CCNA Describe Microsoft 365 apps and services Questions — Page 5 of 5

301

MCQeasy

A project team needs a centralized location to store, share, and co-author documents while maintaining version history. Which Microsoft 365 service should they use?

A.SharePoint Online

B.OneDrive for Business

C.Microsoft Teams

D.Microsoft Viva Topics

AnswerA

SharePoint provides team sites with document libraries, version history, and co-authoring.

Why this answer

SharePoint Online is the correct choice because it is designed as a centralized document management and storage platform that supports co-authoring, version history, and granular permission controls. Unlike personal storage services, SharePoint Online provides team-oriented libraries where multiple users can simultaneously edit documents while automatically tracking changes through versioning. This aligns directly with the requirement for a shared, collaborative repository with version history.

Exam trap

The trap here is that candidates often confuse OneDrive for Business with SharePoint Online, assuming both are equivalent for team collaboration, but OneDrive for Business is designed for individual use and lacks the centralized team site structure and advanced permission management that SharePoint Online provides.

How to eliminate wrong answers

Option B (OneDrive for Business) is wrong because it is primarily a personal cloud storage service for an individual user's files, not a centralized team repository; while it supports co-authoring and version history, it lacks the team-level sharing and management features required for a project team. Option C (Microsoft Teams) is wrong because it is a collaboration hub that integrates chat, meetings, and apps, but its file storage relies on underlying SharePoint Online or OneDrive for Business; Teams itself is not a dedicated document storage service. Option D (Microsoft Viva Topics) is wrong because it is a knowledge discovery and AI-powered topic experience service that surfaces information from across Microsoft 365, not a document storage or co-authoring platform.

Practice this question →

302

MCQeasy

A department asks for the Microsoft 365 service best suited for workflow approvals between Microsoft 365 and Dynamics 365. Which service should they use?

A.Microsoft Entra Privileged Identity Management

B.Microsoft Defender for Endpoint

C.Power Automate

D.Microsoft Purview Compliance Manager

AnswerC

Power Automate creates cloud flows and business-process automation.

Why this answer

Power Automate (Option C) is the correct service because it provides a low-code, workflow automation platform that integrates directly with both Microsoft 365 (e.g., SharePoint, Teams) and Dynamics 365. It enables users to create automated approval workflows using prebuilt templates and connectors, making it the ideal choice for cross-service approval processes.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager (a compliance tool) with workflow automation, or think that Privileged Identity Management can handle approvals, but PIM only manages role activation approvals, not general business workflow approvals between Microsoft 365 and Dynamics 365.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra Privileged Identity Management (PIM) is an identity governance tool for managing, controlling, and monitoring privileged role assignments in Azure AD, not for building workflow approvals between Microsoft 365 and Dynamics 365. Option B is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response, and has no capability to create or manage workflow approvals. Option D is wrong because Microsoft Purview Compliance Manager is a compliance management tool that helps assess and manage regulatory compliance risks, not a workflow automation service.

Practice this question →

303

MCQmedium

Refer to the exhibit. The JSON snippet represents a Microsoft Purview sensitivity label policy. An administrator wants to prevent external users from accessing documents labeled 'Highly Confidential'. Which element in the policy achieves this?

A.blockAccess

B.encrypt

C.applyWatermark

D.labels

AnswerA

blockAccess is set to true, preventing unauthorized access.

Why this answer

The 'blockAccess' action in a Microsoft Purview sensitivity label policy is specifically designed to prevent users from accessing content that has been labeled with a particular sensitivity level. In this case, setting 'blockAccess' to 'true' for the 'Highly Confidential' label ensures that external users cannot open or interact with documents carrying that label, enforcing access control at the label level.

Exam trap

The trap here is that candidates often confuse 'blockAccess' with 'encrypt', assuming that encryption alone prevents access, but encryption only protects the data from unauthorized decryption, not from authorized users or external users who might have been granted permissions through the label policy.

How to eliminate wrong answers

Option B is wrong because 'encrypt' applies encryption to the document, which protects data at rest and in transit but does not inherently block external users from accessing the content if they have the decryption key or permissions. Option C is wrong because 'applyWatermark' adds a visual overlay (e.g., text or image) to the document to indicate its sensitivity, but it does not restrict access or prevent external users from viewing or editing the file. Option D is wrong because 'labels' is the array that defines the sensitivity labels themselves, not an action that enforces access restrictions; it merely lists which labels are included in the policy.

Practice this question →

304

MCQmedium

Refer to the exhibit. A Microsoft Graph PowerShell command is run. What does this command retrieve about user jdoe?

A.Only the user's display name and email.

B.All properties of the user.

C.Display name, user principal name, assigned licenses, and usage location.

D.Only the user's display name.

AnswerC

Exactly those properties are selected.

Why this answer

The command `Get-MgUser -UserId jdoe -Property DisplayName, UserPrincipalName, AssignedLicenses, UsageLocation` explicitly specifies only those four properties in the `-Property` parameter. Microsoft Graph PowerShell by default returns a subset of properties, but when you list specific properties, it retrieves only those requested. Therefore, the output includes exactly the display name, user principal name, assigned licenses, and usage location.

Exam trap

The trap here is that candidates assume the `Get-MgUser` cmdlet returns all user properties by default, but the explicit `-Property` parameter restricts the output to only the listed fields, making it a selective retrieval rather than a full one.

How to eliminate wrong answers

Option A is wrong because it claims only display name and email are retrieved, but the command explicitly requests UserPrincipalName, AssignedLicenses, and UsageLocation in addition to DisplayName, and does not request the email property (which is a separate attribute). Option B is wrong because the `-Property` parameter restricts the output to only the listed properties; without it, all default properties would be returned, but here the explicit list overrides that behavior. Option D is wrong because it states only the display name is retrieved, ignoring the other three properties explicitly specified in the command.

Practice this question →

305

MCQmedium

A communications manager wants to create an interactive monthly newsletter that includes embedded videos, images, and links to SharePoint documents. The newsletter should be viewable on any device without needing to install an app. Which Microsoft 365 app is best suited for this?

A.Microsoft Sway

B.Microsoft PowerPoint

C.Microsoft SharePoint

D.Microsoft Stream

AnswerA

Correct. Sway enables creation of interactive, web-based newsletters with multimedia, and it is responsive across devices.

Why this answer

Microsoft Sway is a presentation and storytelling app designed to create interactive, web-based content that can include multimedia such as videos, images, and embedded links. It adjusts automatically to any screen size and is accessible via a browser without installation. PowerPoint is mainly for slideshows and offline viewing.

SharePoint is a document management and collaboration platform, not a content authoring tool. Stream is a video service, not suitable for a newsletter.

Practice this question →

306

MCQhard

Refer to the exhibit. You are reviewing a role definition in Microsoft Purview compliance portal. Which actions can a user assigned this role perform?

A.Manage compliance and data governance tasks in Microsoft Purview

B.Manage user accounts in Microsoft Entra ID

C.Manage security settings in Microsoft Defender XDR

D.View only compliance reports without making changes

AnswerA

The role has full permissions in the Security & Compliance Center and Protection Center, which are part of Purview.

Why this answer

The question refers to a role definition in the Microsoft Purview compliance portal. The Compliance Administrator role (or a custom role with equivalent permissions) is designed specifically to manage compliance and data governance tasks, such as data classification, data loss prevention (DLP), eDiscovery, and retention policies. Option A correctly identifies this scope, as Purview roles do not extend to identity management or security operations in other portals.

Exam trap

The trap here is that candidates often confuse the scopes of Microsoft Purview, Microsoft Entra ID, and Microsoft Defender XDR, assuming a single admin role covers all security and compliance tasks, when in fact each portal has its own distinct RBAC model and role assignments.

