CCNA M365 Apps Services Questions — Page 2 of 4

MCQeasy

Refer to the exhibit. You have a Conditional Access policy as shown. A user reports they cannot access Exchange Online from a non-compliant device. What is the most likely reason?

A.The device is not marked as compliant

B.The policy only applies to administrators

C.The user has not registered for MFA

D.The policy is disabled

AnswerA

The conditional access policy includes the grant control "Require device to be marked as compliant." If the device is not enrolled in Microsoft Intune or does not meet the configured compliance policy, this control is not satisfied, and access is denied. This is the immediate and technical reason the user is blocked, regardless of other grants like MFA.

Why this answer

The Conditional Access policy shown requires device compliance for Exchange Online access. When a device is non-compliant, the policy blocks access regardless of user identity or MFA status. The most likely reason for the user's inability to access Exchange Online is that the device is not marked as compliant, which is the condition explicitly enforced by the policy.

Exam trap

The trap here is that candidates may assume MFA or admin-only scoping is the issue, but the policy explicitly targets device compliance, which is the direct cause of the block.

How to eliminate wrong answers

Option B is wrong because the policy does not specify 'Only apply to administrators' — it applies to all users or a specific user group, not just admins. Option C is wrong because MFA registration is not the blocking factor; the policy targets device compliance, not authentication strength. Option D is wrong because if the policy were disabled, it would not enforce any restrictions, and the user would not be blocked.

Practice this question →

MCQeasy

A sales manager wants to track customer interactions, manage leads, and automate follow-up emails from a single platform. Which Microsoft 365 service is specifically designed for customer relationship management (CRM)?

A.Microsoft Bookings

B.Microsoft Dynamics 365 Sales

C.Microsoft Power Automate

D.Microsoft To Do

AnswerB

Microsoft Dynamics 365 Sales is a purpose-built CRM application that leverages the Dataverse (Common Data Service) to store leads, contacts, accounts, and opportunities with full relationship hierarchies. It records customer interactions such as emails, calls, meetings, and notes as activities, while sales automation features—including workflows and Power Automate connectors—can trigger follow-up actions automatically. Its dashboards and built-in sales insights give managers the analytics needed to monitor pipeline health, making it the correct choice here.

Why this answer

Microsoft Dynamics 365 Sales is the dedicated CRM service within the Microsoft 365 ecosystem, purpose-built for tracking customer interactions, managing leads, and automating follow-up emails. Unlike general productivity tools, it provides a unified platform with lead scoring, opportunity management, and workflow automation specifically for sales processes.

Exam trap

The trap here is that candidates often confuse Microsoft Bookings (a scheduling tool) or Power Automate (an automation tool) with a full CRM solution, failing to recognize that Dynamics 365 Sales is the only option specifically designed for end-to-end customer relationship management.

How to eliminate wrong answers

Option A is wrong because Microsoft Bookings is a scheduling and appointment management tool, not a CRM platform; it lacks lead management and automated follow-up email capabilities. Option C is wrong because Microsoft Power Automate is a workflow automation service that can integrate with CRM systems but is not itself a CRM platform; it does not provide native lead tracking or customer interaction management. Option D is wrong because Microsoft To Do is a personal task management app with no CRM features such as lead tracking, customer history, or automated email sequences.

Practice this question →

MCQmedium

A company uses Microsoft 365 E3. Employees need to co-author Word, Excel, and PowerPoint documents stored in SharePoint Online while working simultaneously. Which Microsoft 365 capability enables this real-time collaboration?

A.Microsoft 365 Groups membership

B.Microsoft SharePoint version history

C.Microsoft Exchange Online shared mailboxes

D.Microsoft Office co-authoring

AnswerD

Office co-authoring allows multiple users to edit the same Word, Excel, or PowerPoint file stored in SharePoint Online or OneDrive for Business at the same time, with changes merged automatically. It provides presence indicators and live cursors, directly enabling the simultaneous collaboration the employees require while keeping a single authoritative version of the document.

