Courseiva

CCNA Describe Microsoft 365 apps and services Questions

75 of 350 questions · Page 4/5 · Describe Microsoft 365 apps and services · Answers revealed

Practice these questionsDomain overviewAll questions
226
MCQmedium

A project team needs a centralized workspace that includes a shared calendar, a document library for storing deliverables, a task list with assignments, and the ability to have threaded discussions about each item. They want a solution that is available out of the box in Microsoft 365 and integrates with Microsoft Teams. Which service should they use?

A.Microsoft Teams
B.SharePoint team site
C.Microsoft Viva Engage
D.Microsoft Planner
AnswerB

A SharePoint team site includes document libraries, lists, calendars, and discussion boards, providing all requested features. It can be used within Teams.

Why this answer

A SharePoint team site provides a team-oriented workspace with a document library for files, a shared calendar, a tasks list, and a discussion board for threaded conversations. It can be added as a tab in Teams. Teams alone does not include all these features natively.

Practice this question →
227
MCQeasy

A department head wants to publish company-wide announcements and host Q&A sessions that allow employees to upvote questions. Which Microsoft 365 service is designed for this?

A.Microsoft Teams
B.SharePoint
C.Yammer
D.Outlook
AnswerC

Yammer provides a corporate social network where users can post announcements, ask questions, and upvote answers.

Why this answer

Yammer is the correct answer because it is Microsoft's enterprise social networking service specifically designed for company-wide communications, such as announcements and Q&A sessions. It includes features like threaded discussions, polls, and the ability for employees to upvote questions, making it ideal for fostering open dialogue across an organization.

Exam trap

The trap here is that candidates often confuse Microsoft Teams' 'Q&A' app or SharePoint's 'Q&A' web part with Yammer's native upvoting capability, but Teams and SharePoint lack the enterprise-wide social networking and upvoting features that Yammer provides for company-wide engagement.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is primarily a chat-based collaboration hub for teams and channels, not designed for company-wide announcements with upvoting mechanisms; it lacks native Q&A upvoting features. Option B is wrong because SharePoint is a document management and intranet platform focused on content storage, portals, and workflows, not for hosting interactive Q&A sessions with upvoting. Option D is wrong because Outlook is an email and calendar client, which is unsuitable for structured, interactive Q&A sessions with community-driven upvoting.

Practice this question →
228
Multi-Selecteasy

Which TWO Microsoft 365 services provide capabilities for insider risk management?

Select 2 answers
A.Microsoft Entra ID
B.Microsoft Purview Insider Risk Management
C.Microsoft Purview Communication Compliance
D.Microsoft Intune
E.Microsoft Defender XDR
AnswersB, C

This service specifically manages insider risks.

Why this answer

Microsoft Purview Insider Risk Management (option B) is a dedicated service that uses machine learning and behavioral analytics to detect, investigate, and respond to risky user activities such as data theft, policy violations, or unauthorized access. It correlates signals from Microsoft 365 logs, HR data, and user behavior to identify potential insider threats, making it the primary tool for insider risk management.

Exam trap

The trap here is that candidates often confuse Microsoft Defender XDR (external threat detection) with insider risk management, or mistakenly think Entra ID's identity protection features cover internal user behavior monitoring, when in fact only Purview Insider Risk Management and Communication Compliance directly address insider risk scenarios.

Practice this question →
229
MCQmedium

A marketing team needs a shared workspace where they can store documents, manage a shared calendar, conduct video meetings, and collaborate on announcements. They want this workspace to be integrated with other Microsoft 365 apps. Which Microsoft 365 service is best suited for this requirement?

A.Microsoft Teams
B.Yammer
C.SharePoint
D.Microsoft Stream
AnswerA

Teams offers channels, file storage, calendar integration, meetings, and extensive app integration, meeting all the stated needs.

Why this answer

Microsoft Teams is best suited because it provides a shared workspace that integrates document storage (via SharePoint), a shared calendar (via Exchange), video meetings (via Teams meetings), and collaboration on announcements (via channel posts and the Announcement app), all within a single interface that natively integrates with other Microsoft 365 apps.

Exam trap

The trap here is that candidates often confuse SharePoint's document management capabilities with a complete workspace solution, overlooking that SharePoint alone cannot provide integrated video meetings or real-time chat without additional services.

How to eliminate wrong answers

Option B (Yammer) is wrong because Yammer is an enterprise social network focused on organization-wide conversations and communities, not a team workspace with integrated document storage, shared calendars, or video meetings. Option C (SharePoint) is wrong because while SharePoint provides document storage and some calendar functionality, it lacks native video meeting capabilities and real-time chat, requiring additional tools like Teams or Skype for Business for meetings. Option D (Microsoft Stream) is wrong because Stream is a video hosting and management platform for enterprise video content, not a collaborative workspace for documents, calendars, meetings, or announcements.

Practice this question →
230
MCQmedium

A project manager needs to collect weekly status reports from team members. They want to create a simple form where team members can submit updates, and the responses should automatically be stored in an Excel spreadsheet. The manager also wants a notification sent to their email when a new response is submitted. Which Microsoft 365 app(s) should be used together?

A.Microsoft Forms and Microsoft Power Automate
B.Microsoft Forms only
C.Microsoft Lists and Power Automate
D.Microsoft Excel only
AnswerA

Forms captures responses in Excel, and Power Automate can send a notification on new submission.

Why this answer

Microsoft Forms allows you to create a simple form for collecting weekly status reports, and its built-in integration with Microsoft Power Automate enables automatic storage of responses into an Excel spreadsheet and sending email notifications when a new response is submitted. Power Automate provides the workflow logic to connect Forms to Excel and trigger the notification, making this combination the correct solution.

Exam trap

The trap here is that candidates may think Microsoft Forms alone can handle Excel storage and notifications, or that Microsoft Lists is a suitable form builder, when in fact Power Automate is required to bridge the gap between form input and automated data storage/notification.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms alone cannot automatically store responses in an Excel spreadsheet or send email notifications; it only collects responses in its own web-based dashboard or exports them manually. Option C is wrong because Microsoft Lists is designed for structured data management and collaboration, not for creating simple forms; while Power Automate could be used, the form creation requirement is not met by Lists. Option D is wrong because Microsoft Excel alone cannot create a form for user input or send notifications; it is a spreadsheet application without form or workflow capabilities.

Practice this question →
231
MCQmedium

A consulting firm needs a tool to allow customers to book 30-minute online consulting sessions. The tool must show real-time availability of consultants, send automatic reminders, and allow customers to reschedule. Which Microsoft 365 app should they use?

A.Microsoft Bookings
B.Microsoft Teams
C.Microsoft Forms
D.Microsoft Lists
AnswerA

Microsoft Bookings provides a customer-facing scheduling page that displays available slots, sends reminders, and allows rescheduling.

Why this answer

Microsoft Bookings is the correct choice because it is a Microsoft 365 app specifically designed for scheduling and managing appointments. It provides a public booking page that shows real-time consultant availability, sends automatic email and SMS reminders, and allows customers to reschedule or cancel bookings directly, meeting all the stated requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Teams' scheduling feature (which is for internal meetings) with the customer-facing appointment booking capabilities of Microsoft Bookings, leading them to incorrectly select Teams.

How to eliminate wrong answers

Option B is wrong because Microsoft Teams is a collaboration and communication platform (chat, meetings, calls) and does not include native appointment scheduling with real-time availability display, automatic reminders, or customer-facing rescheduling capabilities. Option C is wrong because Microsoft Forms is a survey and quiz creation tool for collecting data; it cannot manage real-time availability, send automatic reminders, or handle rescheduling of appointments. Option D is wrong because Microsoft Lists is a data tracking and organization app for creating lists and workflows; it lacks built-in scheduling features like real-time availability, automated reminders, and customer self-service rescheduling.

Practice this question →
232
MCQhard

You are the Microsoft 365 administrator for Contoso Ltd., a multinational company with 5,000 employees. The company uses Microsoft 365 E5 licenses for all users. The HR department has requested a solution to onboard new employees more efficiently. Currently, when a new employee is hired, IT manually creates a user account in Microsoft Entra ID (formerly Azure AD), assigns licenses, creates a mailbox in Exchange Online, and provisions a OneDrive for Business account. This process takes approximately 2 hours per employee and is prone to errors. The HR team uses a third-party HR system (Workday) to manage employee records. When an employee is hired in Workday, HR wants the process to be automated so that within 15 minutes, the employee has a Microsoft 365 account, appropriate licenses based on their department, and access to Microsoft Teams and SharePoint Online. Additionally, the employee should be automatically added to a Microsoft 365 group for their department. The solution must minimize manual intervention and ensure that only authorized HR personnel can trigger the automation. What should you implement?

A.Deploy Microsoft Identity Manager (MIM) to synchronize Workday with on-premises AD, then sync to Entra ID.
B.Configure Workday to Microsoft Entra ID user provisioning in the Microsoft Entra admin center.
C.Create a Power Automate flow that triggers when a new employee is added to a SharePoint Online list, then uses Graph API to create the user.
D.Develop a custom solution using Microsoft Graph API and Azure Functions that polls Workday for changes.
AnswerB

Workday integration with Entra ID automates user provisioning and group membership.

Why this answer

Option B is correct because Workday to Microsoft Entra ID user provisioning is a built-in, cloud-native integration that automates the entire lifecycle of user accounts—creation, license assignment, group membership, and access to apps like Teams and SharePoint—directly from Workday HR events. It meets the 15-minute requirement, minimizes manual intervention, and can be scoped to allow only authorized HR personnel to trigger the automation via role-based access control in Entra ID.

Exam trap

The trap here is that candidates often confuse on-premises identity tools like MIM with cloud-native provisioning, or they overcomplicate the solution with custom development when a built-in connector exists, failing to recognize that Microsoft 365 E5 includes Entra ID P2 features that support automated HR-driven provisioning.

How to eliminate wrong answers

Option A is wrong because Microsoft Identity Manager (MIM) is an on-premises identity management solution that requires a local Active Directory infrastructure and adds complexity, latency, and manual steps; it does not provide the cloud-native, near-real-time provisioning from Workday directly to Entra ID that the scenario demands. Option C is wrong because a Power Automate flow triggered by a SharePoint Online list is not a secure or reliable way to create user accounts—it bypasses proper HR source-of-truth integration, lacks lifecycle management, and introduces security risks by relying on a manually maintained list. Option D is wrong because developing a custom solution with Microsoft Graph API and Azure Functions that polls Workday is unnecessarily complex, requires ongoing maintenance, and does not leverage the pre-built, supported Workday-to-Entra ID provisioning connector that is designed for this exact use case.

Practice this question →
233
MCQmedium

A project team needs to track action items and issues in a shared list that is accessible from within Outlook and SharePoint. They need to be able to create custom columns, set reminders, and view a history of changes. Which Microsoft 365 app is best suited for this?

A.Microsoft Lists
B.Microsoft To Do
C.Microsoft Planner
D.Microsoft Viva Engage
AnswerA

Microsoft Lists is designed for tracking and sharing customizable lists with version history, integrations, and reminders.

Why this answer

Microsoft Lists is the correct choice because it provides a shared, customizable list that integrates directly with both Outlook and SharePoint. It allows users to create custom columns, set reminders via Power Automate or column formatting, and track version history for changes, meeting all specified requirements.

Exam trap

The trap here is that candidates often confuse Microsoft Planner's task boards with the structured list and column customization capabilities of Microsoft Lists, overlooking the specific need for custom columns and change history.

How to eliminate wrong answers

Option B is wrong because Microsoft To Do is a personal task management app that lacks shared lists accessible from SharePoint and does not support custom columns or change history tracking. Option C is wrong because Microsoft Planner is designed for team task management with boards and buckets, but it does not offer custom columns or a detailed change history view like Lists does. Option D is wrong because Microsoft Viva Engage is an employee engagement and social networking platform, not a list or task tracking tool, and it cannot create custom columns or track action items with reminders.

Practice this question →
234
MCQhard

An organization has users who frequently collaborate on documents across departments. They want to ensure that when a document is shared with external partners, the external users must authenticate using Azure AD credentials and cannot download or print the document. Which combination of Microsoft 365 features should they use?