How to eliminate wrong answers

Option B is wrong because managing user accounts in Microsoft Entra ID requires roles like User Administrator or Global Administrator, which are assigned in the Microsoft Entra admin center, not in the Microsoft Purview compliance portal. Option C is wrong because managing security settings in Microsoft Defender XDR requires roles like Security Administrator or Security Operator, which are assigned in the Microsoft 365 Defender portal, not in Purview. Option D is wrong because a user assigned a role in Purview can perform actions beyond viewing reports, such as creating and managing compliance policies, unless they are assigned a read-only role like Compliance Reader.

Practice this question →

307

MCQeasy

An employee uses Microsoft 365 Business Basic. They need to schedule a meeting with external clients who have Gmail accounts. Which Microsoft 365 app should they use?

A.Outlook on the web

B.Microsoft Teams

C.Microsoft Bookings

D.Microsoft To Do

AnswerA

Correct. Outlook can schedule meetings and send invites to external attendees.

Why this answer

Outlook on the web (OWA) is the correct choice because it includes a full-featured calendar that supports scheduling meetings with external participants, including those with Gmail accounts, via standard iCalendar invitations. OWA sends an .ics file attachment in the email invitation, which Gmail can parse and add to the recipient's Google Calendar, enabling the external client to accept the meeting regardless of their email provider.

Exam trap

The trap here is that candidates often assume Microsoft Teams is the primary scheduling tool for external meetings, but the exam tests that Outlook (including Outlook on the web) is the core calendar and scheduling application in Microsoft 365, with Teams relying on Outlook for invitation delivery.

How to eliminate wrong answers

Option B (Microsoft Teams) is wrong because while Teams can schedule meetings, its primary scheduling mechanism relies on Outlook integration; standalone Teams scheduling without Outlook still generates an Outlook-based .ics invitation, but the question asks for the app to use, and Teams is not the dedicated scheduling app for external clients with non-Microsoft email. Option C (Microsoft Bookings) is wrong because Bookings is designed for managing customer appointments and service bookings, not for ad-hoc one-on-one or group meetings with external clients; it requires setup of a booking page and is not the standard tool for a simple meeting invitation. Option D (Microsoft To Do) is wrong because To Do is a task management app with no calendar or meeting scheduling capabilities; it cannot send meeting invitations or integrate with external calendars.

Practice this question →

308

MCQeasy

A user wants to create a dashboard that visualizes sales data from multiple sources in real time. Which Microsoft 365 app should they use?

A.Excel

B.Microsoft Lists

C.Microsoft Forms

D.Power BI

AnswerD

Power BI is designed for dashboards and real-time data visualization.

Why this answer

Option A is correct because Power BI is for data visualization and dashboards. Option B is wrong because Excel can visualize data but not real-time from multiple sources easily. Option C is wrong because Forms is for surveys.

Option D is wrong because Lists is for tracking items, not dashboards.

Practice this question →

309

Multi-Selectmedium

Which TWO Microsoft 365 services allow users to collaborate in real-time on the same document?

Select 2 answers

A.SharePoint Online

B.OneDrive for Business

C.Microsoft Viva

D.Yammer

E.Microsoft Teams

AnswersA, B

Documents stored in SharePoint can be co-authored in real-time.

Why this answer

SharePoint Online and OneDrive for Business both support real-time co-authoring, allowing multiple users to edit the same document simultaneously. This is enabled by the Office Online Server infrastructure and the use of WebDAV and REST APIs to synchronize changes in near real-time. Co-authoring works in Word, Excel, and PowerPoint files stored in these services, with conflict resolution handled by the application.

Exam trap

The trap here is that candidates often select Microsoft Teams as a correct answer because it is a collaboration tool, but Teams itself does not provide real-time document editing—it merely hosts files that are stored in SharePoint or OneDrive, where the actual co-authoring happens.

Practice this question →

310

MCQeasy

A sales team needs to collaborate on a document in real time and track changes. Which Microsoft 365 app is most suitable?

A.OneNote

B.Microsoft Forms

C.Word for the web

D.Microsoft Teams

AnswerC

Word for the web supports real-time co-authoring and track changes.

Why this answer

Word for the web (Option C) is the most suitable app because it is specifically designed for real-time co-authoring, allowing multiple users to edit a document simultaneously while tracking changes via the built-in version history and 'Track Changes' feature. Unlike desktop Word, the web version requires no manual sync and leverages Microsoft's Fluid Framework for seamless collaboration across devices.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a document collaboration tool because it displays files, but Teams relies on Word for the web for actual editing; the question specifically asks for the app that enables real-time editing and change tracking, which is Word for the web, not Teams.

How to eliminate wrong answers

Option A is wrong because OneNote is a digital notebook for free-form note-taking, not a word processor; it lacks structured document formatting and granular change tracking required for collaborative document editing. Option B is wrong because Microsoft Forms is a survey and quiz tool, not a document editor; it cannot support real-time co-authoring or track changes on a document. Option D is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, but its built-in document editing relies on Word for the web; Teams itself does not provide native document editing or change tracking capabilities.

Practice this question →

311

Multi-Selecthard

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Select 3 answers

A.Microsoft Purview Audit (Standard)

B.Microsoft Defender for Office 365 Plan 1

C.Microsoft Defender for Office 365 Plan 2

D.Microsoft Purview Advanced Audit

E.Microsoft Power BI Pro

AnswersC, D, E

Plan 2 includes advanced threat hunting and auto-investigation.

Why this answer

Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Office 365 Plan 1 (included in E3) with Plan 2 (included in E5), or mistakenly think that Purview Audit (Standard) is an E5-only feature when it is actually available in both E3 and E5.

Practice this question →

312

MCQmedium

Your organization is deploying Microsoft 365 Copilot and wants to ensure that users can generate meeting summaries from Teams recordings. Which licensing requirement must be met?

A.Microsoft 365 Copilot for Microsoft 365 with no additional license

B.Microsoft 365 E5 plus the Microsoft 365 Copilot add-on license

C.Microsoft 365 Copilot standalone license without any other subscription

D.Microsoft 365 Business Basic

AnswerB

E5 qualifies for Copilot; the add-on license enables the Copilot features.

Why this answer

Microsoft 365 Copilot can generate meeting summaries from Teams recordings, but this capability requires access to the Microsoft Graph API and the underlying AI processing, which is only available with the Microsoft 365 Copilot add-on license. This add-on must be assigned on top of a qualifying subscription such as Microsoft 365 E5, which provides the necessary Teams recording and transcription features. Without the E5 base license, the required recording and compliance features are not available, and without the Copilot add-on, the AI summarization is not enabled.

Exam trap

The trap here is that candidates often assume Microsoft 365 Copilot is a standalone product or that any Microsoft 365 subscription with Copilot can use all features, but Microsoft specifically requires the E5 base license for the Teams recording and transcription prerequisites needed for meeting summaries.

How to eliminate wrong answers

Option A is wrong because Microsoft 365 Copilot for Microsoft 365 is not a standalone product; it is an add-on license that requires a qualifying base subscription like E3 or E5, and it does not include the Teams recording and transcription features needed for meeting summaries. Option C is wrong because a Microsoft 365 Copilot standalone license does not exist; Copilot is always an add-on to an existing Microsoft 365 subscription, and without a base plan like E5, the required Teams recording and compliance capabilities are missing. Option D is wrong because Microsoft 365 Business Basic does not include the advanced Teams features such as recording and transcription, nor does it support the Copilot add-on, making it impossible to generate meeting summaries from recordings.

Practice this question →

313

MCQmedium

A company uses Microsoft 365 Business Premium and wants to enable secure remote access for employees using personal devices. Which Microsoft 365 app should they configure to enforce conditional access policies based on device compliance?