Why this answer

Office co-authoring is the native capability that lets several people edit the same Word, Excel, or PowerPoint document stored in SharePoint Online or OneDrive at the same time, merging changes automatically and showing who is working where. Shared mailboxes, version history, and group membership support communication, recovery, and access control respectively, but none of them enable real-time simultaneous editing.

Exam trap

The trap here is confusing access control or document recovery features with real-time editing, and selecting version history or group membership thinking that sharing a file is the same as co-authoring it.

Practice this question →

MCQmedium

A user reports that they cannot access their work email on their mobile device. The admin confirms the user has an Exchange Online license. What is the most likely cause?

A.The user is using the Outlook mobile app

B.The user is trying to access Outlook on the web

C.Exchange ActiveSync is disabled for the user

D.A Conditional Access policy requires app protection policies

AnswerD

A Conditional Access policy that requires an app protection policy (Intune MAM) is the likely cause because it blocks access to Exchange Online until the Outlook app has received the required policy from Intune. If the user's device does not have the Company Portal or the policy hasn't been applied, Outlook will indicate that the organization requires app protection and deny sign-in. This is a common conditional access control for personal devices to prevent data leakage without full device enrollment.

Why this answer

Conditional Access policies can require app protection policies (e.g., Intune MAM) to enforce data security on mobile devices. If the user's device does not have the required app protection policies applied, access to Exchange Online via mobile apps (including Outlook) will be blocked, even though the user has a valid Exchange Online license. This is a common scenario where licensing alone does not guarantee access when additional security controls are in place.

Exam trap

The trap here is that candidates often assume a valid license (Exchange Online) guarantees access, but Microsoft 365 security features like Conditional Access can override licensing and block access based on policy requirements, especially on mobile devices.

How to eliminate wrong answers

Option A is wrong because using the Outlook mobile app is not a cause of access failure; it is the intended client for mobile email access. Option B is wrong because accessing Outlook on the web (OWA) is a browser-based method, not a mobile device issue, and the question specifically states the user is on a mobile device. Option C is wrong because if Exchange ActiveSync were disabled for the user, the admin would typically see a specific error or setting in the Exchange admin center, and this is less likely than a Conditional Access policy blocking access due to missing app protection policies.

Practice this question →

MCQeasy

A sales team uses Microsoft Copilot for Sales to draft emails. To ensure Copilot uses the most relevant customer data from Dynamics 365, what must be configured?

A.Microsoft Teams channels

B.Dynamics 365 records

C.Exchange Online mailboxes

D.Microsoft Viva Topics

AnswerB

Copilot for Sales is explicitly grounded in CRM data, and Dynamics 365 records are the first-party Microsoft CRM source it uses for email personalization. For a given recipient, Copilot retrieves account, contact, opportunity, and deal-stage fields from Dynamics 365, and then applies that context to draft a tailored message. Without an accurate Dynamics 365 record, the draft lacks customer-specific details such as past interactions, open deals, or relationship history.

Why this answer

Copilot for Sales relies on Dynamics 365 records to access customer data such as contacts, accounts, and opportunities. By configuring the appropriate Dynamics 365 records, Copilot can retrieve the most relevant information to draft personalized emails. Without this configuration, Copilot lacks the necessary data source to generate context-aware content.

Exam trap

The trap here is that candidates may confuse the general data sources available in Microsoft 365 (like Exchange or Teams) with the specific structured CRM data required by Copilot for Sales, leading them to select a broad but incorrect option.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams channels are used for collaboration and communication, not as a data source for Copilot to pull customer records from Dynamics 365. Option C is wrong because Exchange Online mailboxes store email messages and calendar items, but they do not contain structured customer relationship data like Dynamics 365 records. Option D is wrong because Microsoft Viva Topics uses AI to organize knowledge and content from across Microsoft 365, but it does not directly provide the specific customer data from Dynamics 365 that Copilot for Sales requires.

