaling, but IaaS still requires the user to manage the OS and configure scaling manually, unlike PaaS which fully automates these responsibilities.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtual machines, storage, and networks, but the team would still be responsible for managing the operating system, applying updates, and configuring scaling manually, which contradicts the requirement to offload these tasks. Option C is wrong because Software as a Service (SaaS) delivers fully managed applications (e.g., Office 365) that users access via a browser, not a platform for deploying custom code. Option D is wrong because on-premises deployment requires the team to own and manage all hardware, software, and updates locally, which is the opposite of letting the cloud provider handle infrastructure.

Full explanation →
53
MCQmedium

A tenant administrator is advising a department that wants to let users sign in once and access connected Microsoft 365 and SaaS apps. Microsoft security, identity, or compliance capability should it use?

A.Microsoft Planner
B.Microsoft Forms
C.Microsoft Stream
D.Single sign-on (SSO)
AnswerD

SSO allows users to authenticate once and access connected applications.

Why this answer

Single sign-on (SSO) enables users to authenticate once and gain access to multiple applications, including Microsoft 365 and third-party SaaS apps, without re-entering credentials. This is achieved through federation protocols such as SAML 2.0 or OpenID Connect, which allow the identity provider (Azure AD) to issue security tokens to relying party applications. SSO is the correct Microsoft security and identity capability for this requirement.

Exam trap

The trap here is that candidates may confuse productivity tools (Planner, Forms, Stream) with security/identity capabilities, failing to recognize that SSO is the specific feature designed for unified authentication across multiple apps.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management and project planning tool within Microsoft 365, not an identity or security capability; it cannot provide single sign-on or federated authentication. Option B is wrong because Microsoft Forms is a survey and data collection tool, lacking any identity federation or authentication functionality. Option C is wrong because Microsoft Stream is a video hosting and sharing service; it does not implement SSO or manage user authentication across apps.

Full explanation →
54
MCQmedium

A tenant administrator is advising a department that wants to review upcoming Microsoft 365 changes and recommended admin actions. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Microsoft Stream
B.Microsoft Forms
C.Microsoft Whiteboard
D.Message center
AnswerD

The Message center provides tenant-relevant change announcements and admin actions.

Why this answer

The Message center in the Microsoft 365 admin center is the dedicated hub for reviewing upcoming changes, new features, and recommended admin actions. It provides service advisories, planned changes, and action-required notifications, making it the most relevant concept for a tenant administrator advising a department on upcoming Microsoft 365 changes.

Exam trap

The trap here is that candidates confuse productivity tools (Stream, Forms, Whiteboard) with administrative communication channels, overlooking that the Message center is the specific admin portal feature for change management and action items.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video management and sharing service, not a tool for reviewing upcoming changes or admin actions. Option B is wrong because Microsoft Forms is a survey and quiz creation tool, unrelated to change notifications or admin advisories. Option C is wrong because Microsoft Whiteboard is a digital canvas for collaboration, not a mechanism for tracking service updates or recommended actions.

Full explanation →
55
MCQmedium

A sales team wants to build a custom inventory tracking application with minimal code. They need a cloud-based database that can securely store structured data and integrate with the low-code app builder. Which Microsoft 365 service should they use as the database backend?

A.Microsoft Lists
B.Power Apps
C.Microsoft Dataverse
D.Power Automate
AnswerC

Dataverse provides a secure, scalable database that stores structured business data. It is designed to be the data backend for Power Apps, making it the correct choice for this scenario.

Why this answer

Microsoft Dataverse is the correct choice because it provides a scalable, cloud-based relational database that securely stores structured data and integrates natively with Power Apps, the low-code app builder. Unlike simpler list-based storage, Dataverse supports rich data types, relationships, business logic, and role-based security, making it ideal for custom inventory tracking applications built with minimal code.

Exam trap

The trap here is that candidates often confuse Microsoft Lists (a simple list tool) with a proper database backend, or mistakenly think Power Apps or Power Automate can serve as data storage, when in fact they are application and automation layers that require a separate data source like Dataverse.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a list-based data storage service designed for simple tracking and collaboration, not a full relational database with support for complex relationships, business rules, and integration with low-code app builders like Power Apps. Option B is wrong because Power Apps is the low-code app builder itself, not a database backend; it requires a data source such as Dataverse, SharePoint, or SQL to store and retrieve data. Option D is wrong because Power Automate is a workflow automation service for creating automated processes, not a database; it can trigger actions based on data but does not provide persistent storage for structured inventory data.