A.Microsoft Purview

B.Microsoft Intune

C.Microsoft Sentinel

D.Microsoft Defender for Cloud Apps

AnswerB

Intune manages device compliance and integrates with Entra ID for conditional access.

Why this answer

Microsoft Intune is the correct answer because it is the Microsoft 365 app that provides mobile device management (MDM) and mobile application management (MAM). It allows administrators to define device compliance policies (e.g., requiring encryption, PIN, or a minimum OS version) and integrate those policies with Microsoft Entra ID (formerly Azure AD) Conditional Access. When a user attempts to access corporate resources from a personal device, Conditional Access checks the device's compliance status reported by Intune before granting access.

Exam trap

The trap here is that candidates may confuse Microsoft Defender for Cloud Apps (a CASB) with device compliance enforcement, but Defender for Cloud Apps controls app access via session policies, not device health checks, which is Intune's role.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview is a suite of data governance, compliance, and risk management solutions (e.g., data loss prevention, eDiscovery, insider risk management); it does not enforce device compliance policies for remote access. Option C is wrong because Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solution; it analyzes security logs and threats but does not manage device compliance or conditional access policies. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility and control over cloud app usage, including session policies and threat detection, but it does not directly enforce device compliance-based conditional access; that function belongs to Intune and Entra ID.

Practice this question →

314

MCQhard

A company wants to use AI-powered features to summarize chat conversations in Microsoft Teams. Which Microsoft 365 service provides this capability?

A.Microsoft 365 Copilot

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft Viva Insights

AnswerA

Microsoft 365 Copilot provides AI-powered chat summaries.

Why this answer

Microsoft 365 Copilot is the correct answer because it integrates AI directly into Microsoft Teams to summarize chat conversations, leveraging large language models and the Microsoft Graph to process conversation context and generate concise summaries. This capability is part of Copilot's broader AI-powered features across Microsoft 365 apps, specifically designed for real-time productivity enhancements like chat summarization.

Exam trap

The trap here is that candidates may confuse Microsoft Viva Insights' personal analytics features (like meeting recaps) with AI-powered chat summarization, but Viva Insights does not provide generative AI summaries of chat conversations.

How to eliminate wrong answers

Option B (Microsoft Forms) is wrong because it is a survey and data collection tool, not designed for AI-powered chat summarization in Teams. Option C (Microsoft Stream) is wrong because it is a video hosting and sharing service, lacking the natural language processing capabilities needed to summarize text-based chat conversations. Option D (Microsoft Viva Insights) is wrong because it focuses on personal productivity and wellbeing analytics, such as meeting habits and focus time, not on summarizing chat conversations using AI.

Practice this question →

315

MCQeasy

A user wants to create a custom dashboard that displays key performance indicators from multiple data sources, such as Excel files and SharePoint lists. Which Microsoft 365 app should the user use?

A.Microsoft Excel

B.Microsoft Lists

C.Microsoft Power BI

D.Microsoft Forms

AnswerC

Business analytics service for interactive dashboards.

Why this answer

Microsoft Power BI is the correct choice because it is a business analytics service designed to connect to multiple data sources—including Excel files and SharePoint lists—and create interactive, custom dashboards with key performance indicators (KPIs). Unlike the other options, Power BI provides built-in data modeling, visualization, and real-time refresh capabilities, making it the only app in this list that fulfills the requirement for a multi-source KPI dashboard.

Exam trap

The trap here is that candidates often confuse Microsoft Lists or Excel as capable of creating dashboards because they can display data visually, but neither supports multi-source, interactive KPI dashboards with live data integration like Power BI does.

How to eliminate wrong answers

Option A is wrong because Microsoft Excel is a spreadsheet application for data entry and analysis, but it cannot natively create a live, multi-source dashboard that aggregates data from SharePoint lists and other sources without manual data import or complex add-ins. Option B is wrong because Microsoft Lists is a data tracking app for creating and managing lists (like SharePoint lists), but it lacks dashboarding and data visualization features to combine multiple data sources into a KPI dashboard. Option D is wrong because Microsoft Forms is a survey and form creation tool for collecting responses, not a dashboard or analytics tool; it cannot display KPIs from Excel or SharePoint lists.

Practice this question →

316

MCQeasy

A user is trying to access Microsoft 365 services but is prompted for additional verification via a phone call. Which Microsoft 365 feature is enforcing this?

A.Microsoft Entra ID

B.Microsoft Purview

C.Microsoft Defender XDR

D.Microsoft Intune

AnswerA

Entra ID includes MFA for additional verification.

Why this answer

Microsoft Entra ID (formerly Azure AD) is the identity and access management service that enforces Conditional Access policies. When a user is prompted for additional verification via a phone call, it means a Conditional Access policy requiring multi-factor authentication (MFA) has been triggered. Entra ID evaluates the sign-in risk, user location, or device compliance and then invokes MFA through the Microsoft Authenticator service, which can deliver a phone call as one of the verification methods.

Exam trap

The trap here is that candidates often confuse Microsoft Defender XDR (a security monitoring tool) with identity security features, or they mistakenly think Intune or Purview handle authentication challenges, when in fact only Microsoft Entra ID (the identity provider) can enforce MFA prompts like phone call verification.

How to eliminate wrong answers

Option B (Microsoft Purview) is wrong because it is a compliance and data governance solution (e.g., data loss prevention, eDiscovery, retention policies), not an identity or authentication service; it does not enforce MFA prompts. Option C (Microsoft Defender XDR) is wrong because it is a unified security operations platform for threat detection and response across endpoints, email, and identities, but it does not directly enforce user authentication challenges like phone call verification. Option D (Microsoft Intune) is wrong because it is a mobile device management (MDM) and mobile application management (MAM) service that manages devices and apps, not authentication policies; while Intune can provide device compliance signals to Entra ID, the actual MFA enforcement is done by Entra ID, not Intune.

Practice this question →

317

Multi-Selectmedium

Which THREE Microsoft 365 services are included in the Enterprise Mobility + Security (EMS) suite?

Select 3 answers

A.Microsoft Sentinel

B.Microsoft Purview

C.Microsoft Intune

D.Microsoft Entra ID

E.Microsoft Defender for Cloud Apps

AnswersC, D, E

Intune is part of EMS for mobile device management.

Why this answer

Microsoft Intune is a core component of Enterprise Mobility + Security (EMS) because it provides cloud-based mobile device management (MDM) and mobile application management (MAM) using the OMA-DM protocol. It enforces conditional access policies and allows IT to manage devices and applications without requiring on-premises infrastructure, directly aligning with EMS's goal of securing and managing endpoints.

Exam trap

Microsoft often tests the misconception that Microsoft Purview or Microsoft Sentinel are part of EMS, when in fact EMS focuses exclusively on identity, endpoint management, and cloud app security, not on SIEM or data governance.

Practice this question →

318

MCQmedium

An organization wants to provide employees with a personalized news feed and learning resources within Microsoft 365. Which app should they use?

A.Microsoft Teams

B.Microsoft Stream

C.Microsoft Viva

D.Microsoft SharePoint

AnswerC

Viva provides personalized news, insights, and learning resources.

Why this answer

Microsoft Viva is the correct app because it is an employee experience platform that integrates with Microsoft 365 to deliver personalized news feeds via Viva Connections and curated learning resources through Viva Learning. Unlike other apps, Viva is specifically designed to aggregate content from across the organization and external sources into a single, tailored dashboard.

Exam trap

The trap here is that candidates often confuse Microsoft Viva with SharePoint or Teams, assuming those apps can natively provide personalized news and learning, but they lack the dedicated employee experience and AI-driven personalization that Viva is specifically built for.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, not a dedicated app for personalized news feeds and learning resources. Option B is wrong because Microsoft Stream is a video service for recording, sharing, and managing videos, not for delivering personalized news or learning content. Option D is wrong because Microsoft SharePoint is a document management and collaboration platform that can host news and learning content, but it lacks the built-in personalization and aggregation features that Viva provides out of the box.