A.Microsoft Teams guest access and Microsoft Defender for Cloud Apps session policies
B.OneDrive sharing settings with 'Anyone' links and Microsoft Purview Data Loss Prevention
C.SharePoint external sharing with 'Specific people' and Microsoft Purview Information Protection with 'View Only' permission
D.SharePoint anonymous sharing links and Microsoft Purview Sensitivity Labels
AnswerC

Specific people requires authentication; View Only restricts download/print.

Why this answer

Option C is correct because SharePoint 'Specific people' external sharing restricts access to explicitly invited users who must authenticate with Azure AD credentials, while Microsoft Purview Information Protection's 'View Only' permission prevents downloading, printing, and copying of the document. This combination meets both requirements: enforced authentication and restricted document actions.

Exam trap

The trap here is that candidates often confuse SharePoint external sharing settings (which control access) with Microsoft Purview Information Protection (which controls usage rights), and mistakenly think that simply restricting sharing to 'Specific people' alone prevents download/print, or that Sensitivity Labels alone enforce authentication.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams guest access does not inherently prevent download or print actions; it relies on additional configuration, and Microsoft Defender for Cloud Apps session policies are for monitoring and controlling app access, not for granular document-level restrictions like view-only. Option B is wrong because 'Anyone' links allow anonymous access without Azure AD authentication, and Microsoft Purview Data Loss Prevention (DLP) is designed to prevent data leaks via policies, not to enforce per-document view-only permissions. Option D is wrong because SharePoint anonymous sharing links do not require Azure AD authentication, and Microsoft Purview Sensitivity Labels can apply encryption but do not natively enforce a 'View Only' permission that blocks download and print without additional configuration.

Practice this question →
235
Multi-Selectmedium

Which THREE Microsoft 365 apps are part of the Microsoft Viva employee experience platform?

Select 3 answers
A.Viva Insights
B.Viva Engage
C.Viva Connections
D.Microsoft Teams
E.Viva Learning
AnswersA, C, E

Viva Insights provides productivity and wellbeing analytics.

Why this answer

Viva Insights is correct because it is a core module of the Microsoft Viva employee experience platform that provides data-driven, privacy-protected insights to help individuals and managers improve productivity, wellbeing, and work-life balance. It leverages Microsoft Graph data to analyze collaboration patterns and deliver actionable recommendations directly within Microsoft Teams and the Viva Insights app.

Exam trap

The trap here is that candidates often confuse Microsoft Teams (the platform) with the Viva modules that run within it, leading them to select Teams as a Viva component instead of recognizing that Viva Connections, Viva Insights, and Viva Learning are the three core apps that make up the employee experience platform.

Practice this question →
236
MCQmedium

A user reports that Microsoft Teams meetings frequently drop audio. During troubleshooting, you discover that the user's network has high jitter and packet loss. Which Microsoft 365 service should you use to analyze the user's connection quality and identify the root cause?

A.Microsoft Defender XDR
B.Microsoft 365 Network Connectivity Center
C.Microsoft Teams admin center
D.Microsoft Intune
AnswerB

Provides network performance analytics and troubleshooting for Microsoft 365 services.

Why this answer

B is correct because Microsoft 365 Network Connectivity Center is specifically designed to analyze network performance metrics like jitter, packet loss, and latency in real time. It provides detailed insights into connection quality between a user's device and Microsoft 365 services, enabling you to pinpoint the root cause of audio drops in Teams meetings.

Exam trap

The trap here is that candidates often confuse the Microsoft Teams admin center's call analytics (which shows per-user call quality) with the Network Connectivity Center's broader network-level diagnostics, leading them to pick option C instead of B.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender XDR is a security solution for threat detection and response, not a network performance analysis tool. Option C is wrong because the Microsoft Teams admin center provides call analytics and quality dashboards for individual users, but it does not offer the broader network-level analysis and diagnostic tools that Network Connectivity Center provides. Option D is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service, focused on device compliance and app policies, not network connectivity analysis.

Practice this question →
237
MCQmedium

While preparing a Microsoft 365 adoption plan, a consultant is asked to manage leads, opportunities, customer accounts, and sales processes. Microsoft 365 app or service is the best fit?

A.Dynamics 365 Sales
B.Microsoft Planner
C.Microsoft Forms
D.Microsoft Purview Audit
AnswerA

Dynamics 365 Sales provides CRM capabilities for sales teams.

Why this answer

Dynamics 365 Sales is purpose-built for managing leads, opportunities, customer accounts, and sales processes as part of the Microsoft 365 ecosystem. It provides a customer relationship management (CRM) platform with pipeline management, sales automation, and analytics, directly aligning with the consultant's requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task management features with CRM functionality, or assume Microsoft Forms can handle sales processes due to its data collection capabilities, but neither provides the structured pipeline and account management required for sales.

How to eliminate wrong answers

Option B is wrong because Microsoft Planner is a task management tool for organizing work among teams, not designed for CRM functions like lead or opportunity tracking. Option C is wrong because Microsoft Forms is a survey and data collection tool, lacking sales process management capabilities. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user activities, unrelated to sales pipeline or customer account management.

Practice this question →
238
MCQmedium

A company uses Microsoft Viva Insights to improve employee wellbeing. The HR team wants to identify which teams frequently work after 8 PM. Which Viva Insights feature should they use?

A.Viva Insights
B.Viva Learning
C.Viva Topics
D.Viva Connections
AnswerA

Viva Insights provides analytics on collaboration patterns, including after-hours work.

Why this answer

Microsoft Viva Insights provides personalized wellbeing and productivity analytics, including the ability to analyze collaboration patterns such as after-hours work. The HR team can use the 'Workplace Analytics' feature within Viva Insights to query and report on teams that frequently work after 8 PM, leveraging data from Microsoft 365 signals like email and meeting timestamps.

Exam trap

The trap here is that candidates may confuse Viva Insights with Viva Connections because both appear in the 'employee experience' category, but Connections is a portal for content delivery, not for analyzing behavioral data like after-hours work patterns.

How to eliminate wrong answers

Option B is wrong because Viva Learning is a centralized learning hub for accessing training content and courses, not for analyzing employee work patterns or wellbeing metrics. Option C is wrong because Viva Topics uses AI to automatically organize content into knowledge topics (like project or product pages) and does not provide any analytics on work hours or collaboration behavior. Option D is wrong because Viva Connections is a personalized dashboard for company news, resources, and tasks, but it lacks the deep behavioral analytics and querying capabilities needed to identify after-hours work patterns.

Practice this question →
239
MCQmedium

A marketing team needs to create a dashboard that shows real-time sales data from Dynamics 365 and customer feedback from social media. Which Microsoft 365 service should they use to build this dashboard?

A.Microsoft Power BI
B.Microsoft Power Automate
C.Microsoft SharePoint
D.Microsoft Power Apps
AnswerA

Power BI can pull data from Dynamics 365 and social media to build real-time dashboards.

Why this answer

Microsoft Power BI is the correct service because it is designed to connect to multiple data sources, including Dynamics 365 for real-time sales data and social media APIs for customer feedback, and then create interactive, real-time dashboards. It provides built-in connectors, real-time streaming datasets, and the ability to publish dashboards for team-wide access, making it the ideal tool for this marketing requirement.

Exam trap

The trap here is that candidates often confuse Power Automate or Power Apps as dashboard-building tools because they are part of the Power Platform, but only Power BI provides the dedicated data visualization and real-time analytics capabilities required for this scenario.

How to eliminate wrong answers

Option B (Microsoft Power Automate) is wrong because it is a workflow automation tool that triggers actions based on events, not a dashboard or visualization service; it cannot natively render charts or graphs. Option C (Microsoft SharePoint) is wrong because it is a document management and collaboration platform that can host web parts but lacks native real-time data visualization and direct integration with Dynamics 365 and social media APIs for live dashboards. Option D (Microsoft Power Apps) is wrong because it is a low-code application development platform for building custom apps, not a business intelligence tool for creating dashboards; while it can display data, it does not provide the dedicated analytics, real-time streaming, and visualization capabilities of Power BI.

Practice this question →
240
MCQhard

A company wants to implement a solution where employees can ask questions in natural language and get answers from internal knowledge bases. Which Microsoft 365 service should they use?

A.Copilot for Microsoft 365
B.Microsoft Search
C.Bing Chat Enterprise
D.Microsoft Viva Answers
AnswerA

Copilot can answer natural language questions using enterprise data.

Why this answer

Option B is correct because Copilot for Microsoft 365 can answer questions using enterprise data. Option A is wrong because Viva Answers is a Q&A feature but less comprehensive. Option C is wrong because Search is basic.

Option D is wrong because Bing Chat Enterprise is for web search.

Practice this question →
241
MCQhard

You are designing a solution for a global company that needs to store documents in a central location with granular permission control. Which service should you recommend?

A.Microsoft Teams
B.OneDrive for Business
C.Exchange Online
D.SharePoint
AnswerD

SharePoint provides central storage with granular permissions.

Why this answer

SharePoint is the correct choice because it is designed as a centralized document management and collaboration platform that supports granular permission control at the site, library, folder, and item levels. Unlike other services, SharePoint allows administrators to define unique permissions using SharePoint groups or Azure AD security groups, enabling precise access management for a global company's document storage needs.

Exam trap

The trap here is that candidates often confuse OneDrive for Business with SharePoint, thinking OneDrive can serve as a central document repository, but OneDrive is designed for personal storage and lacks the centralized administration and granular permission inheritance that SharePoint provides for enterprise document management.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration workspace that stores files in the underlying SharePoint site for each team, but it does not provide native granular permission control beyond team-level settings; permissions are inherited from SharePoint. Option B is wrong because OneDrive for Business is a personal cloud storage service intended for individual file storage and sharing, not for centralized document storage with granular permission control across an organization; it lacks site-level administration and advanced permission inheritance features. Option C is wrong because Exchange Online is an email and calendaring service that stores mailbox data, not documents; it does not offer document storage or permission management for files.

Practice this question →
242
MCQeasy

A department asks for the Microsoft 365 service best suited for enterprise video publishing and town hall recordings. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Purview Compliance Manager
B.Microsoft Stream on SharePoint
C.Microsoft Entra Privileged Identity Management
D.Microsoft Defender for Endpoint
AnswerB

Stream built on SharePoint supports enterprise video experiences.

Why this answer

Microsoft Stream on SharePoint is the correct service because it provides enterprise-grade video publishing and live event capabilities, including town hall recordings, directly integrated with SharePoint and Microsoft Teams. It leverages SharePoint's storage and permissions model, eliminating the need for custom operational scripts for video management.

Exam trap

The trap here is that candidates may confuse Microsoft Stream (classic) with the new Stream on SharePoint, or incorrectly associate video features with compliance or security services like Purview or Defender.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a compliance and risk management tool for assessing regulatory compliance, not a video publishing or recording service. Option C is wrong because Microsoft Entra Privileged Identity Management manages just-in-time privileged access to Azure AD roles, not video content. Option D is wrong because Microsoft Defender for Endpoint is an endpoint security solution for threat detection and response, not a video platform.

Practice this question →
243
MCQhard

You are configuring Microsoft Entra ID Protection policies for your organization. The exhibit shows a configuration snippet. Which behavior will occur when a user signs in from a known malicious IP address?

A.The user's account will be disabled.
B.The user will be prompted to change their password.
C.The sign-in will be allowed but a multi-factor authentication challenge will be required.
D.The sign-in will be blocked immediately.
AnswerD

Sign-in risk policy blocks high-risk sign-ins.

Why this answer

Option A is correct because the sign-in risk policy is enabled with risk level 'high' and blockAccess set to true, so a sign-in from a malicious IP (high risk) will be blocked. Option B is wrong because the user risk policy does not block (blockAccess false). Option C is wrong because the policy is configured to block, not just require MFA.

Option D is wrong because no password reset is triggered.

Practice this question →
244
Multi-Selecthard

Which TWO Microsoft 365 services are primarily used for business process automation?