Full explanation →
56
MCQmedium

During requirements gathering, an IT manager says the organization must license frontline workers with lighter productivity needs. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Plans designed for frontline worker scenarios
B.Microsoft Whiteboard
C.Microsoft Stream
D.Microsoft Forms
AnswerA

Microsoft offers plan types intended for different worker scenarios.

Why this answer

The IT manager's requirement specifically calls for licensing frontline workers with lighter productivity needs. Microsoft 365 offers dedicated plans (e.g., Microsoft 365 F1, F3) designed precisely for frontline worker scenarios, providing essential productivity and communication tools at a lower cost per user. This makes option A the most relevant concept for the given requirement.

Exam trap

The trap here is that candidates may confuse individual Microsoft 365 applications (like Whiteboard, Stream, or Forms) with licensing plans, overlooking that the question asks for the most relevant 'licensing, admin, or support concept' rather than a specific tool.

How to eliminate wrong answers

Option B (Microsoft Whiteboard) is wrong because it is a specific application, not a licensing or support concept; it does not address the requirement to license frontline workers. Option C (Microsoft Stream) is wrong because it is a video service, not a licensing plan or support concept; it does not provide a framework for licensing users with lighter needs. Option D (Microsoft Forms) is wrong because it is a survey and data collection tool, not a licensing or support concept; it does not help in categorizing or licensing frontline workers.

Full explanation →
57
Multi-Selecthard

Which THREE statements about Microsoft Purview Audit (Standard) are true? (Choose three.)

Select 3 answers
A.Users must be assigned an appropriate license to view audit logs
B.Audit records are retained for 90 days by default
C.All SharePoint and OneDrive events are audited by default
D.Audit records are retained for 180 days by default
E.Exchange Online admin actions are audited by default
AnswersA, B, E

Permissions are required to access the audit log.

Why this answer

Audit (Standard) retains logs for 90 days (A), includes Exchange admin actions (D), and requires appropriate permissions (E). Option B (180 days) is for Audit (Premium). Option C (all SharePoint events) is also Premium.

Full explanation →
58
MCQhard

Refer to the exhibit. You are reviewing a Microsoft Purview Information Protection policy created by a colleague. The policy is intended to prevent users from sharing files labeled 'Highly Confidential' with external parties. However, users are still able to share these files externally. Which of the following is the most likely reason?

A.The sensitivity label is not published to the users.
B.The policy is missing the 'blockAccess' action.
C.The action should be set to 'blockAccess' only.
D.The condition should check for file extension instead of sensitivity label.
AnswerA

If the label is not published, the condition cannot match.

Why this answer

Option A is correct because the policy uses sensitivityLabels condition, but the correct property should be 'sensitivityLabelIds' (or equivalent) and the label must be published. Option B is wrong because the condition is based on sensitivity labels, not file extensions. Option C is wrong because the action blockSharing is correctly specified.

Option D is wrong because the policy is not missing an action; the action is present.

Full explanation →
59
MCQeasy

A cloud provider offers virtual machines, but customers must install, configure, and maintain the operating system and applications. Which cloud service model does this describe?

A.IaaS (Infrastructure as a Service)
B.PaaS (Platform as a Service)
C.SaaS (Software as a Service)
D.FaaS (Function as a Service)
AnswerA

IaaS provides virtualized infrastructure components; the customer controls the OS and applications, matching the described customer responsibility.

Why this answer

This scenario describes Infrastructure as a Service (IaaS), where the cloud provider supplies virtualized computing resources such as virtual machines, storage, and networking, but the customer retains full control over the operating system, middleware, and applications. In IaaS, the provider manages only the physical infrastructure (hypervisor, servers, storage, and network), while the customer is responsible for OS installation, configuration, patching, and application management. This aligns directly with the question's description of customer-managed OS and applications on provider-hosted VMs.

Exam trap

The trap here is that candidates often confuse IaaS with PaaS because both involve virtual machines, but PaaS (e.g., Azure App Service) hides the OS and runtime, whereas IaaS requires full customer OS management.

How to eliminate wrong answers

Option B (PaaS) is wrong because PaaS abstracts the underlying OS and runtime; the provider manages the OS, middleware, and runtime environment, so customers do not install or maintain the OS. Option C (SaaS) is wrong because SaaS delivers fully functional applications accessed via a web browser or API, with no customer control over the OS or underlying infrastructure. Option D (FaaS) is wrong because FaaS (Function as a Service) executes stateless code functions in response to events, with the provider managing all infrastructure including the OS, and customers only upload code without any OS-level access.