Practice this question →

319

MCQeasy

A company wants to enable its sales team to automatically generate meeting summaries and action items from Microsoft Teams conversations. Which Microsoft 365 app or feature provides this capability?

A.Microsoft Viva Insights

B.Microsoft Stream

C.Microsoft Copilot for Microsoft 365

D.Microsoft Forms

AnswerC

AI-powered assistant that summarizes meetings and generates action items.

Why this answer

Option A is correct because Microsoft Copilot for Microsoft 365 uses AI to summarize meetings and generate action items. Option B is wrong because Microsoft Viva Insights provides productivity analytics but not meeting summaries. Option C is wrong because Microsoft Stream hosts videos.

Option D is wrong because Microsoft Forms creates surveys.

Practice this question →

320

Multi-Selectmedium

A sales team needs to manage leads, track customer interactions, and automate follow-up emails. They also want to collect customer feedback through surveys. Which two Microsoft 365 apps should they adopt for these requirements? (Choose two.)

Select 2 answers

A.Microsoft Dynamics 365 Sales

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft Planner

AnswersA, B

Dynamics 365 Sales provides CRM capabilities for managing leads, contacts, and opportunities, plus workflows for automated follow-ups.

Why this answer

Microsoft Dynamics 365 Sales is a customer relationship management (CRM) application that provides lead management, customer interaction tracking, and automated follow-up email workflows. Microsoft Forms enables the creation and distribution of surveys to collect customer feedback, with responses automatically stored in Excel for analysis.

Exam trap

The trap here is that candidates may confuse Microsoft Stream or Planner as tools for customer interaction or feedback, overlooking that Dynamics 365 Sales is the dedicated CRM solution and Microsoft Forms is the specific survey tool within the Microsoft 365 ecosystem.

Practice this question →

321

MCQhard

An organization uses Microsoft 365 E5 and wants to automatically classify and protect sensitive documents stored in SharePoint Online based on content patterns (e.g., credit card numbers). They need to apply encryption and restrict access when such content is detected. Which Microsoft 365 service should they configure?

A.Microsoft Entra ID

B.Microsoft Purview Information Protection

C.Microsoft Sentinel

D.Microsoft Defender for Cloud Apps

AnswerB

Purview Information Protection provides automatic classification and labeling based on sensitive content.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides content-based classification and protection for sensitive data. It uses trainable classifiers and sensitive information types (e.g., credit card numbers) to automatically apply encryption and restrict access via sensitivity labels in SharePoint Online.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Cloud Apps (a CASB) with data classification, but it lacks the native content scanning and encryption enforcement that Purview Information Protection provides.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra ID is an identity and access management service, not a content classification or protection engine; it cannot scan documents for patterns like credit card numbers. Option C is wrong because Microsoft Sentinel is a security information and event management (SIEM) solution for threat detection and response, not for data classification or encryption. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility and control over cloud apps, but it does not natively classify or encrypt content based on patterns within SharePoint documents.

Practice this question →

322

MCQeasy

A sales team uses Microsoft 365 and wants to automatically capture and store email signatures for all outgoing messages. Which Microsoft 365 app should the administrator configure?

A.Microsoft Teams

B.Microsoft Viva Insights

C.Microsoft SharePoint Online

D.Microsoft Exchange Online

AnswerD

Exchange Online manages email transport rules and signatures.

Why this answer

Option A (Microsoft Exchange Online) is correct because email signatures are managed via Exchange mail flow rules or the Exchange admin center. Option B is wrong because Microsoft Teams is for collaboration, not email signatures. Option C is wrong because Microsoft SharePoint is for document management.

Option D is wrong because Microsoft Viva Insights focuses on productivity analytics.

Practice this question →

323

MCQhard

A company wants to automate a business process where an approval request is sent to a manager when a new employee is added to the HR system. The HR system is a custom list in SharePoint Online. The process should run without any custom code. Which Microsoft 365 tool should they use to create this automation?

A.Microsoft Power Automate

B.Microsoft Power Apps

C.Microsoft SharePoint Designer

D.Microsoft Visio

AnswerA

Power Automate provides pre-built connectors and templates to create automated workflows triggered by SharePoint list changes, such as sending approval requests.

Why this answer

Microsoft Power Automate is the correct tool because it is designed specifically for creating automated workflows between apps and services without custom code. In this scenario, Power Automate can use a trigger (e.g., 'When an item is created or modified' in SharePoint) to send an approval request to a manager, fully meeting the requirement for a no-code solution.

Exam trap

The trap here is that candidates may confuse Microsoft Power Apps (for building apps) with Power Automate (for workflows), or mistakenly think SharePoint Designer is still a viable no-code option, when in fact it is deprecated and requires custom code.

How to eliminate wrong answers

Option B (Microsoft Power Apps) is wrong because Power Apps is a low-code platform for building custom applications, not for automating workflows or approval processes. Option C (Microsoft SharePoint Designer) is wrong because SharePoint Designer is a legacy tool for customizing SharePoint sites and workflows, but it requires custom code and is deprecated in favor of Power Automate. Option D (Microsoft Visio) is wrong because Visio is a diagramming and visualization tool for creating process maps, not for executing automated workflows.

Practice this question →

324

MCQmedium

A company wants to automatically send an email notification to a manager when a new request is submitted in a SharePoint list. The process should require no custom code. Which Microsoft 365 tool should they use?

A.Power Automate

B.SharePoint Designer

C.Power Apps

D.Microsoft Lists

AnswerA

Power Automate provides pre-built templates and triggers, like 'When a new item is created in SharePoint', to send email notifications without code.

Why this answer

Power Automate is the correct choice because it provides a no-code, trigger-based workflow engine that can automatically send an email when a new item is added to a SharePoint list. It integrates directly with SharePoint and Outlook, requiring no custom code or developer intervention.

Exam trap

The trap here is that candidates may confuse Microsoft Lists (a data storage tool) with Power Automate (the automation engine), or mistakenly think SharePoint Designer is still the standard for no-code workflows, when in fact Power Automate is the modern, recommended solution for this scenario.

How to eliminate wrong answers

Option B is wrong because SharePoint Designer is a legacy tool that requires custom workflows (often using SharePoint 2010/2013 workflow types) and is deprecated for new solutions; it also demands more technical overhead and is not recommended for modern no-code automation. Option C is wrong because Power Apps is a low-code platform for building custom applications and user interfaces, not for automating email notifications based on list events. Option D is wrong because Microsoft Lists is a data management and tracking application that does not include built-in automation capabilities; it relies on Power Automate for any workflow or notification logic.

Practice this question →

325

MCQmedium

A manager wants to set up a daily automated reminder email to employees who have not completed a mandatory training video in Microsoft Stream. The reminder should stop once the training is marked complete. Which Microsoft 365 tool should the manager use?

A.Power Automate

B.Microsoft Forms

C.SharePoint Designer

D.Viva Learning

AnswerA

Power Automate can create a flow that triggers daily, checks the training completion status via Microsoft 365 apps, and sends reminder emails only to those who haven't completed, stopping when done.

Why this answer

Power Automate is the correct tool because it can create an automated workflow that queries Microsoft Stream (or a connected system like SharePoint or a custom list) for employees who have not completed the training, sends a daily reminder email, and stops when the training status changes to 'complete'. This leverages triggers like 'Recurrence' and conditions based on data from Stream or a related data source.