Select 2 answers
A.Power BI
B.Power Automate
C.Power Virtual Agents
D.Power Apps
E.Microsoft Lists
AnswersB, D

Automates workflows.

Why this answer

Power Automate is correct because it is Microsoft's dedicated low-code workflow automation service that enables users to create automated processes between apps and services, such as triggering actions based on events or scheduling repetitive tasks. It directly addresses business process automation by using triggers and actions to streamline operations without manual intervention.

Exam trap

The trap here is that candidates often confuse Power Automate with Power Apps, but Power Apps is for building custom applications (UI and logic), while Power Automate is specifically for workflow automation; the question asks for business process automation, which is the core function of Power Automate, not Power Apps.

Practice this question →
245
MCQeasy

An organization needs to securely store and manage user identities for Microsoft 365. Which Microsoft service should they use?

A.Microsoft Entra ID
B.Microsoft Purview
C.Microsoft Defender for Cloud Apps
D.Microsoft Intune
AnswerA

Microsoft Entra ID is the identity and access management service for Microsoft 365.

Why this answer

Microsoft Entra ID (formerly Azure AD) is the correct choice because it is Microsoft's cloud-based identity and access management service, specifically designed to store and manage user identities for Microsoft 365. It provides authentication, single sign-on (SSO), and conditional access policies, ensuring secure access to Microsoft 365 resources. Other options focus on data protection, security monitoring, or device management, not identity storage.

Exam trap

The trap here is that candidates often confuse Microsoft Purview (data compliance) or Defender for Cloud Apps (security monitoring) with identity management, but only Microsoft Entra ID provides the core directory service for storing and authenticating user identities in Microsoft 365.

How to eliminate wrong answers

Option B (Microsoft Purview) is wrong because it is a data governance and compliance solution for managing sensitive data across environments, not for storing or managing user identities. Option C (Microsoft Defender for Cloud Apps) is wrong because it is a cloud access security broker (CASB) that monitors and controls cloud app usage, not an identity store. Option D (Microsoft Intune) is wrong because it is a mobile device management (MDM) and mobile application management (MAM) service for managing devices and apps, not for identity management.

Practice this question →
246
MCQhard

A company uses Microsoft 365 E5 and wants to automatically classify sensitive emails containing credit card numbers and then apply encryption. Which solution should they use in combination with Microsoft Purview?

A.Microsoft 365 Copilot
B.Microsoft Intune
C.Microsoft Purview Information Protection
D.Microsoft Defender for Office 365
AnswerC

It provides auto-labeling and encryption.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) enables automatic classification of sensitive data, such as credit card numbers, using built-in sensitive information types and exact data match (EDM) classifiers. When combined with sensitivity labels, it can automatically apply encryption (e.g., via Azure Rights Management) to emails containing that data, meeting the requirement without additional services.

Exam trap

The trap here is that candidates often confuse Microsoft Purview Information Protection with Microsoft Defender for Office 365, assuming threat protection includes data classification, when in fact Defender focuses on inbound/outbound threats and not on content-based sensitivity labels or encryption policies.

How to eliminate wrong answers

Option A is wrong because Microsoft 365 Copilot is an AI-powered productivity assistant that helps with content generation and summarization, not with data classification or encryption policies. Option B is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution focused on device compliance and app protection, not on email content classification or encryption. Option D is wrong because Microsoft Defender for Office 365 is a security solution that protects against threats like phishing, malware, and spam, but it does not provide native automatic classification or encryption of sensitive content based on data patterns like credit card numbers.

Practice this question →
247
MCQmedium

A company deploys Microsoft 365 Business Premium. The IT team wants to enable employees to sign in using a mobile app without passwords. Which app should they configure?

A.Microsoft Intune
B.Microsoft Entra ID
C.Microsoft Copilot
D.Microsoft Authenticator
AnswerD

Correct. Microsoft Authenticator enables passwordless sign-in.

Why this answer

Microsoft Authenticator is the correct app because it enables passwordless sign-in for Microsoft 365 Business Premium users via FIDO2-based phone sign-in or number matching. It allows employees to authenticate using biometrics or a PIN, eliminating the need for a password during sign-in.

Exam trap

The trap here is that candidates may confuse Microsoft Entra ID (the identity provider that enables passwordless authentication) with the actual user-facing app (Microsoft Authenticator) that performs the sign-in, leading them to select Entra ID instead of the correct app.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service, not an authentication app; it does not directly provide passwordless sign-in capabilities. Option B is wrong because Microsoft Entra ID (formerly Azure AD) is the identity and access management service that supports passwordless authentication methods, but it is not the app employees use to sign in; the app that facilitates the actual sign-in process is Microsoft Authenticator. Option C is wrong because Microsoft Copilot is an AI-powered productivity assistant integrated into Microsoft 365 apps, not an authentication app; it has no role in passwordless sign-in.

Practice this question →
248
MCQhard

An organization needs to enforce that all external emails are automatically encrypted before delivery to recipients. Which feature should they configure in Microsoft 365?

A.S/MIME
B.Microsoft Purview Data Loss Prevention
C.Exchange Online mail flow rules
D.Microsoft Purview sensitivity labels
AnswerC

Mail flow rules can automatically encrypt messages sent to external recipients.

Why this answer

Exchange Online mail flow rules (also known as transport rules) can be configured to automatically encrypt all external emails by applying Office 365 Message Encryption (OME) based on conditions such as recipient domain or sender address. This allows the organization to enforce encryption for all outbound messages without requiring user intervention, meeting the stated requirement.

Exam trap

The trap here is that candidates often confuse Microsoft Purview sensitivity labels or DLP policies as the direct mechanism for automatic encryption, when in fact mail flow rules are the correct transport-level feature to enforce encryption on all external emails without relying on user action or client-side configuration.

How to eliminate wrong answers

Option A is wrong because S/MIME is a client-side encryption method that requires manual certificate management and configuration on each user's device, and it cannot be enforced automatically for all external emails at the transport level. Option B is wrong because Microsoft Purview Data Loss Prevention (DLP) is designed to detect and prevent the sharing of sensitive information, but it does not natively encrypt emails; it can trigger encryption via a mail flow rule, but the DLP policy itself does not perform encryption. Option D is wrong because Microsoft Purview sensitivity labels apply classification and protection (including encryption) to content, but they require user or automated labeling and are not designed to automatically encrypt all external emails based solely on the recipient being external; they are typically applied at the client or via auto-labeling policies, not as a blanket transport rule for all external messages.

Practice this question →
249
MCQmedium

Refer to the exhibit. You are reviewing a Conditional Access policy in Microsoft Entra ID. What will this policy do?

A.Allows access but logs the sign-in risk
B.Requires multi-factor authentication for high-risk sign-ins
C.Blocks access to all cloud apps when sign-in risk is high
D.Blocks access to Office 365 apps when the sign-in risk is high
AnswerD

The policy blocks high-risk sign-ins for Office 365.

Why this answer

The exhibit shows a Conditional Access policy configured with the condition 'Sign-in risk: High' and the control 'Block access'. This combination means that when Microsoft Entra ID detects a high-risk sign-in (e.g., from an anonymous IP address or compromised credentials), access to the targeted cloud apps is denied. The policy specifically targets Office 365 apps (as indicated in the 'Cloud apps or actions' assignment), so it blocks access to those apps when the sign-in risk is high.

Exam trap

The trap here is that candidates often confuse 'Block access' with 'Require MFA' or assume the policy applies to all cloud apps, when the exhibit clearly shows the scope is limited to Office 365 apps.

How to eliminate wrong answers

Option A is wrong because the policy is set to 'Block access', not 'Grant access' with a session control to log risk; logging sign-in risk alone does not block access. Option B is wrong because the policy uses 'Block access' as the control, not 'Require multi-factor authentication'; MFA would be a grant control, not a block. Option C is wrong because the policy targets 'Office 365' apps specifically, not 'All cloud apps'; the scope is limited to the selected apps.

Practice this question →
250
MCQmedium

A project team uses Microsoft Teams and wants to create a shared space where they can track tasks, deadlines, and assign work items without leaving Teams. Which Microsoft 365 app should be integrated into Teams for this purpose?

A.Microsoft Planner
B.Microsoft Project Online
C.Microsoft To Do
D.Microsoft Lists
AnswerA

Planner provides collaborative task tracking and can be added as a tab in Teams.

Why this answer

Microsoft Planner is the correct choice because it provides a lightweight, Kanban-style task management solution that integrates directly into Microsoft Teams via the Planner tab. This allows the project team to create, assign, and track tasks with deadlines and progress indicators without leaving the Teams interface, fulfilling the requirement for a shared workspace for work items.

Exam trap

The trap here is that candidates often confuse Microsoft To Do (personal tasks) with Planner (team tasks) or assume Microsoft Lists can handle task tracking without realizing it lacks native assignment and Kanban features, leading them to choose an app that does not meet the shared task management requirement.

How to eliminate wrong answers

Option B is wrong because Microsoft Project Online is a full-scale project management tool for complex scheduling, resource management, and Gantt charts, which is overkill for simple task tracking and requires additional licensing and a separate web interface, not a native Teams tab. Option C is wrong because Microsoft To Do is a personal task management app designed for individual productivity and lacks shared team views, assignment capabilities, and deadline tracking across multiple users. Option D is wrong because Microsoft Lists is a data-tracking and information-management app for creating custom lists (e.g., issue trackers, inventories), but it does not provide built-in task assignment, Kanban boards, or deadline tracking out of the box without additional customization.

Practice this question →
251
MCQeasy

A user reports that they cannot access their Microsoft 365 email on their mobile device. The user can access Outlook on the web. Which Microsoft 365 app should the administrator check to verify the user's mobile device is compliant?

A.Microsoft Intune
B.Microsoft Defender for Office 365
C.Microsoft Entra ID
D.Microsoft Purview
AnswerA

Intune manages device compliance and can block access if the device is non-compliant.

Why this answer

Microsoft Intune is the correct answer because it is the mobile device management (MDM) and mobile application management (MAM) component within Microsoft 365. When a user cannot access email on a mobile device but can via Outlook on the web, the issue is likely a device compliance policy blocking access. Intune enforces conditional access policies by checking device compliance (e.g., encryption, jailbreak status, minimum OS version) before allowing Exchange Online connectivity.

Exam trap

The trap here is that candidates confuse Microsoft Entra ID (which handles conditional access policies) with Intune (which actually performs the device compliance check and reports the status to Entra ID).

How to eliminate wrong answers

Option B is wrong because Microsoft Defender for Office 365 is a security service focused on protecting against email threats like phishing, malware, and spam, not on device compliance or mobile access policies. Option C is wrong because Microsoft Entra ID (formerly Azure AD) provides identity and access management, including conditional access policies, but it does not directly verify device compliance; it relies on Intune to report device compliance status. Option D is wrong because Microsoft Purview is a compliance and data governance solution covering data loss prevention, eDiscovery, and auditing, not device management or compliance enforcement.

Practice this question →
252
Multi-Selecthard

Contoso Ltd. is a medium-sized company with 2,000 users. They use Microsoft 365 E5 and have recently deployed Microsoft Teams for collaboration. The IT department has received complaints that external partners (guests) can see internal team names and member lists in the Teams directory. The compliance team requires that external guests must only see teams they are directly added to, and they must not be able to search for other teams or see internal team members who are not members of the same team. Additionally, the HR team wants to use a custom app in Teams that allows employees to submit leave requests, and this app must be available to all employees without requiring them to install anything manually. The IT admin needs to configure Teams settings to meet these requirements. Which two actions should the admin take? (Choose two. Each correct answer is part of the solution.)

Select 2 answers
A.Disable 'Show all teams' in the Teams admin center to prevent guests from seeing teams they are not members of.
B.Create a Teams app setup policy that pins the leave request app for all users.
C.Block all external access in Teams admin center to prevent guests from joining.
D.Configure external sharing settings in SharePoint admin center to limit guest access.
E.Enable external access in Teams admin center to allow guests to communicate with internal users.
AnswersA, B

This setting controls team discovery for guests.