Full explanation →
60
Multi-Selectmedium

Which TWO Microsoft 365 apps can be used to create and share forms for surveys? (Select exactly 2.)

Select 2 answers
A.Microsoft Forms
B.Microsoft Teams
C.Microsoft Outlook
D.OneNote
E.Microsoft Excel
AnswersA, E

Forms is specifically for surveys and quizzes.

Why this answer

Microsoft Forms and Microsoft Excel (with Forms integration) can be used to create surveys. Options A and D are correct. Option B is for email, C for notes, E for collaboration.

Full explanation →
61
MCQeasy

A marketing team wants to quickly create a visually appealing report from data stored in Excel and share it with stakeholders via a web browser. Which Microsoft 365 app should they use?

A.Microsoft Forms
B.Microsoft Stream
C.Microsoft Excel
D.Microsoft Power BI
AnswerD

Power BI enables creating interactive reports and sharing them online.

Why this answer

Microsoft Power BI is the correct choice because it is designed specifically for creating interactive, visually appealing reports and dashboards from data sources like Excel. It allows users to publish these reports to the Power BI service, where stakeholders can access them via a web browser without needing to install any software.

Exam trap

The trap here is that candidates may choose Microsoft Excel because they think it can create charts and share them via OneDrive or SharePoint, but they overlook that Power BI is the dedicated tool for interactive, browser-based reporting with advanced visualization and sharing capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz tool, not a data visualization or reporting app; it cannot create reports from Excel data. Option B is wrong because Microsoft Stream is a video hosting and sharing platform, not designed for data analysis or report creation. Option C is wrong because while Microsoft Excel can create charts and graphs, it lacks the native capability to publish interactive, browser-accessible reports with the same level of visual interactivity and sharing controls as Power BI.

Full explanation →
62
Multi-Selectmedium

Which TWO Microsoft 365 services provide real-time co-authoring in documents?

Select 2 answers
A.Microsoft Teams
B.SharePoint Online
C.Microsoft Lists
D.Exchange Online
E.OneDrive for Business
AnswersB, E

Supports co-authoring.

Why this answer

SharePoint Online is correct because it supports real-time co-authoring in Word, Excel, and PowerPoint documents stored in SharePoint document libraries, leveraging the Office Online server infrastructure and the WebDAV protocol for simultaneous edits by multiple users.

Exam trap

The trap here is that candidates may confuse Microsoft Teams' file-sharing and preview capabilities with actual real-time co-authoring, but Teams merely surfaces files from SharePoint or OneDrive and does not host the co-authoring engine itself.

Full explanation →
63
MCQmedium

During a Microsoft 365 planning workshop, check whether an Outlook on the web issue is caused by a known Microsoft incident. Microsoft 365 licensing, admin, or support concept is most relevant?

A.Microsoft Whiteboard
B.Microsoft Stream
C.Microsoft Forms
D.Service health
AnswerD

Service health can show whether Microsoft has a known service incident.

Why this answer

Service health in the Microsoft 365 admin center provides real-time status of Microsoft services, including known incidents and advisories. When troubleshooting an Outlook on the web issue, checking Service health is the correct first step to determine if the problem is caused by a known Microsoft incident, rather than a local configuration or licensing problem.

Exam trap

The trap here is that candidates may confuse collaboration or productivity tools (Whiteboard, Stream, Forms) with administrative monitoring features, mistakenly thinking they can be used to diagnose service incidents, when only Service health provides the required incident status data.

How to eliminate wrong answers

Option A is wrong because Microsoft Whiteboard is a digital canvas collaboration tool, not a service health monitoring feature; it cannot be used to check for known incidents affecting Outlook on the web. Option B is wrong because Microsoft Stream is a video service for recording and sharing videos, unrelated to incident tracking or service health diagnostics. Option C is wrong because Microsoft Forms is a survey and quiz creation tool, not a mechanism to verify service incidents or outages.

Full explanation →
64
Multi-Selectmedium

Which TWO Microsoft 365 apps are primarily used for business process automation and workflow? (Select two.)

Select 2 answers
A.Microsoft Planner
B.Microsoft To Do
C.Microsoft Forms
D.Microsoft Power Apps
E.Microsoft Power Automate
AnswersD, E

Power Apps enables building custom business apps with automation.