Exam trap

The trap here is that candidates often confuse Viva Learning (a learning portal) with an automation tool, assuming it can send reminders, but Viva Learning lacks workflow triggers and actions for automated email scheduling.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms is a survey and data collection tool, not an automation engine; it cannot send automated reminders or check completion status. Option C is wrong because SharePoint Designer is a legacy tool for SharePoint 2010/2013 workflows, not designed for Microsoft 365 cloud automation or integration with Stream. Option D is wrong because Viva Learning is a learning management interface for accessing and assigning training content, but it lacks native workflow automation to send recurring reminders based on completion status.

Practice this question →

326

MCQhard

Refer to the exhibit. You are configuring a Microsoft Purview Data Loss Prevention (DLP) policy in the Microsoft 365 compliance portal. The policy is intended to block access to files containing credit card numbers when accessed from outside the organization. However, users report that the policy is not blocking access. What is the most likely reason?

A.The policy is not assigned to any locations.

B.The policy mode is set to 'advanced' which is not a valid mode; it should be 'enforce' or 'test'.

C.The confidence level is set to 'high' which is too restrictive.

D.The sensitive information type is incorrect.

AnswerB

The valid modes are 'test' and 'enforce'. 'Advanced' is not a mode; this likely means the policy is not applied.

Why this answer

Option B is correct because the policy mode 'advanced' is not a valid mode in Microsoft Purview DLP. The valid modes are 'enforce' (to actively block actions) and 'test' (to simulate policy effects without blocking). Setting the mode to an invalid value like 'advanced' would prevent the policy from enforcing any restrictions, explaining why access is not being blocked.

Exam trap

The trap here is that candidates may confuse policy mode with other settings like confidence level or location assignment, or assume 'advanced' is a valid mode similar to other Microsoft 365 features (e.g., advanced audit), when in fact DLP only supports 'enforce' and 'test' modes.

How to eliminate wrong answers

Option A is wrong because if the policy were not assigned to any locations, it would not apply at all, but users report the policy is configured and expected to work, implying it is assigned; the issue is with enforcement mode. Option C is wrong because setting the confidence level to 'high' makes the policy more restrictive (requiring stronger evidence of a credit card number), which would reduce false positives but not prevent blocking when a match occurs; it would not cause a failure to block. Option D is wrong because if the sensitive information type were incorrect, the policy would not detect credit card numbers at all, but users report the policy is intended to block such content, and the issue is that it is not blocking despite being configured; the type is likely correct.

Practice this question →

327

MCQeasy

Refer to the exhibit. An ARM template snippet. What is this template deploying?

A.A SQL database.

B.A virtual machine.

C.A web app.

D.A standard Azure Storage account.

AnswerD

Defined by the resource type and kind.

Why this answer

The ARM template snippet defines a resource of type 'Microsoft.Storage/storageAccounts', which is the Azure Resource Manager (ARM) resource provider for Azure Storage. The 'kind' property is set to 'StorageV2', which indicates a general-purpose v2 storage account, and the 'sku' specifies 'Standard_LRS', confirming it is a standard storage account with locally redundant storage. Therefore, the template is deploying a standard Azure Storage account.

Exam trap

The trap here is that candidates may confuse the 'Microsoft.Storage/storageAccounts' resource type with other services like SQL databases or web apps, or they might overlook the 'kind' and 'sku' properties that specifically identify a standard storage account, leading them to select a wrong answer based on superficial reading.

How to eliminate wrong answers

Option A is wrong because a SQL database is deployed using the 'Microsoft.Sql/servers/databases' resource type, not 'Microsoft.Storage/storageAccounts'. Option B is wrong because a virtual machine is deployed using the 'Microsoft.Compute/virtualMachines' resource type, which includes properties like 'hardwareProfile' and 'storageProfile', not storage account properties. Option C is wrong because a web app is deployed using the 'Microsoft.Web/sites' resource type, which defines site configurations and app settings, not storage account properties.

Practice this question →

328

MCQmedium

A marketing team needs to create a short promotional video that includes screen recordings, webcam footage, and text overlays. Which Microsoft 365 app should they use to create this video?

A.Microsoft Stream

B.Microsoft Clipchamp

C.Microsoft PowerPoint

D.Microsoft Sway

AnswerB

Clipchamp is a built-in video editor in Microsoft 365 that can create videos from screen recordings, webcam, and adds text overlays.

Why this answer

Microsoft Clipchamp is the correct app because it is a built-in video editor in Microsoft 365 designed for creating and editing videos with features like screen recording, webcam capture, and text overlays. It provides a timeline-based editing interface that allows users to combine multiple media sources into a single promotional video, making it the ideal tool for this task.

Exam trap

The trap here is that candidates often confuse Microsoft Stream (a video hosting service) with a video creation tool, or assume PowerPoint's basic video insertion capabilities are sufficient for multi-track editing, leading them to overlook Clipchamp's dedicated video editing functionality.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video hosting and sharing platform, not a video creation or editing tool; it lacks native editing capabilities for combining screen recordings, webcam footage, and text overlays. Option C is wrong because Microsoft PowerPoint is a presentation application that can insert videos but does not offer a timeline-based video editor with multi-track support for screen recordings and webcam footage simultaneously. Option D is wrong because Microsoft Sway is a digital storytelling and presentation tool focused on interactive web-based content, not a video editor with screen recording or webcam integration.

Practice this question →

329

Multi-Selecthard

A healthcare organization is adopting Microsoft 365 and must meet compliance requirements: retain all communications for 7 years, prevent accidental deletion of documents, and classify sensitive data automatically. Which THREE Microsoft Purview features should the organization use?

Select 3 answers

A.Data loss prevention (DLP) policies

B.eDiscovery

C.Auto-labeling

D.Preservation hold lock

E.Retention policies

AnswersC, D, E

Correct: Automatically classifies sensitive data based on conditions.

Why this answer

Auto-labeling (Option C) is correct because it enables the organization to automatically classify sensitive data based on content patterns (e.g., healthcare records, PII) without manual intervention. This aligns directly with the requirement to classify sensitive data automatically, using trainable classifiers or sensitive info types in Microsoft Purview.

Exam trap

The trap here is that candidates often confuse DLP policies with auto-labeling, but DLP is about preventing data loss after classification, not the classification itself.

Practice this question →

330

Multi-Selecthard

A multinational organization uses Microsoft 365 E5 and needs to ensure compliance with data residency requirements for email and documents stored in Exchange Online and SharePoint Online. Which THREE services or features can help administrators enforce data location policies?

Select 3 answers

A.Multi-Geo Capabilities for SharePoint and OneDrive

B.Data Location for Exchange Online

C.Microsoft Bookings

D.Microsoft Purview Data Lifecycle Management

E.Microsoft Entra ID

AnswersA, B, D

Multi-Geo allows data to be stored in chosen geographic locations.

Why this answer

Multi-Geo Capabilities for SharePoint and OneDrive (Option A) allows administrators to provision and store data at rest in specified geographic locations, ensuring compliance with data residency requirements. This feature enables a tenant to have multiple satellite geographies where content is stored, while the central location remains the primary data residency.

Exam trap

The trap here is that candidates may confuse data lifecycle management (retention/deletion) with data residency (geographic storage location), leading them to incorrectly select Microsoft Purview Data Lifecycle Management as a data location enforcement tool.

Practice this question →

331

MCQhard

A company uses Microsoft Intune to manage devices. They want to deploy a custom line-of-business (LOB) app to Windows 10 devices that are not enrolled in Intune but are joined to Azure AD. Which deployment method should they use?

A.Deploy the app as a Microsoft Store for Business app and assign to Azure AD-joined devices.

B.Use sideloading by enabling developer mode on each device.

C.Use Intune to deploy the app as a line-of-business app.

D.Use Group Policy to deploy the app via Active Directory.

AnswerA

Store for Business can deploy to Azure AD-joined devices without Intune enrollment.