Why this answer

Option A is correct because disabling 'Show all teams' in the Teams admin center (under Teams settings) prevents guests from seeing teams they are not members of in the Teams directory. This directly addresses the compliance requirement that external guests must only see teams they are directly added to and cannot search for other teams or see internal team members outside their own team.

Exam trap

The trap here is confusing 'external access' (federation for chat/calling) with 'guest access' (B2B collaboration for team membership), leading candidates to select options that manage federation settings instead of the specific Teams directory visibility control.

Practice this question →
253
Matchingmedium

Match each Microsoft 365 service to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Email and calendaring

Document management and intranet

Chat, meetings, and collaboration

Personal cloud storage and file sync

Why these pairings

Each service focuses on a specific collaboration or productivity area.

Practice this question →
254
MCQeasy

A team of financial analysts needs to collaboratively build a complex budget model that includes data from multiple sources. They require real-time co-authoring, advanced formulas, and the ability to create custom charts. Which Microsoft 365 app is best suited for this task?

A.Microsoft Word
B.Microsoft Excel
C.Microsoft PowerPoint
D.Microsoft OneNote
AnswerB

Correct. Excel offers powerful formulas, charting, and real-time collaboration, making it ideal for budget modeling.

Why this answer

Microsoft Excel is the correct choice because it is designed for complex numerical modeling with advanced formulas, real-time co-authoring via OneDrive or SharePoint, and custom chart creation. The team's requirements for multi-source data integration, collaborative editing, and analytical visualization align directly with Excel's core capabilities, unlike the other apps which lack these features.

Exam trap

The trap here is that candidates may confuse the collaborative editing features of Word or OneNote with the specialized data analysis and formula capabilities required for budget modeling, overlooking Excel's unique strength in handling complex numerical computations and real-time co-authoring for spreadsheets.

How to eliminate wrong answers

Option A is wrong because Microsoft Word is a word processor optimized for document creation and text formatting, not for numerical analysis, advanced formulas, or custom charting. Option C is wrong because Microsoft PowerPoint is a presentation tool for slideshows, lacking the formula engine and data manipulation features needed for budget modeling. Option D is wrong because Microsoft OneNote is a digital note-taking app with limited formula support and no native charting or real-time co-authoring for complex spreadsheets.

Practice this question →
255
MCQeasy

An HR manager needs to collect feedback from employees about a new wellness program. The manager wants to create a simple survey with multiple-choice questions and have the responses automatically visualized in charts. Which Microsoft 365 app is best suited for this task?

A.Microsoft Excel
B.Microsoft Forms
C.Microsoft Word
D.Microsoft Teams
AnswerB

Forms provides easy survey creation and automatic response visualization.

Why this answer

Microsoft Forms is specifically designed for creating surveys, quizzes, and polls with automatic response collection and built-in chart visualization. It allows the HR manager to quickly add multiple-choice questions and instantly see aggregated results as charts without any manual setup.

Exam trap

The trap here is that candidates may confuse Microsoft Teams as the correct answer because they know surveys can be created within Teams, but the question asks for the app best suited for the task, which is Microsoft Forms—the dedicated survey tool that Teams integrates with.

How to eliminate wrong answers

Option A is wrong because Microsoft Excel is a spreadsheet application for data analysis and manual chart creation, not a survey tool; it lacks native survey creation and automatic response visualization. Option C is wrong because Microsoft Word is a word processing application for document creation, not for building interactive surveys or generating charts. Option D is wrong because Microsoft Teams is a collaboration platform that can host a Forms tab or use the Forms app, but it is not the primary survey creation tool; the best-suited app for creating the survey itself is Microsoft Forms.

Practice this question →
256
MCQmedium

A marketing department uses Microsoft 365 Copilot to generate content. The compliance officer is concerned about data leakage when users interact with Copilot. Which Microsoft Purview feature should the admin implement to prevent sensitive data from being used in Copilot prompts?

A.Microsoft Purview Data Loss Prevention (DLP) for Copilot
B.Microsoft Purview Audit (Standard)
C.Microsoft Purview Information Rights Management (IRM)
D.Microsoft Purview Sensitivity labels
AnswerA

DLP policies can scan and block sensitive data in Copilot interactions.

Why this answer

Microsoft Purview Data Loss Prevention (DLP) for Copilot is the correct feature because it specifically inspects and blocks sensitive data (e.g., credit card numbers, PII) from being included in Copilot prompts or generated content. DLP policies can be applied to Copilot interactions to prevent data leakage by evaluating the content in real time against sensitive information types and enforcing actions like blocking or warning the user.

Exam trap

The trap here is that candidates often confuse sensitivity labels (which classify and protect static content) with DLP (which actively monitors and blocks data in motion), leading them to choose Option D instead of the correct preventive control.

How to eliminate wrong answers

Option B (Microsoft Purview Audit (Standard)) is wrong because it only logs user activities for compliance review but does not actively prevent sensitive data from being used in prompts; it is a detective control, not a preventive one. Option C (Microsoft Purview Information Rights Management (IRM)) is wrong because it protects content after it is created by restricting access and usage rights (e.g., preventing forwarding or printing), but it does not inspect or block data at the point of prompt entry in Copilot. Option D (Microsoft Purview Sensitivity labels) is wrong because they classify and protect data by applying encryption or markings, but they do not provide real-time inspection or blocking of sensitive data in Copilot prompts; labels are applied to documents and emails, not to dynamic prompt content.

Practice this question →
257
MCQeasy

A sales team needs to create a shared workspace where they can store customer documents, collaborate on a lead list, track follow-ups on a shared calendar, and hold video meetings with customers. Which Microsoft 365 service provides all these capabilities in a single, integrated experience?

A.Microsoft Viva Engage
B.Microsoft Teams
C.SharePoint Online
D.OneNote
AnswerB

Teams combines chat, document collaboration (via SharePoint), a shared calendar, and video meetings (via Microsoft Teams Meetings), making it the ideal integrated workspace for sales teams.

Why this answer

Microsoft Teams is the correct answer because it provides a single, integrated workspace that combines persistent chat, file storage (via SharePoint), collaborative editing on lists (via SharePoint or Planner), a shared calendar, and built-in video meetings. This eliminates the need to switch between separate apps for each task, fulfilling all the sales team's requirements in one experience.

Exam trap

The trap here is that candidates often pick SharePoint Online because they associate it with document storage and lists, forgetting that Teams integrates those features with video meetings and a shared calendar, making it the single, integrated solution the question explicitly requires.

How to eliminate wrong answers

Option A is wrong because Microsoft Viva Engage is primarily a social networking and employee engagement tool (formerly Yammer), not designed for document storage, lead list collaboration, shared calendars, or video meetings. Option C is wrong because SharePoint Online provides document storage and list collaboration, but lacks native video meeting capabilities and a shared calendar for tracking follow-ups without additional integration. Option D is wrong because OneNote is a digital note-taking app that supports collaboration on notes but does not offer document storage, lead list management, a shared calendar, or video meeting functionality.

Practice this question →
258
MCQhard

Your organization, Contoso Ltd., uses Microsoft 365 E5 licenses and has 10,000 users. The company is planning to deploy Microsoft Copilot for Microsoft 365 to all users. The IT department has identified the following requirements: 1. Users must be able to use Copilot across Microsoft Teams, Word, Excel, PowerPoint, and Outlook. 2. Copilot must be able to access user data from Exchange Online, SharePoint Online, and Microsoft Graph. 3. The deployment must comply with the company's data residency policy, which requires that all data processed by Copilot remains within the European Union (EU). 4. The company wants to use a phased rollout, starting with a pilot group of 500 users. Which configuration should the IT administrator implement to meet these requirements?

A.Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in Microsoft Purview, create a data residency policy that restricts data to the EU.
B.Enable Microsoft Copilot for Microsoft 365 in the Microsoft 365 admin center for all users, then ask each user to customize their Copilot permissions in Graph.
C.Assign Microsoft Copilot for Microsoft 365 licenses to the pilot group, and in the Microsoft 365 admin center, configure the data storage location to 'EU'.
D.Create a separate Microsoft 365 tenant in the EU region, move pilot users to that tenant, and assign Copilot licenses there.
AnswerC

Correct approach: licenses + data residency setting in admin center.

Why this answer

Option C is correct because the Microsoft 365 admin center provides a tenant-level setting to configure the data storage location for Microsoft Copilot for Microsoft 365, ensuring all processed data remains within the EU. Assigning licenses to the pilot group enables the phased rollout, while the data residency setting satisfies the compliance requirement without needing a separate tenant or manual user configuration.

Exam trap

The trap here is that candidates may confuse Microsoft Purview's compliance features with the Copilot-specific data residency setting in the Microsoft 365 admin center, or assume that a separate tenant is required for regional data residency, when in fact a single tenant can enforce EU data residency via the admin center configuration.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview does not offer a data residency policy for Copilot; data residency for Copilot is configured in the Microsoft 365 admin center, not Purview. Option B is wrong because enabling Copilot for all users violates the phased rollout requirement, and asking users to customize permissions in Graph is impractical and not how Copilot data access is controlled—access is managed via Microsoft Graph permissions at the tenant level. Option D is wrong because creating a separate tenant is unnecessary and overly complex; the data residency requirement can be met within the existing tenant by configuring the storage location in the admin center, and moving users to a new tenant disrupts operations and licensing.

Practice this question →
259
Multi-Selecthard

Which THREE Microsoft 365 services can be used to enforce data classification and protection?

Select 3 answers
A.Microsoft Defender for Cloud Apps
B.Microsoft Purview Data Loss Prevention (DLP)
C.Microsoft Purview Information Protection
D.Microsoft Intune
E.Microsoft Entra ID
AnswersA, B, C

It can apply classification labels and enforce DLP policies on cloud apps.

Why this answer

Microsoft Defender for Cloud Apps (A) is correct because it acts as a Cloud Access Security Broker (CASB) that can enforce data classification and protection by applying policies to control data in transit and at rest across cloud applications. It can automatically classify sensitive data using built-in DLP engines and enforce actions like blocking downloads or applying encryption based on content inspection.

Exam trap

The trap here is that candidates often confuse Microsoft Intune's device compliance policies with data classification and protection, or mistakenly think Entra ID's conditional access policies enforce data protection directly, when in fact they only control access based on identity and device state.

Practice this question →
260
MCQhard

Your company is deploying Microsoft 365 Copilot and wants to ensure that sensitive data in emails and documents is not inadvertently exposed via Copilot responses. Which Microsoft 365 capability should you implement?

A.Microsoft Purview Sensitivity Labels
B.Microsoft Defender for Cloud Apps
C.Microsoft Purview Customer Lockbox
D.Microsoft Purview Data Loss Prevention
AnswerD

DLP policies can prevent sensitive data from being included in Copilot responses.

Why this answer

Microsoft Purview Data Loss Prevention (DLP) is the correct choice because it is specifically designed to identify, monitor, and automatically protect sensitive data (e.g., credit card numbers, PII, or custom patterns) across Microsoft 365 services, including emails and documents. When integrated with Microsoft 365 Copilot, DLP policies can prevent Copilot from including sensitive information in its responses by enforcing real-time content checks and blocking or warning users before exposure occurs.

Exam trap

The trap here is that candidates often confuse Sensitivity Labels (which apply persistent protection) with DLP (which enforces real-time actions), leading them to choose A, even though labels alone cannot block Copilot from surfacing sensitive data in responses.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Sensitivity Labels classify and protect data with encryption and visual markings, but they do not actively monitor or block data in Copilot responses—they require user or automated labeling, not real-time content inspection. Option B is wrong because Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB) focused on shadow IT discovery, app permissions, and session controls for third-party cloud apps, not on preventing data leakage within Microsoft 365 Copilot responses. Option C is wrong because Microsoft Purview Customer Lockbox provides a controlled access approval process for Microsoft support engineers to access your data, but it has no role in scanning or blocking sensitive content in Copilot outputs.

Practice this question →
261
MCQmedium

A service owner is comparing Microsoft 365 capabilities and needs to maintain a personal checklist that syncs across devices and integrates with Outlook tasks. Microsoft 365 app or service is the best fit?