Why this answer

Microsoft Power Apps is a low-code application development platform that enables users to build custom business apps for process automation, while Microsoft Power Automate (formerly Flow) is a cloud-based service for creating automated workflows between apps and services. Together, they form the core of Microsoft's Power Platform for business process automation and workflow orchestration.

Exam trap

The trap here is that candidates often confuse task management tools (Planner, To Do) with workflow automation platforms, or mistake data collection tools (Forms) for process automation, because all involve 'tasks' or 'forms' but lack the underlying workflow engine and integration capabilities.

Full explanation →
65
MCQmedium

A hospital must store patient medical records on-premises to comply with strict data sovereignty regulations. However, they also want to use advanced analytics tools hosted on a public cloud platform. Which cloud deployment model best meets their needs?

A.Private cloud
B.Public cloud
C.Hybrid cloud
D.Community cloud
AnswerC

Hybrid cloud combines on-premises and public cloud resources, enabling the hospital to keep sensitive data on-site while using public cloud analytics.

Why this answer

Option C (Hybrid cloud) is correct because it allows the hospital to keep sensitive patient medical records on-premises to satisfy strict data sovereignty regulations, while leveraging public cloud services for advanced analytics. This model combines private and public cloud resources, enabling data to remain compliant without sacrificing access to cloud-hosted analytics tools.

Exam trap

The trap here is that candidates often choose Private cloud (Option A) thinking it is the only way to ensure data sovereignty, but they overlook the requirement for advanced analytics tools hosted on a public cloud, which Hybrid cloud uniquely satisfies.

How to eliminate wrong answers

Option A (Private cloud) is wrong because while it meets data sovereignty requirements, it does not provide access to public cloud-based advanced analytics tools, limiting the hospital's ability to use those services. Option B (Public cloud) is wrong because it would require storing patient data off-premises, violating data sovereignty regulations that mandate on-premises storage. Option D (Community cloud) is wrong because it is designed for multiple organizations with shared concerns (e.g., compliance), but it still typically involves off-premises infrastructure and does not inherently support a hybrid approach that keeps specific data on-premises while using public cloud analytics.

Full explanation →
66
MCQmedium

During requirements gathering, an IT manager says the organization must classify files as Confidential and apply encryption to the most sensitive content. Microsoft security, identity, or compliance capability should it use?

A.Microsoft Stream
B.Microsoft Planner
C.Sensitivity labels
D.Microsoft Forms
AnswerC

Sensitivity labels classify content and can apply encryption and markings.

Why this answer

Sensitivity labels in Microsoft Purview Information Protection allow organizations to classify files as Confidential and apply encryption automatically or manually. This capability meets the requirement to protect the most sensitive content by enforcing access controls and encryption policies based on the label.

Exam trap

The trap here is that candidates may confuse Microsoft's collaboration tools (Stream, Planner, Forms) with security/compliance features, overlooking that sensitivity labels are the dedicated mechanism for classification and encryption in Microsoft 365.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video hosting and sharing service, not a security or compliance tool for file classification or encryption. Option B is wrong because Microsoft Planner is a task management and collaboration tool, lacking any native classification or encryption features. Option D is wrong because Microsoft Forms is used to create surveys and quizzes, with no capability to classify files or apply encryption.

Full explanation →
67
MCQeasy

Your company is subject to the General Data Protection Regulation (GDPR). Which Microsoft 365 compliance feature helps you respond to a Data Subject Request (DSR) to export a user's personal data?

A.Microsoft Information Protection
B.Data Loss Prevention
C.Microsoft Purview eDiscovery
D.Unified audit log
AnswerC

eDiscovery can search and export content to fulfill DSRs.

Why this answer

eDiscovery (D) allows search and export of content. Option A (Audit) logs activities. Option B (MIP) classifies data.

Option C (DLP) prevents leaks.

Full explanation →
68
Drag & Dropmedium

Drag and drop the steps to configure a Microsoft 365 group expiration policy in the Azure AD admin center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Group expiration policy is set in Azure AD under Groups > Expiration.

Full explanation →
69
MCQmedium

A compliance-aware administrator is selecting the right Microsoft 365 capability to manage formal records that must be retained and disposed of according to policy. Microsoft security, identity, or compliance capability should it use?

A.Records Management
B.Microsoft Forms
C.Microsoft Planner
D.Microsoft Stream
AnswerA

Records Management supports declaring, retaining, and disposing of records.