Why this answer

Option A is correct because Microsoft Store for Business allows you to deploy apps to Azure AD-joined devices that are not enrolled in Intune. The app can be assigned directly to Azure AD-joined devices via the Store for Business portal, which uses the Azure AD identity to push the app without requiring Intune enrollment.

Exam trap

The trap here is that candidates assume Intune is required for any app deployment to Azure AD-joined devices, but Microsoft Store for Business can deploy apps directly to Azure AD-joined devices without Intune enrollment.

How to eliminate wrong answers

Option B is wrong because sideloading via developer mode is a manual, per-device process that does not scale for enterprise deployment and does not leverage Azure AD or Intune. Option C is wrong because Intune can only deploy LOB apps to devices that are enrolled in Intune management; the scenario specifies devices are not enrolled in Intune. Option D is wrong because Group Policy requires devices to be domain-joined to an on-premises Active Directory, but the devices are Azure AD-joined only, not domain-joined.

Practice this question →

332

MCQeasy

A small business uses Microsoft 365 Business Premium. They want to ensure that company data on lost or stolen mobile devices is automatically removed. Which Microsoft Intune policy should they configure?

A.Conditional Access

B.Remote wipe

C.App protection policies

D.Compliance policies

AnswerB

Correct. Remote wipe removes all data from a device.

Why this answer

Remote wipe (option B) is the correct Intune policy for automatically removing company data from lost or stolen mobile devices. When configured, Remote wipe sends a command to the device that performs a factory reset, erasing all data including corporate information. This is specifically designed for device-level data removal scenarios, unlike other policies that manage access or app-level data.

Exam trap

The trap here is that candidates confuse 'Remote wipe' with 'Conditional Access' or 'Compliance policies', thinking access control or compliance checks automatically remove data, but only Remote wipe actually erases device data.

How to eliminate wrong answers

Option A (Conditional Access) is wrong because it controls access to resources based on conditions like device compliance or location, but does not remove data from devices. Option C (App protection policies) is wrong because they manage how data is handled within specific apps (e.g., preventing copy-paste or requiring PIN), but do not wipe entire devices or remove all company data automatically upon loss or theft. Option D (Compliance policies) is wrong because they define rules for device health (e.g., requiring encryption or jailbreak detection) and trigger actions like blocking access, but do not perform data removal or wipe operations.

Practice this question →

333

MCQmedium

A company uses Microsoft 365 and wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and apply encryption when shared externally. Which solution should they use?

A.Microsoft Intune

B.Microsoft Sentinel

C.Microsoft Purview Information Protection with auto-labeling

D.Microsoft Defender for Cloud Apps

AnswerC

Auto-labeling can classify and protect sensitive data automatically.

Why this answer

Microsoft Purview Information Protection with auto-labeling is the correct solution because it uses trainable classifiers or exact data match (EDM) to detect sensitive data types like credit card numbers, automatically apply a 'Highly Confidential' sensitivity label, and enforce encryption when the document is shared externally. This capability is built into Microsoft 365 compliance center and integrates with sensitivity labels to protect data at rest and in transit.

Exam trap

The trap here is that candidates confuse Microsoft Defender for Cloud Apps (a CASB) with Purview's auto-labeling, assuming a CASB can classify and encrypt content natively, when in fact it only applies labels that are already defined and managed by Purview Information Protection.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution that manages devices and apps, not content classification or encryption based on sensitive data patterns. Option B is wrong because Microsoft Sentinel is a cloud-native SIEM/SOAR solution for security analytics and threat detection, not for automatic content classification or labeling of documents. Option D is wrong because Microsoft Defender for Cloud Apps is a CASB that provides visibility and control over cloud app usage, but it does not natively perform automatic classification and encryption of documents based on sensitive data types like credit card numbers; it can apply labels only after they are created by Purview.

Practice this question →

334

MCQmedium

An IT administrator needs to ensure that all company-issued Windows 11 devices are configured with the latest security policies and that applications are deployed automatically. Which Microsoft 365 service should they use?

A.Microsoft Intune

B.Microsoft Microsoft Entra ID

C.Microsoft Defender for Endpoint

D.Microsoft 365 Apps for enterprise

AnswerA

Correct. Intune provides device configuration, policy enforcement, and app deployment for managed devices.

Why this answer

Microsoft Intune is the correct choice because it is a cloud-based endpoint management solution that provides mobile device management (MDM) and mobile application management (MAM). It allows IT administrators to enforce security policies (e.g., BitLocker, Windows Defender Firewall, compliance rules) and automate application deployment to Windows 11 devices without requiring on-premises infrastructure. Intune integrates with Microsoft Entra ID for identity-based conditional access but is the primary service for device configuration and app deployment.

Exam trap

The trap here is that candidates often confuse Microsoft Entra ID (identity management) with device management, assuming it can enforce device policies, when in fact Entra ID only provides conditional access policies that rely on Intune compliance data.

How to eliminate wrong answers

Option B is wrong because Microsoft Entra ID is an identity and access management service that handles authentication, single sign-on, and conditional access policies, but it does not manage device configuration or deploy applications directly. Option C is wrong because Microsoft Defender for Endpoint is a security solution focused on endpoint detection and response (EDR), vulnerability management, and threat protection, not device policy enforcement or automated app deployment. Option D is wrong because Microsoft 365 Apps for enterprise is a suite of productivity applications (e.g., Word, Excel, Teams) and does not provide device management or policy configuration capabilities.

Practice this question →

335

Multi-Selectmedium

Which three options describe features or capabilities of Microsoft Viva? (Choose three.)

Select 3 answers

.Provides personalized learning and training resources through Viva Learning

.Integrates employee communications and company news in Viva Connections

.Offers insights into work patterns and well-being in Viva Insights

.Delivers advanced threat protection for email and documents

.Functions as a cloud-based customer relationship management (CRM) system

.Automates complex business workflows using Power Automate

Why this answer

Microsoft Viva is an employee experience platform (EXP) that brings together communications, knowledge, learning, resources, and insights. Viva Learning provides a centralized hub for learning and training resources from LinkedIn Learning, Microsoft Learn, and third-party content providers. Viva Connections delivers a personalized dashboard that integrates company news, conversations, and resources from SharePoint and Yammer.

Viva Insights uses Microsoft Graph data to provide analytics on work patterns, such as meeting time, focus hours, and well-being trends, helping individuals and managers improve productivity and work-life balance.

Exam trap

The trap here is that candidates confuse Microsoft Viva's employee experience features with other Microsoft 365 security, CRM, or automation services, mistakenly selecting options that describe Defender, Dynamics 365, or Power Automate instead of recognizing Viva's specific focus on employee engagement, learning, and insights.

Practice this question →

336

MCQmedium

A project manager needs a centralized location to store all project documents, assign tasks to team members, and track project milestones. The solution must integrate with Microsoft Teams and allow real-time co-authoring. Which Microsoft 365 service should they use?

A.Microsoft Planner

B.Microsoft Project Online

C.Microsoft SharePoint Online

D.Microsoft To Do

AnswerC

SharePoint offers document management with co-authoring, and can be used with task lists and milestone tracking via lists or integration with Planner. It meets all the stated requirements.

Why this answer

SharePoint Online provides document libraries for storing files with real-time co-authoring, plus lists for tracking tasks and milestones. It integrates deeply with Teams through tabs. Microsoft Planner is task-focused but does not natively store documents.

Project Online is more complex and expensive. To Do is for personal tasks.

Practice this question →

337

MCQhard

A multinational corporation uses Microsoft 365 E5. They need to enforce that all documents marked as 'Confidential' are encrypted and cannot be printed or forwarded. Which Microsoft Purview Information Protection capability should they configure?