A.Microsoft Forms
B.Microsoft To Do
C.Microsoft Purview Audit
D.Microsoft Planner
AnswerB

To Do is designed for personal task lists and integrates with Outlook tasks.

Why this answer

Microsoft To Do is the best fit because it provides a personal checklist that syncs across devices via Exchange Online and integrates natively with Outlook tasks. This allows the service owner to manage tasks from any device and see them directly within the Outlook task pane, fulfilling both requirements precisely.

Exam trap

The trap here is that candidates often confuse Microsoft Planner with Microsoft To Do because both involve tasks, but Planner is designed for team collaboration and lacks personal checklist sync with Outlook tasks, while To Do is the correct personal task management tool with direct Outlook integration.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz creation tool, not a task management or checklist app; it lacks sync with Outlook tasks. Option C is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities, not a personal task or checklist tool. Option D is wrong because Microsoft Planner is a team-based project management app that organizes work into plans and buckets, but it does not provide a personal checklist that syncs with Outlook tasks; it focuses on collaborative assignments rather than individual task lists.

Practice this question →
262
MCQhard

A security analyst runs the above KQL query in Microsoft 365 Defender. What is the primary purpose of this query?

A.Show the number of phishing clicks per user.
B.Identify the top 10 sender domains that were blocked in the last week.
C.List all emails that were allowed despite containing malware.
D.Count emails that failed SPF/DKIM/DMARC.
AnswerB

Correct. The query summarizes blocked emails by domain and shows top 10.

Why this answer

The KQL query uses `EmailEvents` and summarizes by `SenderMailFromDomain`, then sorts by `Count` descending and takes the top 10. The `where Timestamp > ago(7d)` filters for the last week, and the query does not filter on any action like `Phish` or `Allowed`; it simply counts all email events grouped by sender domain. The primary purpose is to identify the top 10 sender domains that were blocked (or processed) in the last week, as the query counts all events without a specific action filter, but in the context of Microsoft 365 Defender, this is typically used to surface high-volume domains that may be blocked or suspicious.

Exam trap

The trap here is that candidates assume the query is filtering for blocked or malicious emails, but without a `where` clause on `Action` or `Verdict`, it counts all email events, so the primary purpose is simply to show the top sender domains by volume in the last week.

How to eliminate wrong answers

Option A is wrong because the query does not filter on `Phish` or `ClickAction`; it counts all email events by sender domain, not phishing clicks per user. Option C is wrong because the query does not filter on `Allowed` or `Malware` verdicts; it counts all email events without any verdict filter. Option D is wrong because the query does not reference `AuthenticationDetails` or `SPF`, `DKIM`, `DMARC` fields; it only uses `SenderMailFromDomain` and `Timestamp`.

Practice this question →
263
MCQhard

A hospital uses Microsoft 365 E5. They need to archive patient emails for 7 years and enable legal hold for ongoing litigation. Which two Microsoft Purview features should they use? (Select TWO.)

A.Sensitivity labels
B.Retention policies
C.Litigation hold
D.Data Lifecycle Management
E.eDiscovery
AnswerB, C

Correct. Retention policies can archive emails for 7 years.

Why this answer

Retention policies (B) are correct because they allow the organization to define rules that preserve patient emails for a specific duration, such as 7 years, to meet regulatory compliance requirements. Litigation hold (C) is correct because it preserves all mailbox content, including deleted items, in its original state for the duration of ongoing litigation, preventing any alteration or deletion.

Exam trap

The trap here is that candidates often confuse 'Litigation hold' with 'eDiscovery hold' or think that 'Data Lifecycle Management' is a standalone feature in Microsoft Purview, when in fact the correct feature for time-based retention is 'Retention policies' and for legal preservation is 'Litigation hold'.

How to eliminate wrong answers

Option A is wrong because sensitivity labels are used to classify and protect data based on sensitivity (e.g., confidentiality), not to enforce time-based retention or legal holds. Option D is wrong because Data Lifecycle Management is a broader concept that includes retention and deletion policies, but in Microsoft 365, the specific feature for setting retention durations is 'Retention policies' (part of Microsoft Purview), not a separate feature named 'Data Lifecycle Management'. Option E is wrong because eDiscovery is used to search, hold, and export content for legal or investigative purposes, but it does not itself enforce a fixed 7-year retention period; it relies on holds and retention policies to preserve data.

Practice this question →
264
MCQmedium

An organization uses Microsoft Viva Learning to provide training content. They want to ensure that only employees in the Sales department see sales-specific courses. Which feature should they use?

A.Set permissions on the SharePoint site hosting the courses.
B.Configure Viva Connections dashboard to show only Sales courses.
C.Create learning paths and assign them to the Sales department group in Viva Learning.
D.Use Viva Topics to tag courses and let users discover them.
AnswerC

Learning paths can be assigned to specific groups.

Why this answer

Option C is correct because Viva Learning allows administrators to create learning paths and assign them to specific Microsoft 365 groups, such as the Sales department group. This ensures that only members of that group see the assigned sales-specific courses, providing targeted content delivery without affecting other users' views.

Exam trap

The trap here is that candidates often confuse SharePoint permissions (Option A) with Viva Learning's group-based targeting, not realizing that Viva Learning controls visibility through learning path assignments rather than underlying site permissions.

How to eliminate wrong answers

Option A is wrong because setting permissions on the SharePoint site hosting the courses would control access to the site itself, but Viva Learning aggregates content from multiple sources and permissions on the underlying SharePoint site do not directly control visibility within the Viva Learning interface; users could still see the courses listed but be denied access when trying to open them, which is not the same as controlling visibility. Option B is wrong because the Viva Connections dashboard is a personalized entry point to employee resources and news, but it does not have the capability to filter or restrict which courses appear in Viva Learning; it can surface links but cannot enforce course visibility by department. Option D is wrong because Viva Topics uses AI to automatically tag and surface knowledge content, but it is designed for discovery and knowledge management, not for controlling visibility or access to training courses; it cannot restrict who sees specific courses based on department membership.

Practice this question →
265
MCQhard

Refer to the exhibit. An admin creates a Microsoft Purview Data Loss Prevention (DLP) policy rule as shown. When will the rule block access?

A.When a credit card number is detected with high confidence
B.When the document is shared externally
C.When any sensitive information type is detected
D.Never, because the rule is not applied to any location
AnswerA

The condition specifies credit card number with high confidence.

Why this answer

The rule is configured with a condition that triggers when a credit card number is detected with a confidence level of 'high'. The action 'Block access' is set to execute when this condition is met. Therefore, the rule blocks access specifically when a credit card number is detected with high confidence, making option A correct.

Exam trap

The trap here is that candidates may assume the rule blocks access whenever a sensitive information type is detected, overlooking the specific confidence level requirement, or they might think the rule is not applied to any location without verifying the exhibit's location configuration.

How to eliminate wrong answers

Option B is wrong because the rule does not include a condition for external sharing; the condition is solely based on detecting a credit card number, not on the sharing context. Option C is wrong because the rule specifies a particular sensitive information type (credit card number) with a high confidence level, not 'any sensitive information type'. Option D is wrong because the rule is applied to locations (as indicated by the 'Locations' section in the exhibit, which is assumed to be configured, even if not fully shown), and the question states the admin creates the rule, implying it is applied to at least one location.

Practice this question →
266
MCQmedium

A company wants to provide employees with a personal cloud storage solution that syncs files across devices and allows sharing with external partners. Which Microsoft 365 service should they use?

A.Exchange Online
B.OneDrive for Business
C.Microsoft Teams
D.SharePoint Online
AnswerB

OneDrive for Business provides personal cloud storage with sync capabilities and external sharing.

Why this answer

OneDrive for Business provides personal cloud storage that syncs files across devices via the OneDrive sync client and enables secure sharing with external partners through granular permission controls. This directly meets the requirement for individual file storage, cross-device synchronization, and external sharing.

Exam trap

The trap here is that candidates often confuse SharePoint Online's team-based document libraries with OneDrive for Business's personal storage, overlooking that the question explicitly asks for 'personal cloud storage' and 'syncs files across devices'—features unique to OneDrive for Business.

How to eliminate wrong answers

Option A is wrong because Exchange Online is an email and calendaring service, not a cloud storage solution; it lacks file sync and external file-sharing capabilities. Option C is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and channels, not a personal storage service; while files can be shared in Teams, it does not provide per-user personal sync storage. Option D is wrong because SharePoint Online is a document management and collaboration platform for team sites, not a personal cloud storage solution; it is designed for shared team libraries rather than individual file sync across devices.

Practice this question →
267
MCQmedium

An HR manager needs to collect employee feedback on a new policy. They want to create a short survey that anonymizes responses and provides automatic charts summarizing the results. Which Microsoft 365 app is best suited for this task?

A.Microsoft Lists
B.Microsoft Forms
C.Microsoft Sway
D.Microsoft Excel
AnswerB

Forms allows creating surveys quickly, supports anonymous responses, and automatically generates summary charts and real-time results, making it ideal for this scenario.

Why this answer

Microsoft Forms is the correct choice because it is specifically designed for creating surveys and quizzes with built-in anonymous response settings and automatic chart generation. The HR manager can enable 'Record name' to be off for anonymity, and Forms automatically visualizes results with pie charts, bar graphs, and summary data without manual setup.

Exam trap

The trap here is that candidates may confuse Microsoft Lists as a survey tool because it can collect data via forms, but Lists lacks anonymous response settings and automatic charting, which are core to Forms.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data tracking and organization app for managing structured information like inventory or issues, not for creating surveys with automatic chart summaries. Option C is wrong because Microsoft Sway is a digital storytelling and presentation tool for interactive reports and newsletters, lacking survey creation and anonymous response collection. Option D is wrong because Microsoft Excel is a spreadsheet application that requires manual data entry and chart creation, and it does not natively support anonymous survey distribution or automatic result visualization.

Practice this question →
268
Multi-Selecthard

Which THREE Microsoft 365 services are part of the Microsoft Viva employee experience platform?

Select 3 answers
A.Viva Insights
B.Microsoft SharePoint
C.Viva Connections
D.Microsoft Teams
E.Viva Learning
AnswersA, C, E

Viva Insights is a part of Microsoft Viva.

Why this answer

Options A, B, and E are correct. Microsoft Viva includes Viva Connections (employee portal), Viva Insights (wellbeing and productivity analytics), and Viva Learning (learning hub). Option C is wrong because Microsoft Teams is the platform that hosts Viva apps, not a Viva service itself.

Option D is wrong because Microsoft SharePoint is a content management platform, not a Viva service.

Practice this question →
269
MCQmedium

A consulting firm needs a tool to allow customers to schedule appointments with specific consultants online. The tool must show available time slots, send confirmation emails, and allow customers to reschedule. Which Microsoft 365 app should they use?

A.Microsoft Bookings
B.Microsoft Forms
C.Microsoft To Do
D.Microsoft Planner
AnswerA

Correct. Bookings provides a public booking page, automatic email confirmations, and the ability to reschedule.

Why this answer

Microsoft Bookings is the correct app because it is specifically designed for scheduling appointments, showing real-time availability of staff, sending automated confirmation and reminder emails, and allowing customers to self-manage rescheduling or cancellations. It integrates with Exchange Online for calendar synchronization and Teams for virtual meetings, meeting all stated requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Bookings with Microsoft Forms or Planner, assuming any Microsoft 365 app with a calendar or task feature can handle scheduling, but only Bookings provides the dedicated customer-facing booking page and automated confirmation workflow required for external appointment management.

How to eliminate wrong answers

Option B (Microsoft Forms) is wrong because it is a survey and data collection tool, not a scheduling system; it cannot show available time slots or send confirmation emails for appointments. Option C (Microsoft To Do) is wrong because it is a personal task management app focused on to-do lists and reminders, lacking any scheduling or customer-facing booking capabilities. Option D (Microsoft Planner) is wrong because it is a project management tool for team task boards and plans, not designed for external customer appointment scheduling or time slot management.

Practice this question →
270
MCQmedium

A company wants to ensure that sensitive documents in Microsoft SharePoint Online are automatically classified and protected when they contain credit card numbers. Which Microsoft 365 service should they use?