Why this answer

Records Management in Microsoft 365 (part of Microsoft Purview) is specifically designed to manage formal records by applying retention labels that enforce retention and disposition policies. It allows administrators to declare records, lock them against modification or deletion, and trigger disposal actions based on regulatory or organizational requirements. This directly addresses the need to retain and dispose of records according to policy.

Exam trap

The trap here is that candidates may confuse general compliance features (like retention policies in Microsoft 365) with the specific Records Management capability, which is the only one designed for formal, policy-driven record declaration and disposition.

How to eliminate wrong answers

Option B (Microsoft Forms) is wrong because it is a survey and data collection tool, not a compliance capability for managing records retention or disposition. Option C (Microsoft Planner) is wrong because it is a task management and collaboration tool for organizing work, with no built-in features for formal records management or policy-based retention. Option D (Microsoft Stream) is wrong because it is a video hosting and sharing platform; while it may have some retention policies via broader Microsoft 365 compliance, it is not a dedicated records management capability.

Full explanation →
70
Multi-Selecthard

Which THREE Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage data lifecycle and retention?

Select 3 answers
A.Sensitivity Labels
B.Records Management
C.Data Lifecycle Management
D.Retention Policies
E.Data Loss Prevention
AnswersB, C, D

Manages records retention and disposition.

Why this answer

Records Management (B) is correct because it enables organizations to declare records, apply retention labels, and manage the disposition of content in a defensible manner. It is a core Purview feature for managing the data lifecycle, ensuring that records are retained for the required period and then disposed of appropriately.

Exam trap

The trap here is that candidates often confuse Sensitivity Labels with retention features because both are part of Purview, but Sensitivity Labels control access and protection, not the lifecycle or retention duration of data.

Full explanation →
71
MCQeasy

A nonprofit organization with 50 users needs to use Microsoft 365 for email, file storage, and online versions of Office apps. They have a very limited budget. Which Microsoft 365 plan should they consider first?

A.Microsoft 365 Business Basic
B.Microsoft 365 Business Premium
C.Office 365 E3
D.Microsoft 365 Nonprofit Business Basic
AnswerD

This plan is designed for nonprofits and provides email, file storage, and web Office apps at a heavily discounted or donated price, fitting the budget.

Why this answer

Microsoft 365 Nonprofit Business Basic (Option D) is the correct choice because it provides email (Exchange Online), file storage (OneDrive and SharePoint), and online versions of Office apps (Word, Excel, etc.) at no cost for eligible nonprofit organizations with up to 300 users. This plan is specifically designed for nonprofits with limited budgets, offering the required functionality without the expense of paid plans.

Exam trap

The trap here is that candidates may overlook the nonprofit-specific plans and choose a commercial plan like Business Basic (Option A) or Business Premium (Option B), assuming they are the only options, without realizing that Microsoft offers free or heavily discounted plans for eligible nonprofits, which directly address the budget constraint.

How to eliminate wrong answers

Option A (Microsoft 365 Business Basic) is wrong because it is a paid commercial plan that requires a monthly subscription per user, whereas the nonprofit version of Business Basic is available at no cost for eligible organizations. Option B (Microsoft 365 Business Premium) is wrong because it includes advanced security and device management features (e.g., Microsoft Defender for Business, Intune) that are unnecessary for basic email, storage, and online Office apps, and it is significantly more expensive. Option C (Office 365 E3) is wrong because it is an enterprise plan designed for larger organizations with advanced compliance and analytics capabilities (e.g., eDiscovery, Power BI Pro), and it is not optimized for the limited budget or specific needs of a small nonprofit; additionally, it is a paid plan unlike the free nonprofit offering.

Full explanation →
72
Multi-Selecteasy

Which TWO Microsoft 365 services can be used to create and manage tasks?

Select 2 answers
A.Power Automate
B.Microsoft Planner
C.Microsoft Word
D.Microsoft To Do
E.SharePoint
AnswersB, D

Planner is designed for task management.

Why this answer

Microsoft Planner is a task management tool integrated with Microsoft 365 that allows users to create, assign, and track tasks within a visual Kanban-style board. It is designed for team collaboration, where each task can include due dates, checklists, attachments, and comments, making it a correct answer for creating and managing tasks.

Exam trap

The trap here is that candidates may confuse SharePoint's ability to create custom task lists with being a dedicated task management service, but SharePoint lacks the native Kanban boards, assignment workflows, and integration with To Do that define Planner and To Do as the correct answers.

Full explanation →
73
MCQeasy

A company wants to provide its employees with access to email, calendar, and document editing tools through a web browser without installing any software. The provider manages all maintenance, updates, and security of the applications. Which cloud service model best describes this scenario?