A.Sensitivity labels with encryption

B.Data Loss Prevention (DLP) policies

C.Retention policies

D.Azure Information Protection (AIP) client

AnswerA

Correct. Sensitivity labels can enforce encryption and usage restrictions.

Why this answer

Sensitivity labels with encryption are the correct choice because they allow you to classify and protect documents at the file level, applying encryption that restricts actions such as printing and forwarding. This is a core capability of Microsoft Purview Information Protection, enabling persistent protection that travels with the document regardless of where it is stored or shared.

Exam trap

The trap here is that candidates often confuse DLP policies with sensitivity labels, thinking DLP can enforce encryption and restrict actions like printing, but DLP only monitors and alerts on content in transit or at rest, while sensitivity labels provide persistent, user-enforced protection at the file level.

How to eliminate wrong answers

Option B is wrong because Data Loss Prevention (DLP) policies are designed to detect and prevent accidental sharing of sensitive information based on rules, but they do not enforce persistent encryption or restrict printing/forwarding at the file level. Option C is wrong because retention policies are used to retain or delete content for compliance or legal reasons, not to apply encryption or restrict user actions like printing or forwarding. Option D is wrong because the Azure Information Protection (AIP) client is a legacy tool that has been deprecated in favor of built-in sensitivity labels in Microsoft 365 Apps; the modern approach uses sensitivity labels with encryption directly in Purview, not the AIP client.

Practice this question →

338

MCQeasy

A user accidentally deletes a critical file from their OneDrive for Business. The IT admin needs to restore the file. What is the maximum number of days that OneDrive for Business retains deleted files by default for users without a retention policy?

A.30 days

B.60 days

C.183 days

D.93 days

AnswerD

OneDrive retains deleted files for 93 days in the recycle bin by default.

Why this answer

By default, OneDrive for Business retains deleted files in the recycle bin for 93 days. This includes both the first-stage recycle bin (30 days) and the second-stage recycle bin (an additional 63 days), totaling 93 days before permanent deletion. This default retention applies when no specific retention policy or legal hold is configured.

Exam trap

The trap here is that candidates often confuse the 30-day first-stage recycle bin retention with the total retention period, or mistakenly apply Exchange Online's 183-day deleted item retention to OneDrive for Business.

How to eliminate wrong answers

Option A is wrong because 30 days is only the retention period for the first-stage recycle bin, not the total retention for deleted files. Option B is wrong because 60 days is not a standard default retention period for OneDrive for Business; it may be confused with SharePoint Online's default retention for deleted items in some contexts. Option C is wrong because 183 days (approximately 6 months) is the default retention period for deleted items in the Microsoft 365 Exchange Online mailbox, not for OneDrive for Business.

Practice this question →

339

MCQmedium

A department asks for the Microsoft 365 service best suited for department document libraries with version history. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Purview Compliance Manager

B.SharePoint Online

C.Microsoft Entra Privileged Identity Management

D.Microsoft Defender for Endpoint

AnswerB

SharePoint provides team sites, document libraries, metadata, permissions, and versioning.

Why this answer

SharePoint Online is the correct choice because it provides document libraries with built-in version history, allowing users to track, restore, and manage previous versions of documents without any custom scripting. This service is designed for collaborative document management and meets the requirement of avoiding custom operational scripts.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager with document management features due to its 'compliance' name, but it lacks document library and versioning capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory risks, not a document library service with version history. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring access to privileged roles, not for document storage or versioning. Option D is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response, not a document management service with version history.

Practice this question →

340

MCQeasy

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

A.Microsoft 365 Copilot

B.Microsoft Viva Insights

C.Microsoft Editor

D.Microsoft Power Automate

AnswerA

Copilot uses AI to draft emails in Outlook using Dynamics 365 data.

Why this answer

Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Exam trap

The trap here is that candidates may confuse Microsoft Editor's grammar and style suggestions with AI-powered content generation, or assume Power Automate can handle the drafting task, but neither provides the integrated, context-aware email drafting from Dynamics 365 data that Copilot uniquely offers.

How to eliminate wrong answers

Option B is wrong because Microsoft Viva Insights focuses on workplace analytics and productivity insights, such as focus time and wellbeing, not on drafting emails with customer data. Option C is wrong because Microsoft Editor provides grammar, spelling, and style suggestions in documents and emails, but it does not use AI to generate replies based on external data sources like Dynamics 365. Option D is wrong because Microsoft Power Automate is a workflow automation tool that can trigger actions based on events, but it does not natively provide an AI-powered assistant for drafting email replies within Outlook.

Practice this question →

341

Multi-Selecthard

Which TWO Microsoft 365 services can be used to create and manage custom business applications without writing code?

Select 2 answers

A.Microsoft Power Apps

B.Microsoft SharePoint

C.Microsoft Power Automate

D.Microsoft Power BI

E.Microsoft Lists

AnswersA, B

Power Apps is a low-code platform for building custom business applications.

Why this answer

Microsoft Power Apps is a low-code platform that enables users to build custom business applications through a visual designer with drag-and-drop components, requiring no traditional coding. It integrates seamlessly with Microsoft Dataverse and other data sources, allowing rapid creation of apps for mobile and web. This makes it a correct answer for creating and managing custom business applications without code.

Exam trap

The trap here is that candidates often confuse Microsoft Power Automate (workflow automation) with Power Apps (application creation), or mistakenly think SharePoint's list customization qualifies as building custom applications, when it only provides basic data storage and forms.

Practice this question →

342

MCQhard

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

A.SharePoint Online External Sharing and Microsoft Entra B2B

B.Microsoft Purview Information Protection with sensitivity labels and SharePoint Online

C.Microsoft Entra B2B collaboration with Conditional Access

D.Microsoft Teams with guest access and sharing permissions

AnswerB

Sensitivity labels enforce view-only and expiration; SharePoint hosts the documents.

Why this answer

Option B is correct because Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Exam trap

The trap here is that candidates confuse external sharing controls (like B2B or guest access) with document-level protection, assuming that any external sharing mechanism can enforce granular usage restrictions, but only sensitivity labels with Azure RMS can apply 'View Only' and expiration at the file level.

How to eliminate wrong answers

Option A is wrong because SharePoint Online External Sharing and Microsoft Entra B2B control access at the site or folder level, not at the document level, and cannot enforce 'View Only' restrictions that block printing or forwarding. Option C is wrong because Microsoft Entra B2B collaboration with Conditional Access controls authentication and device compliance but does not apply document-level usage restrictions like preventing print or forward. Option D is wrong because Microsoft Teams with guest access and sharing permissions provides only coarse-grained controls (e.g., read/write) and lacks the ability to set document-level 'View Only' permissions or an expiration date on individual files.

Practice this question →

343

MCQmedium

An administrator is reviewing a request from users who need to create a team site with document libraries, version history, permissions, and news pages. Microsoft 365 app or service is the best fit?

A.SharePoint Online

B.Microsoft Forms

C.Microsoft Planner

D.Microsoft Purview Audit

AnswerA

SharePoint Online provides team sites, document libraries, pages, permissions, and version history.

Why this answer

SharePoint Online is the correct choice because it provides team sites with document libraries, version history, granular permissions, and news pages as core features. These capabilities are built into SharePoint's site architecture, allowing administrators to create collaboration spaces with full control over content management and access.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task boards with a team site's document management features, or assume Microsoft Forms can create news pages, when in fact only SharePoint Online provides the full suite of document libraries, versioning, permissions, and news pages required for this scenario.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms is a survey and quiz tool that collects responses via forms, not a platform for creating team sites with document libraries, version history, permissions, or news pages. Option C is wrong because Microsoft Planner is a task management application for organizing work with boards and buckets, lacking document libraries, version history, and news page capabilities. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities across Microsoft 365, not a service for building collaborative team sites or managing content.