A.Microsoft Purview Compliance Manager
B.Microsoft Purview Audit
C.Microsoft Purview Insider Risk Management
D.Microsoft Purview Information Protection
AnswerD

This service provides automatic classification and labeling of sensitive data.

Why this answer

Microsoft Purview Information Protection (D) enables organizations to automatically classify and protect sensitive documents based on data classification rules. By configuring a sensitive information type for credit card numbers, SharePoint Online can apply sensitivity labels or retention labels to documents containing that pattern, ensuring they are encrypted or restricted as defined by policy.

Exam trap

The trap here is that candidates may confuse Compliance Manager (a compliance posture dashboard) with the actual data classification and protection service, or assume Insider Risk Management handles content classification when it is actually focused on user behavior analytics.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a risk assessment and compliance score tool, not a data classification or protection engine; it does not automatically classify or protect documents based on content. Option B is wrong because Microsoft Purview Audit provides logging and investigation of user and admin activities, not automated classification or protection of sensitive data. Option C is wrong because Microsoft Purview Insider Risk Management focuses on detecting risky user behaviors (e.g., data exfiltration) through analytics and policies, not on automatically classifying or protecting documents based on content patterns like credit card numbers.

Practice this question →
271
Multi-Selectmedium

A company is planning to migrate its collaboration tools to Microsoft 365. They need a solution for real-time document co-authoring, instant messaging, and video conferencing, all in one integrated platform. Which two Microsoft 365 services should they use? (Choose two.)

Select 2 answers
A.Microsoft SharePoint
B.Microsoft Teams
C.Microsoft OneDrive
D.Microsoft Stream
AnswersA, B

Correct. SharePoint enables real-time co-authoring of documents and provides a central repository for team files.

Why this answer

Microsoft SharePoint is correct because it provides the document storage and versioning infrastructure that enables real-time co-authoring of documents (e.g., Word, Excel, PowerPoint) via the Office Online Server integration. Microsoft Teams is correct because it integrates instant messaging, persistent chat, and video conferencing (using the underlying Skype for Business Online technology) with SharePoint and OneDrive for seamless file sharing and co-authoring within the same interface.

Exam trap

The trap here is that candidates often confuse OneDrive for Business (a personal sync tool) with SharePoint (a team-based document management platform), or they assume Microsoft Stream provides live video conferencing, when in fact Stream is for recorded video management and Teams handles live meetings.

Practice this question →
272
Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage corporate training content and track employee completion?

Select 2 answers
A.Microsoft Viva Learning
B.Microsoft Forms
C.Microsoft Stream
D.Microsoft To Do
E.SharePoint Online
AnswersA, E

Microsoft Viva Learning provides a centralized learning hub within Teams.

Why this answer

Microsoft Viva Learning (A) is a centralized learning hub within Microsoft Teams that allows organizations to create, assign, and track corporate training content from internal sources (like SharePoint) and external providers (like LinkedIn Learning). SharePoint Online (E) enables the creation and management of training materials as documents, pages, or custom learning portals, and can integrate with Viva Learning to track employee completion via list-based progress tracking or Power Automate workflows.

Exam trap

The trap here is that candidates often confuse Microsoft Forms (a simple quiz tool) or Microsoft Stream (a video platform) with having built-in training management capabilities, when in fact they lack the assignment and completion tracking features required for corporate training.

Practice this question →
273
MCQhard

Refer to the exhibit. A JSON snippet from a Microsoft Purview compliance policy. What is the effect of this policy when applied to a document?

A.It encrypts the document and adds a watermark.
B.It prevents any sharing of the document.
C.It only adds a watermark.
D.It only encrypts the document.
AnswerA

Both intents are present and enabled.

Why this answer

The JSON snippet defines a Microsoft Purview sensitivity label policy configured with both encryption (via 'protection' settings) and a dynamic watermark (via 'marking' settings). When applied to a document, this label enforces both actions simultaneously: it encrypts the document to restrict access and adds a watermark to deter unauthorized sharing. Option A is correct because the policy explicitly includes both 'encryption' and 'watermark' properties, meaning the document will be both encrypted and watermarked upon labeling.

Exam trap

The trap here is that candidates may assume a sensitivity label only performs one action (either encryption or watermarking) and overlook that Microsoft Purview allows combining multiple protection and marking actions in a single label policy.

How to eliminate wrong answers

Option B is wrong because the policy does not block sharing entirely; encryption controls access but does not prevent sharing via secure channels (e.g., encrypted email or protected sharing). Option C is wrong because the policy includes encryption settings in addition to the watermark, so it does more than just add a watermark. Option D is wrong because the policy also includes watermark settings, so it does not only encrypt the document.

Practice this question →
274
Multi-Selecteasy

Which TWO Microsoft 365 apps are part of the Microsoft Viva suite?

Select 2 answers
A.Microsoft Viva Insights
B.Microsoft Teams
C.Microsoft SharePoint
D.Microsoft Viva Connections
E.Microsoft Power BI
AnswersA, D

Productivity insights app in Viva.

Why this answer

Microsoft Viva Insights is correct because it is a core component of the Microsoft Viva employee experience platform, providing personalized wellbeing, productivity, and collaboration analytics derived from Microsoft 365 data. It uses signals from emails, meetings, and chats to deliver actionable insights to individuals, managers, and leaders.

Exam trap

The trap here is that candidates often confuse the host platform (Microsoft Teams) or supporting services (SharePoint, Power BI) with the actual Viva suite components, leading them to select those as Viva apps instead of the dedicated Viva modules.

Practice this question →
275
MCQmedium

A department asks for the Microsoft 365 service best suited for task tracking using boards and buckets. Which service should they use?

A.Microsoft Defender for Endpoint
B.Microsoft Planner
C.Microsoft Entra Privileged Identity Management
D.Microsoft Purview Compliance Manager
AnswerB

Planner provides lightweight team task management with buckets and boards.

Why this answer

Microsoft Planner is the correct service because it provides task tracking using boards and buckets, which are core features of its Kanban-style project management interface. This aligns directly with the department's request for organizing tasks visually, making it the appropriate Microsoft 365 app for lightweight project coordination.

Exam trap

The trap here is that candidates may confuse Microsoft Planner with Microsoft To Do or Microsoft Project, but Planner is specifically designed for team-based task tracking with boards and buckets, whereas To Do is for personal task lists and Project is for complex project management.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a task management tool. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance service for managing, controlling, and monitoring access to privileged roles in Azure AD, not for task tracking. Option D is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory compliance risks, not for organizing tasks with boards and buckets.

Practice this question →
276
MCQmedium

A helpdesk team needs to provide remote assistance to users by viewing and controlling their Windows devices. Which Microsoft 365 service enables this?

A.Microsoft Teams screen sharing
B.Windows 365
C.Microsoft Quick Assist
D.Microsoft Intune Remote Help
AnswerD

Remote Help provides secure remote control and view capabilities for managed devices.

Why this answer

Remote Help via Intune allows support personnel to remotely view and control devices. Teams screen sharing is less secure. Quick Assist is not integrated.

Windows 365 is a cloud PC.

Practice this question →
277
MCQmedium

A hospital uses Microsoft 365 and wants to enable secure messaging between doctors and nurses that supports compliance with health data regulations. Which Microsoft 365 service provides encrypted, compliant messaging?

A.Microsoft Yammer
B.Microsoft Teams
C.Microsoft Viva
D.Microsoft Bookings
AnswerB

Teams supports encrypted chat with compliance features like retention and eDiscovery.

Why this answer

Microsoft Teams supports encrypted messaging and compliance with health data regulations like HIPAA through features such as data encryption at rest and in transit, Data Loss Prevention (DLP) policies, and eDiscovery. It provides secure communication channels for healthcare professionals while meeting regulatory requirements for protected health information (PHI).

Exam trap

The trap here is that candidates may confuse Microsoft Teams with Yammer as both are communication tools, but Yammer lacks the compliance and encryption features required for regulated health data messaging.

How to eliminate wrong answers

Option A is wrong because Microsoft Yammer is an enterprise social network focused on broad organizational communication and lacks the granular compliance controls (e.g., DLP, eDiscovery, retention policies) needed for secure, regulated messaging in healthcare. Option C is wrong because Microsoft Viva is an employee experience platform that integrates with Microsoft 365 and third-party tools for insights, learning, and wellbeing, but it does not provide native messaging or encrypted communication capabilities. Option D is wrong because Microsoft Bookings is a scheduling and appointment management tool, not a messaging service, and does not offer encrypted, compliant messaging features.

Practice this question →
278
MCQeasy

A marketing team needs to create a slide-based presentation that includes charts copied from an Excel spreadsheet and animated transitions. They also require the ability to collaborate in real-time with remote colleagues. Which Microsoft 365 app should they use?

A.Word
B.Excel
C.PowerPoint
D.Sway
AnswerC

PowerPoint provides slide creation, chart embedding, animations, transitions, and real-time collaboration.

Why this answer

PowerPoint is the correct choice because it is specifically designed for creating slide-based presentations with rich media, including charts copied from Excel and animated transitions. It also supports real-time co-authoring via OneDrive or SharePoint, enabling multiple remote colleagues to edit simultaneously.

Exam trap

The trap here is that candidates may confuse Sway as a presentation tool because it can create visually rich content, but it is not a slide-based presentation app and lacks the specific features (animated transitions, real-time co-authoring) that PowerPoint provides for this scenario.

How to eliminate wrong answers

Option A is wrong because Word is a word-processing app for documents, not slide-based presentations, and lacks native support for animated transitions between slides. Option B is wrong because Excel is a spreadsheet app for data analysis and charting, but it cannot create slide-based presentations or apply slide transitions. Option D is wrong because Sway is a digital storytelling app for interactive web-based reports, not traditional slide-based presentations, and it does not support animated transitions or real-time co-authoring in the same way as PowerPoint.

Practice this question →
279
Multi-Selecthard

Which THREE Microsoft 365 services are included in Microsoft 365 E3 that are NOT in Microsoft 365 Business Basic?

Select 3 answers
A.Exchange Online
B.Microsoft Purview Information Protection
C.Microsoft Teams
D.Desktop versions of Office apps
E.Microsoft Intune
AnswersB, D, E

E3 includes compliance features; Business Basic does not.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is included in Microsoft 365 E3 but not in Microsoft 365 Business Basic. Business Basic only includes Exchange Online, Teams, and web/mobile versions of Office apps, with no data classification or rights management capabilities. E3 adds full Purview features like sensitivity labels and encryption for compliance and data loss prevention.

Exam trap

The trap here is that candidates assume all 'Business' plans lack advanced security features, but the question specifically asks for services included in E3 that are NOT in Business Basic, and Exchange Online and Teams are common to both, while desktop Office apps and Intune are also exclusive to E3.

Practice this question →
280
MCQmedium

During requirements gathering, an IT manager says the organization must create an approval workflow between SharePoint and Teams without writing code. Microsoft 365 app or service is the best fit?

A.Power Automate
B.Microsoft Purview Audit
C.Microsoft Forms
D.Microsoft Planner
AnswerA

Power Automate creates low-code workflows across Microsoft 365 services.

Why this answer

Power Automate is the correct choice because it provides a low-code/no-code platform for creating automated workflows that integrate SharePoint and Teams. It allows you to trigger actions based on events in SharePoint (e.g., a new item added to a list) and then perform subsequent actions in Teams (e.g., posting an approval request in a channel). This directly meets the requirement to build an approval workflow without writing code.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task assignment features with workflow automation, but Planner lacks the cross-service orchestration and approval action types that Power Automate provides.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit is a compliance and auditing tool that logs user and admin activities across Microsoft 365; it cannot create or execute approval workflows. Option C is wrong because Microsoft Forms is used to create surveys, quizzes, and polls, not to build multi-step approval workflows between SharePoint and Teams. Option D is wrong because Microsoft Planner is a task management and project tracking tool that lacks the workflow automation capabilities needed to orchestrate an approval process across different services.

Practice this question →
281
MCQmedium

A marketing team wants to create a visual task board to track campaign activities, assign owners, and set deadlines. They do not need subtasks or dependencies. Which Microsoft 365 app is most suitable?