A.Infrastructure as a Service (IaaS)
B.Platform as a Service (PaaS)
C.Software as a Service (SaaS)
D.Desktop as a Service (DaaS)
AnswerC

SaaS delivers fully functional applications over the internet, managed entirely by the provider. The customer only needs a browser to use them, which matches the scenario.

Why this answer

This scenario describes Software as a Service (SaaS) because the provider delivers fully functional applications—such as email, calendar, and document editing—over the web, with no local installation required. The provider handles all maintenance, updates, and security, which is the defining characteristic of SaaS. Examples include Microsoft 365 (Exchange Online, Outlook, Word Online) and Google Workspace.

Exam trap

The trap here is that candidates often confuse SaaS with PaaS because both involve managed services, but PaaS is for developers building custom applications, not for end users consuming ready-made applications like email and calendars.

How to eliminate wrong answers

Option A is wrong because Infrastructure as a Service (IaaS) provides virtualized computing resources (e.g., VMs, storage, networks) but requires the customer to install and manage their own operating systems and applications, not just use pre-built tools via a browser. Option B is wrong because Platform as a Service (PaaS) provides a runtime environment and development tools for building and deploying custom applications, not ready-to-use end-user applications like email and document editing. Option D is wrong because Desktop as a Service (DaaS) delivers a full virtual desktop environment (including OS and applications) to end users, but the scenario specifies accessing specific applications through a web browser without a full desktop experience, and DaaS typically requires a client or browser-based remote desktop connection, not just direct web access to individual apps.

Full explanation →
74
MCQmedium

A compliance officer needs to automatically encrypt any outgoing email that contains a customer's credit card number. The solution should work without requiring the sender to take any manual action. Which Microsoft Purview feature should be configured?

A.Data Loss Prevention (DLP) policy
B.Microsoft Purview Message Encryption
C.Sensitivity labels
D.Retention policies
AnswerA

Correct. DLP policies can be configured to detect credit card numbers and automatically apply encryption when sending emails containing that data.

Why this answer

A Data Loss Prevention (DLP) policy in Microsoft Purview can be configured to automatically detect sensitive information types, such as credit card numbers, in outgoing email. When a match is found, the policy can enforce an action like 'Encrypt the message' without requiring any manual action from the sender, fulfilling the compliance officer's requirement for automatic, sender-transparent encryption.

Exam trap

The trap here is that candidates often confuse Microsoft Purview Message Encryption (a manual or rule-triggered encryption method) with a DLP policy's ability to automatically detect and encrypt content, leading them to select Message Encryption as the direct solution instead of the policy that orchestrates the detection and action.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Message Encryption is a feature that provides encryption capabilities, but it requires manual action by the sender (e.g., selecting 'Encrypt' in Outlook) or must be triggered by a DLP policy; it is not a policy itself that automatically detects and encrypts based on content. Option C is wrong because sensitivity labels are used to classify and protect data based on user-applied or automatic labeling, but they do not natively scan for specific patterns like credit card numbers in transit; they rely on DLP or auto-labeling policies for such detection. Option D is wrong because retention policies are designed to preserve or delete data after a specified period, not to inspect content in real-time for sensitive information or enforce encryption on outgoing messages.

Full explanation →
75
MCQmedium

Refer to the exhibit. You are reviewing a sensitivity label policy configuration in Microsoft Purview. What is the outcome of this configuration?

A.The 'Confidential' label is disabled and cannot be applied.
B.Users are required to apply a sensitivity label to all documents.
C.Users can manually change the label, but the default label is 'Public'.
D.No default label is applied to documents.
AnswerC

The default label is 'Public', and since not mandatory, users can change it.

Why this answer

Option C is correct. The default label is 'Public' with MandatoryLabelType set to 'none', meaning labels are not mandatory. Users can apply labels manually, but documents will have the default label unless changed.

Option A is wrong because mandatory is not required. Option B is wrong because the default label is applied, not none. Option D is wrong because labels are enabled.

Full explanation →

Page 1 of 14

Page 2

All pages

1234567891011121314

Practice MS-900 by domain

Target a specific domain to shore up weak areas.

Describe Microsoft 365 apps and servicesDescribe Microsoft 365 pricing, licensing, and supportDescribe cloud conceptsDescribe security, compliance, privacy, and trust in Microsoft 365Describe Microsoft 365 pricing and support
See all domains with question counts →