Practice this question →

344

Multi-Selectmedium

Which THREE Microsoft 365 apps are included in Microsoft 365 Business Basic?

Select 3 answers

A.Microsoft Excel (desktop)

B.Microsoft Teams

C.Microsoft Visio

D.Microsoft SharePoint

E.Microsoft Word (web)

AnswersB, D, E

Teams is included in Business Basic.

Why this answer

Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop clients. Microsoft Teams is included as the core collaboration hub, providing chat, video conferencing, and file sharing. SharePoint is also included for document management and intranet sites, and Word (web) is available as a browser-based word processor.

Exam trap

The trap here is that candidates often assume 'Business Basic' includes desktop Office apps because they conflate it with 'Business Standard' or 'Business Premium,' but Microsoft explicitly reserves desktop clients for higher-tier subscriptions.

Practice this question →

345

Multi-Selectmedium

A project team needs to collaborate on personal work files that follow a user across devices and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Select 2 answers

A.Microsoft Purview eDiscovery case

B.OneDrive for Business

C.SharePoint Online document storage

D.Exchange anti-malware policy

AnswersB, C

OneDrive is intended for individual file storage and sync.

Why this answer

OneDrive for Business is designed for personal work files that follow a user across devices, providing sync capabilities and per-user storage. It also supports real-time co-authoring of Office files (e.g., Word, Excel, PowerPoint) when files are stored in OneDrive and shared with collaborators, making it the primary solution for user-centric file collaboration.

Exam trap

The trap here is that candidates may confuse SharePoint Online document storage as only for team sites, but it is also the underlying storage for OneDrive for Business, making both B and C correct for personal files that follow a user and co-authoring, as OneDrive provides the user-specific sync and SharePoint provides the backend storage and sharing infrastructure.

Practice this question →

346

Multi-Selecteasy

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Select 2 answers

A.Microsoft Outlook

B.Microsoft Excel

C.Microsoft OneNote

D.Microsoft PowerPoint

E.Microsoft Word

AnswersA, E

Outlook Copilot can summarize email threads.

Why this answer

Option A (Microsoft Outlook) is correct because Outlook has Copilot to summarize email threads. Option D (Microsoft Word) is correct because Word has Copilot to summarize documents. Option B is wrong because Excel Copilot analyzes data, not summarization.

Option C is wrong because PowerPoint Copilot creates presentations. Option E is wrong because OneNote Copilot helps with notes.

Practice this question →

347

Multi-Selectmedium

A project manager wants to automate the process of sending a welcome email to new team members when they are added to a SharePoint site. Which two Microsoft 365 technologies should they use? (Choose two.)

Select 2 answers

A.Microsoft Power Automate

B.Microsoft SharePoint

C.Microsoft Power Apps

D.Microsoft Outlook

AnswersA, B

Correct. Power Automate can create a flow that triggers when a new member is added to a SharePoint site and sends an email.

Why this answer

Microsoft Power Automate is correct because it provides the workflow automation capabilities needed to trigger a welcome email when a new member is added to a SharePoint site. It integrates directly with SharePoint's 'When an item is created or modified' trigger to initiate the automated email action.

Exam trap

The trap here is that candidates often confuse the tool that sends the email (Outlook) with the tool that automates the process (Power Automate), or they mistakenly think Power Apps can handle workflow automation because it is part of the Power Platform.

Practice this question →

348

MCQmedium

A hospital uses Microsoft 365 E5 and needs to ensure that patient health information (PHI) is not accidentally shared externally. They want to block sharing of emails containing credit card numbers or medical record numbers. Which Microsoft Purview feature should they configure?

A.Microsoft Purview Privileged Access Management

B.Microsoft Purview Data Loss Prevention (DLP)

C.Microsoft Purview Sensitivity Labels

D.Microsoft Purview Information Barriers

AnswerB

DLP policies can automatically detect and block sharing of sensitive information.

Why this answer

Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect and block the accidental sharing of sensitive data, such as credit card numbers and medical record numbers, via email. DLP uses deep content analysis with built-in sensitive information types (e.g., Credit Card Number, U.S. Medical Record Number) to scan emails and enforce policies that prevent external sharing.

This directly addresses the hospital's requirement to protect PHI from being leaked externally.

Exam trap

The trap here is that candidates often confuse Sensitivity Labels with DLP, not realizing that labels are for classification and protection (e.g., encryption), while DLP is the enforcement engine that scans content and blocks sharing based on those labels or built-in sensitive data types.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Privileged Access Management (PAM) provides just-in-time access control for elevated administrative tasks, not content inspection or blocking of sensitive data in emails. Option C is wrong because Sensitivity Labels are used to classify and protect data with encryption and visual markings, but they do not automatically scan and block sharing of specific data patterns like credit card numbers or medical record numbers without a DLP policy to enforce actions. Option D is wrong because Information Barriers are designed to restrict communication and collaboration between specific groups (e.g., to prevent conflicts of interest), not to scan email content for sensitive data patterns or block external sharing.

Practice this question →

349

MCQeasy

A marketing team needs to collaboratively create and edit documents in real time, share files securely, and track version history. Which Microsoft 365 service should they primarily use?

A.Microsoft Teams

B.OneDrive for Business

C.SharePoint Online

D.Microsoft Viva Engage

AnswerC

SharePoint provides team sites, document libraries, versioning, and co-authoring for collaborative work.

Why this answer

SharePoint Online is the correct choice because it is designed for team collaboration with real-time co-authoring, granular permission-based file sharing, and built-in version history that tracks every change. Unlike OneDrive, which is optimized for individual file storage and sharing, SharePoint provides a centralized team site where multiple users can simultaneously edit documents and manage versions at the site or library level.

Exam trap

The trap here is that candidates often confuse OneDrive for Business with SharePoint Online because both offer real-time co-authoring and version history, but the question specifies a team needing collaborative creation and secure sharing, which is the defining use case for SharePoint's team sites rather than OneDrive's personal storage.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration hub that integrates with SharePoint for file storage, but its primary function is communication and meetings, not native document co-authoring and version history management. Option B is wrong because OneDrive for Business is a personal cloud storage service that supports real-time co-authoring and version history for individual files, but it lacks the team-centric site structure, metadata, and permission inheritance needed for a marketing team to collaboratively manage documents as a group. Option D is wrong because Microsoft Viva Engage (formerly Yammer) is an enterprise social networking tool focused on community discussions and knowledge sharing, not document creation, real-time editing, or version control.

Practice this question →

350

MCQmedium

A marketing team needs to create a shared workspace to manage projects, store documents, and track tasks. Which Microsoft 365 service should the administrator recommend?

A.SharePoint Online

B.Microsoft Sway

C.Microsoft Bookings

D.Microsoft Stream

AnswerA

SharePoint Online provides team sites with document libraries, lists for task tracking, and integration with Planner and Lists.

Why this answer

SharePoint Online is the correct recommendation because it provides a centralized platform for creating team sites that serve as shared workspaces. It includes document libraries for storing and co-authoring files, lists for tracking tasks, and integration with Microsoft Teams and Planner for project management, directly meeting all the stated requirements.

Exam trap

The trap here is that candidates may confuse SharePoint Online with other Microsoft 365 apps like Teams or Planner, but the question specifically asks for a service that combines document storage, task tracking, and a shared workspace, which is the core function of SharePoint Online.

How to eliminate wrong answers

Option B is wrong because Microsoft Sway is a presentation and storytelling app for creating interactive reports and newsletters, not a shared workspace for project management or task tracking. Option C is wrong because Microsoft Bookings is a scheduling tool for managing customer appointments, lacking document storage and task management capabilities. Option D is wrong because Microsoft Stream is a video hosting and sharing service for enterprise video content, not designed for project collaboration or task tracking.

Practice this question →