A.Microsoft Planner
B.Microsoft Project
C.Microsoft To Do
D.Microsoft Lists
AnswerA

Planner offers an intuitive board view with cards for tasks, assignments, due dates, and progress tracking, perfectly matching the team's needs for a visual task board.

Why this answer

Microsoft Planner is the most suitable app because it provides a visual Kanban-style task board specifically designed for team collaboration, allowing users to create tasks, assign owners, set deadlines, and track progress without requiring subtasks or dependencies. It integrates seamlessly with Microsoft Teams and other Microsoft 365 services, making it ideal for lightweight project management like campaign tracking.

Exam trap

The trap here is that candidates often confuse Microsoft Planner with Microsoft To Do or Microsoft Lists, assuming any task-related app can handle team boards, but only Planner provides the specific visual Kanban board with team assignment and deadline tracking without dependencies.

How to eliminate wrong answers

Option B (Microsoft Project) is wrong because it is a full-featured project management tool designed for complex projects with dependencies, subtasks, resource management, and Gantt charts, which is overkill for a simple visual task board and not intended for lightweight team collaboration. Option C (Microsoft To Do) is wrong because it is a personal task management app focused on individual productivity, lacking team assignment, shared boards, and deadline tracking for group activities. Option D (Microsoft Lists) is wrong because it is a data-tracking and list management app for creating custom lists, forms, and workflows, but it does not provide a native Kanban board view or built-in task assignment features like Planner does.

Practice this question →
282
Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage chatbots that use AI to answer user questions?

Select 2 answers
A.Microsoft Copilot Studio
B.Microsoft Forms
C.Microsoft Viva Topics
D.Microsoft Bot Framework
E.Microsoft Power Automate
AnswersA, D

Copilot Studio enables creating AI-powered chatbots without code.

Why this answer

Microsoft Copilot Studio (formerly Power Virtual Agents) is a low-code platform for creating conversational AI chatbots that can answer user questions using natural language processing and generative AI. It integrates with Microsoft 365 and allows you to build, test, and deploy chatbots without extensive coding.

Exam trap

The trap here is that candidates confuse Microsoft Copilot Studio (a low-code chatbot builder) with Microsoft Power Automate (a workflow tool) or Microsoft Viva Topics (a knowledge management service), not realizing that only Copilot Studio and Bot Framework directly create and manage AI-powered conversational chatbots.

Practice this question →
283
MCQmedium

The exhibit shows a mail flow rule in an Exchange Online environment. An administrator notices that emails from a trusted partner domain are being marked with [External]. The partner domain is configured as a domain in Microsoft 365. What should the administrator do to prevent this while maintaining the rule for other external senders?

A.Add an exception to the rule to exclude the partner domain.
B.Disable the rule.
C.Change the rule priority to a lower number.
D.Change the rule mode to 'Test' and review the results.
AnswerA

An exception will exclude that domain from the rule.

Why this answer

The mail flow rule is configured to mark all external senders with [External]. Since the partner domain is already configured as an accepted domain in Microsoft 365, Exchange Online treats it as internal, but the rule still applies because it matches the sender domain pattern. Adding an exception for the partner domain explicitly excludes it from the rule, ensuring emails from that domain are not marked [External] while the rule continues to apply to all other external senders.

Exam trap

The trap here is that candidates assume configuring the partner domain as an accepted domain automatically excludes it from mail flow rules, but rules must be explicitly modified with exceptions to override conditions that match the sender domain.

How to eliminate wrong answers

Option B is wrong because disabling the rule would stop marking all external emails with [External], which is not the desired outcome—the rule should still apply to other external senders. Option C is wrong because changing the rule priority to a lower number (higher priority) would not change the rule's behavior; it would still mark the partner domain's emails as [External] unless an exception is added. Option D is wrong because setting the rule to 'Test' mode would only generate a report without actually applying the action, so emails from the partner domain would still be marked [External] if the rule is enforced, and it does not solve the exclusion requirement.

Practice this question →
284
MCQeasy

A marketing team needs to create a printed newsletter that includes custom graphics, text boxes, and precise layout control. Which Microsoft 365 app is specifically designed for desktop publishing tasks like this?

A.Microsoft Word
B.Microsoft Publisher
C.Microsoft Sway
D.Microsoft PowerPoint
AnswerB

Publisher is a dedicated desktop publishing application that offers fine-grained control over text boxes, graphics, and page layout, making it ideal for printed newsletters.

Why this answer

Microsoft Publisher is the correct answer because it is specifically designed for desktop publishing (DTP) tasks such as creating printed newsletters with custom graphics, text boxes, and precise layout control. Unlike general-purpose word processors or presentation tools, Publisher provides advanced page layout features, including master pages, typography controls, and fine-grained object positioning, making it the appropriate choice for this scenario.

Exam trap

The trap here is that candidates often confuse Microsoft Word's basic layout capabilities (like text boxes and images) with the dedicated desktop publishing features of Publisher, leading them to choose Word for tasks that require precise print layout control.

How to eliminate wrong answers

Option A is wrong because Microsoft Word is a word processing application optimized for document creation and text editing, not for precise desktop publishing layout control, and it lacks dedicated DTP features like advanced text wrapping and object layering. Option C is wrong because Microsoft Sway is a web-based presentation and storytelling app designed for interactive, responsive content, not for print-ready desktop publishing with fixed layouts. Option D is wrong because Microsoft PowerPoint is a presentation application focused on slideshows and screen-based delivery, lacking the print-oriented layout tools and page size flexibility required for a printed newsletter.

Practice this question →
285
MCQmedium

A tenant administrator is advising a department that wants to co-author a Word document with colleagues in real time from a browser. Microsoft 365 app or service is the best fit?

A.Microsoft Forms
B.Microsoft Purview Audit
C.Microsoft 365 web apps with OneDrive or SharePoint
D.Microsoft Planner
AnswerC

Microsoft 365 web apps and cloud storage enable real-time co-authoring.

Why this answer

Microsoft 365 web apps (Word, Excel, PowerPoint) combined with OneDrive or SharePoint enable real-time co-authoring from a browser. This allows multiple users to edit the same document simultaneously, with changes synced instantly via the cloud, which directly meets the department's requirement.

Exam trap

The trap here is that candidates may confuse Microsoft Forms or Planner as collaboration tools, but they are designed for data collection and task management, not real-time document co-authoring, which specifically requires web apps with OneDrive or SharePoint.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz tool, not a document co-authoring solution; it does not support real-time editing of Word documents. Option B is wrong because Microsoft Purview Audit is a compliance and auditing service for tracking user activities, not a tool for collaborative document editing. Option D is wrong because Microsoft Planner is a task and project management app for organizing work, not a document co-authoring platform.

Practice this question →
286
MCQeasy

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

A.Microsoft SharePoint
B.Microsoft Teams
C.Microsoft Power Apps
D.Microsoft OneDrive
AnswerA

Provides document libraries, co-authoring, version history, and external sharing.

Why this answer

Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a document management tool because it integrates with SharePoint, but Teams lacks the granular folder-level external sharing and centralized repository focus that SharePoint provides natively.

How to eliminate wrong answers

Option B (Microsoft Teams) is wrong because while Teams includes SharePoint-backed file storage and co-authoring, its primary focus is persistent chat and collaboration channels, not a dedicated central repository with folder-level external sharing; managing external access to specific folders is more complex and less granular than SharePoint. Option C (Microsoft Power Apps) is wrong because it is a low-code application development platform for building custom apps, not a document management or sharing solution; it lacks native document storage, co-authoring, and version history features. Option D (Microsoft OneDrive) is wrong because it is designed for individual file storage and sharing, not as a central repository for an organization; it does not support folder-level external sharing with granular permissions for multiple external partners, and its version history is per-user, not centrally managed for collaboration.

Practice this question →
287
Multi-Selecthard

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Select 3 answers
A.Viva Learning
B.Viva Insights
C.Viva Connections
D.Microsoft Teams
E.Microsoft Stream
AnswersA, B, C

Viva Learning integrates learning resources into the flow of work.

Why this answer

Viva Learning is correct because it is a dedicated Microsoft Viva module that provides a centralized learning hub within Microsoft Teams, allowing employees to access, share, and assign training content from LinkedIn Learning, Microsoft Learn, and third-party sources. It is explicitly part of the Viva employee experience platform, not a standalone service.

Exam trap

The trap here is that candidates confuse the underlying Microsoft 365 services (like Teams or Stream) with the Viva modules that run on top of them, leading them to select Teams as a Viva component instead of recognizing that Viva is a separate employee experience platform with distinct modules.

Practice this question →
288
MCQmedium

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Defender for Endpoint
B.Microsoft Entra Privileged Identity Management
C.Microsoft Purview Compliance Manager
D.Power Apps
AnswerD

Power Apps is used to build low-code apps connected to business data.

Why this answer

Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without writing traditional code. It provides pre-built templates, connectors to Microsoft and third-party services, and a visual drag-and-drop designer, allowing departments to create tailored solutions without custom operational scripts.

Exam trap

The trap here is that candidates may confuse security or compliance tools (like Defender, PIM, or Compliance Manager) with app development platforms, failing to recognize that Power Apps is the designated low-code solution in the Microsoft 365 ecosystem.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a platform for building custom low-code business apps. Option B is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring privileged access within Azure AD, not for app development. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution that helps organizations assess and manage regulatory compliance, not a low-code app development service.

Practice this question →
289
MCQmedium

During requirements gathering, an IT manager says the organization must track assets using columns such as owner, status, purchase date, and location. Microsoft 365 app or service is the best fit?

A.Microsoft Forms
B.Microsoft Planner
C.Microsoft Lists
D.Microsoft Purview Audit
AnswerC

Lists tracks structured information with columns, views, and rules.

Why this answer

Microsoft Lists is the best fit because it provides a structured, customizable data-tracking solution with columns for metadata like owner, status, purchase date, and location. Unlike simple task or form tools, Lists supports rich column types (e.g., choice, date, person), views, and integration with SharePoint, making it ideal for asset tracking.

Exam trap

The trap here is that candidates confuse Microsoft Planner (a task board) with a data tracking tool, overlooking that Lists is the correct choice for structured column-based asset management.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is designed for creating surveys and quizzes, not for tracking assets with structured columns and ongoing data management. Option B is wrong because Microsoft Planner is a task management tool for organizing work with buckets and checklists, not a data repository for asset metadata like purchase date and location. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities in Microsoft 365, not for creating and managing asset tracking lists.

Practice this question →
290
MCQeasy

A user wants to quickly set up a website for their team to share news and resources. Which Microsoft 365 app should they use?

A.Microsoft Teams
B.Microsoft Viva
C.Yammer
D.SharePoint
AnswerD

SharePoint communication sites are ideal for team news and resources.

Why this answer

SharePoint is the correct choice because it is specifically designed for creating team sites that serve as centralized hubs for sharing news, documents, and resources. With SharePoint, users can quickly provision a modern team site using pre-built templates, add web parts for news feeds and document libraries, and manage permissions for team members. This directly meets the requirement for a website to share news and resources.

Exam trap

The trap here is that candidates often confuse Microsoft Teams with a website creation tool because Teams includes tabs for SharePoint pages and files, but Teams itself is not a website platform—SharePoint is the underlying service for site creation and content management.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration workspace, not a website creation tool; while it integrates with SharePoint for file storage, it does not provide a standalone website for sharing news and resources. Option B is wrong because Microsoft Viva is an employee experience platform that focuses on insights, learning, and wellbeing, not on creating team websites or resource hubs. Option C is wrong because Yammer is an enterprise social networking tool for broad organizational communication, not a site for a specific team to share news and resources in a structured website format.

Practice this question →
291
MCQmedium

Refer to the exhibit. A Teams administrator runs the PowerShell commands to enable meeting transcription and recording for all users. After running the commands, users still cannot start transcription in their meetings. What is the most likely cause?

A.Users may have a custom meeting policy that overrides the global policy.
B.The admin does not have the correct permissions.
C.The admin forgot to run a Grant-CsTeamsMeetingPolicy command.
D.The AllowTranscription property is misnamed.
AnswerA

If users have a custom policy, modifying the global policy does not affect them.

Why this answer

Option A is correct because in Microsoft Teams, meeting policies are applied hierarchically: a custom policy assigned directly to a user overrides the global policy. Even if the global policy has transcription enabled, users with a custom meeting policy that has AllowTranscription set to False will not be able to start transcription. The admin must either modify the custom policy or assign the global policy to those users.

Exam trap

The trap here is that candidates assume modifying the global policy affects all users, forgetting that a user-assigned custom policy takes precedence and must be explicitly updated or removed.

How to eliminate wrong answers

Option B is wrong because the admin successfully ran the PowerShell commands, which indicates they have the necessary permissions (e.g., Teams Administrator or Global Administrator role) to modify meeting policies. Option C is wrong because the Grant-CsTeamsMeetingPolicy cmdlet is used to assign a specific policy to a user; if the admin intended to modify the global policy, no Grant command is needed—the Set-CsTeamsMeetingPolicy cmdlet directly updates the global policy. Option D is wrong because the AllowTranscription property is correctly named; it is a valid parameter in the Set-CsTeamsMeetingPolicy cmdlet, and any typo would have caused an error when running the command.

Practice this question →
292
MCQmedium

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use?

A.Microsoft Defender for Endpoint
B.Microsoft Entra Privileged Identity Management
C.Microsoft Purview Compliance Manager
D.Power Apps
AnswerD

Power Apps is used to build low-code apps connected to business data.

Why this answer

Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without extensive coding. It provides pre-built templates, connectors to Microsoft and third-party services, and a drag-and-drop interface, making it ideal for department-level custom app needs.

Exam trap

The trap here is that candidates may confuse security or compliance services (like Defender, PIM, or Compliance Manager) with development tools, failing to recognize that Power Apps is the dedicated low-code platform for custom business applications.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a low-code app development tool. Option B is wrong because Microsoft Entra Privileged Identity Management is an identity governance service for managing, controlling, and monitoring privileged access within Azure AD, not for building custom apps. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution that helps organizations assess and manage regulatory compliance risks, not a low-code app builder.

Practice this question →
293
MCQmedium

A compliance-aware administrator is selecting the right Microsoft 365 capability to create dashboards showing sales and operational trends from multiple data sources. Microsoft 365 app or service is the best fit?

A.Power BI
B.Microsoft Purview Audit
C.Microsoft Planner
D.Microsoft Forms
AnswerA

Power BI is used for analytics, visualizations, reports, and dashboards.

Why this answer

Power BI is the correct choice because it is a business analytics service that enables users to create interactive dashboards and reports by connecting to multiple data sources, including Excel, SQL databases, and cloud services. It provides built-in data transformation, visualization, and sharing capabilities, making it ideal for aggregating sales and operational trends into a single dashboard.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Audit with Power BI due to both involving data, but Purview is strictly for compliance logging and not for analytical dashboard creation.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit is a compliance and auditing solution that logs user and admin activities across Microsoft 365, not a tool for creating dashboards or analyzing trends from multiple data sources. Option C is wrong because Microsoft Planner is a task management and collaboration tool for organizing work with boards and checklists, lacking data integration and visualization features for dashboards. Option D is wrong because Microsoft Forms is a survey and form creation tool for collecting responses, not designed for aggregating data from multiple sources or building analytical dashboards.

Practice this question →
294
Multi-Selectmedium

Which three of the following are Microsoft 365 apps and services that are primarily designed for productivity and collaboration? (Choose three.)

Select 3 answers
.Microsoft Teams
.Microsoft Exchange Online
.Microsoft SharePoint Online
.Microsoft Intune
.Microsoft Azure Active Directory
.Microsoft Defender for Office 365

Why this answer

Microsoft Teams, Exchange Online, and SharePoint Online are core Microsoft 365 workloads designed to enhance productivity and collaboration. Teams provides a unified communication platform with chat, meetings, and file sharing; Exchange Online delivers enterprise-grade email and calendaring; SharePoint Online enables document management, intranet portals, and team sites for collaborative content creation.

Exam trap

The trap here is that candidates often confuse security or identity services (like Intune, Azure AD, or Defender) with productivity tools, because they are part of the Microsoft 365 ecosystem, but the question specifically asks for apps and services 'primarily designed for productivity and collaboration.'

Practice this question →
295
MCQmedium

A marketing manager wants to create a central repository for project documents, announcements, and a shared calendar. The solution must be accessible from Microsoft Teams and allow team members to co-author documents in real time. Which Microsoft 365 service should be used?

A.SharePoint Online (team site)
B.Microsoft Lists
C.Power Automate
D.Microsoft Planner
AnswerA

Correct. SharePoint team sites offer document libraries, calendars, announcements, and co-authoring, and can be added as a tab in Teams.

Why this answer

SharePoint Online team sites provide a centralized document library, announcements, and shared calendar that can be integrated directly into Microsoft Teams via the SharePoint tab. Team members can co-author documents in real time using Office Online integration, which supports simultaneous editing with auto-save. This makes SharePoint the correct choice for a central repository with real-time collaboration accessible from Teams.

Exam trap

The trap here is that candidates often confuse Microsoft Planner (task management) or Microsoft Lists (data tracking) with a full document and calendar repository, overlooking that SharePoint Online is the underlying service that provides the document library, calendar, and announcements that can be surfaced in Teams.

How to eliminate wrong answers

Option B (Microsoft Lists) is wrong because it is a data-tracking application for creating lists and tables, not a document repository or calendar; it lacks native real-time co-authoring for documents. Option C (Power Automate) is wrong because it is a workflow automation tool that orchestrates actions across services, not a storage or collaboration platform for documents and calendars. Option D (Microsoft Planner) is wrong because it is a task management and planning tool focused on Kanban boards and assignments, not a document repository or shared calendar with real-time co-authoring.

Practice this question →
296
MCQmedium

Wide World Importers is a retail company with 2,000 users. They use Microsoft 365 E3. They need to: (1) Deploy a new employee experience platform that integrates with Microsoft 365 and provides personalized news, tasks, and learning; (2) Enable employees to create low-code apps to automate approvals and workflows without custom development; (3) Provide a secure way for employees to store and share company files with granular permissions; (4) Allow IT to manage mobile devices and applications centrally. Which Microsoft 365 services should they use?

A.Viva Connections, Power Apps and Power Automate, SharePoint Online, Microsoft Intune
B.Viva Insights, Power Apps and Power Automate, SharePoint Online, Microsoft 365 Defender
C.Microsoft Teams, Power Apps and Power Automate, OneDrive, Microsoft Entra ID
D.Viva Connections, Power BI, OneDrive, Microsoft Intune
AnswerA

Correct: Viva Connections for employee experience, Power Apps/Automate for low-code apps, SharePoint for file storage, Intune for mobile management.

Why this answer

Microsoft Viva Connections provides the employee experience platform with personalized news and tasks. Power Apps and Power Automate allow low-code app creation for approvals. SharePoint Online provides secure file storage with granular permissions.

Microsoft Intune provides mobile device and app management. Microsoft Teams is a collaboration platform but not the employee experience platform.

Practice this question →
297
MCQmedium

A user in your organization receives an email from an unknown sender with a link to a fake login page. The user reports it. You need to analyze the threat and check if other users received similar emails. Which Microsoft 365 Defender feature should you use?

A.Threat analytics
B.Threat Explorer (Explorer)
C.Attack simulation training
D.Automated investigation and response (AIR)
AnswerB

Correct. Threat Explorer allows detailed investigation of email threats.

Why this answer

Threat Explorer (Explorer) is the correct tool because it provides a real-time, interactive view of email threats, allowing you to search for and analyze specific messages (like the phishing link) across all users. You can use filters such as sender, recipient, or URL to determine if other users received the same malicious email, enabling rapid threat hunting and response.

Exam trap

The trap here is that candidates confuse Threat Explorer (a manual hunting and analysis tool) with Automated investigation and response (AIR), which is an automated reaction system, leading them to pick D because they think 'investigation' implies manual analysis, but AIR is fully automated and not designed for ad-hoc email searches.

How to eliminate wrong answers

Option A is wrong because Threat analytics is a feature that provides intelligence about active threats, vulnerabilities, and attack campaigns, but it does not allow you to search for specific emails or check if other users received a particular message. Option C is wrong because Attack simulation training is used to create and run simulated phishing attacks for user training and awareness, not for analyzing real threats or checking email delivery. Option D is wrong because Automated investigation and response (AIR) automatically triggers investigations and remediation actions after a threat is detected, but it is not the tool you use to manually search and analyze whether other users received a similar email.

Practice this question →
298
MCQeasy

A sales team needs a centralized repository for customer proposals that multiple team members can edit simultaneously and that maintains version history. Which Microsoft 365 service should they use?

A.OneDrive for Business
B.SharePoint Online
C.Microsoft Teams
D.Exchange Online
AnswerB

SharePoint Online provides document libraries that enable multiple users to co-author documents simultaneously and offers detailed version history, making it the correct choice for a collaborative team repository.

Why this answer

SharePoint Online is the correct choice because it provides a centralized document library where multiple users can co-author documents simultaneously, with built-in version history to track changes over time. This aligns directly with the requirement for a shared repository with real-time collaboration and versioning, which OneDrive for Business lacks for team-wide access.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as the file storage solution, but Teams relies on SharePoint Online for its Files tab, so the underlying service providing version history and simultaneous editing is SharePoint Online, not Teams itself.

How to eliminate wrong answers

Option A is wrong because OneDrive for Business is designed for personal storage and sharing with individuals, not as a centralized team repository; it does not support simultaneous editing by multiple team members in a shared workspace. Option C is wrong because Microsoft Teams is a collaboration platform that uses SharePoint Online for file storage; Teams itself does not provide the document library or version history features required. Option D is wrong because Exchange Online is an email and calendaring service, not a document management or collaboration tool, and cannot store or version customer proposals.

Practice this question →
299
Drag & Dropmedium

Drag and drop the steps to enable Microsoft 365 audit logging in the compliance center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order

Why this order

Audit logging is enabled in the compliance center under Audit.

Practice this question →
300
MCQeasy

A user receives a suspicious email with a link. They report it using the built-in Microsoft 365 reporting tool. Which service will analyze the reported message?

A.Microsoft Defender for Office 365
B.Microsoft Sentinel
C.Microsoft Purview
D.Microsoft Defender XDR
AnswerA

Defender for Office 365 analyzes reported phishing and malware in email.

Why this answer

Microsoft Defender for Office 365 (MDO) includes the built-in reporting tool that allows users to report suspicious emails directly from Outlook. When a user submits a message via this tool, it is automatically routed to the Microsoft 365 Defender portal's Submissions page, where it is analyzed by MDO's threat protection engines, including detonation in the sandbox environment for URLs and attachments. This analysis determines whether the message is malicious, spam, or a false positive, and updates the tenant's filtering policies accordingly.

Exam trap

The trap here is that candidates confuse Microsoft Defender for Office 365 (which handles email-specific threat analysis and user submissions) with Microsoft Defender XDR (which is the broader correlation engine that ingests alerts from Defender for Office 365 and other sources, but does not itself perform the initial analysis of user-reported messages).

How to eliminate wrong answers

Option B (Microsoft Sentinel) is wrong because Sentinel is a cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solution that ingests logs and alerts from multiple sources for enterprise-wide threat detection, not a tool for analyzing user-reported emails from the built-in reporting tool. Option C (Microsoft Purview) is wrong because Purview focuses on data governance, compliance, and information protection (e.g., data loss prevention, records management, eDiscovery), not on email threat analysis or sandboxing. Option D (Microsoft Defender XDR) is wrong because Defender XDR is a cross-domain extended detection and response solution that correlates alerts across endpoints, identities, email, and cloud apps, but the actual analysis of user-reported messages is performed by Defender for Office 365's specific threat engines, not by the XDR correlation layer.

Practice this question →
← PreviousPage 4 of 5 · 350 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Describe Microsoft 365 apps and services questions.

Start 20-question session