Practice this question →

MCQmedium

A sales team frequently collaborates on proposals stored in Microsoft 365. They want to use an AI-powered tool to draft sections based on previous winning proposals. Which Microsoft 365 app should they use?

A.Microsoft Copilot for Microsoft 365

B.Microsoft Syntex

C.Microsoft Viva Topics

D.Microsoft Power Automate

AnswerA

Microsoft Copilot for Microsoft 365 is an AI assistant that combines large language models with your Microsoft Graph data to generate, summarize, and rewrite proposal content directly in Word, PowerPoint, or Outlook. Because it can retrieve and reason over existing proposal files, contracts, and sales documentation secured in your tenant, it can create new drafts tailored to your team's prior work rather than using generic public answers.

Why this answer

Microsoft Copilot for Microsoft 365 is the correct choice because it integrates large language models directly into the Microsoft 365 productivity apps, including Word, Excel, and PowerPoint. It can analyze existing content—such as previous winning proposals stored in SharePoint or OneDrive—and generate new draft sections based on that data, using natural language prompts. This makes it the ideal AI-powered tool for collaborative proposal writing.

Exam trap

The trap here is that candidates may confuse Microsoft Syntex's content understanding and classification capabilities with generative AI, leading them to select Syntex instead of recognizing that Copilot is the dedicated generative AI assistant for content creation in Microsoft 365.

How to eliminate wrong answers

Option B (Microsoft Syntex) is wrong because Syntex is a content AI service focused on content understanding, classification, and extraction of metadata from documents, not on generating new draft content based on prior examples. Option C (Microsoft Viva Topics) is wrong because Viva Topics is a knowledge discovery tool that automatically organizes content into topic pages and surfaces relevant information, but it does not generate new text or draft sections. Option D (Microsoft Power Automate) is wrong because Power Automate is a workflow automation platform for creating automated processes and integrations, not an AI content generation tool.

Practice this question →

MCQhard

A company uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across endpoints, email, and identities. Which service should they use?

A.Microsoft Defender XDR

B.Microsoft Purview

C.Microsoft Defender for Cloud

D.Microsoft Sentinel

AnswerA

Microsoft Defender XDR is the correct choice because it is a unified extended detection and response (XDR) solution that automatically correlates alerts and signals across endpoints, email, identities, and cloud apps. It provides built-in, out-of-the-box automated response actions such as isolating devices, quarantining files, and blocking accounts, enabling rapid mitigation across the full attack surface. This cross-domain automation makes it an ideal single solution for implementing security incident response in a Microsoft 365 E5 environment.

Why this answer

Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically detects, investigates, and remediates threats across endpoints, email, and identities. It leverages AI and automation to correlate signals from Microsoft Defender for Endpoint, Defender for Office 365, and Defender for Identity, enabling coordinated incident response without manual intervention.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Cloud (a cloud workload protection tool) with Microsoft Defender XDR, or mistakenly think Microsoft Sentinel (a SIEM) is the primary automated remediation tool, when in fact Sentinel requires custom playbooks and is not designed for cross-domain automated remediation out of the box.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview is a data governance, compliance, and risk management solution, not a security incident detection and remediation tool; it focuses on data classification, retention, and eDiscovery. Option C is wrong because Microsoft Defender for Cloud is a cloud security posture management (CSPM) and cloud workload protection platform (CWPP) for multi-cloud environments (Azure, AWS, GCP), not for endpoint, email, and identity incident response. Option D is wrong because Microsoft Sentinel is a cloud-native SIEM (Security Information and Event Management) that ingests logs and requires custom analytics rules and manual or semi-automated playbooks for remediation, whereas Defender XDR provides built-in, automated detection and remediation across the specified domains.

Practice this question →

MCQeasy

A project manager needs to assign tasks to team members, set deadlines, and track progress in a shared workspace. The workspace should integrate with Outlook and Teams. Which Microsoft 365 app is best suited for this requirement?

A.Microsoft To Do

B.Microsoft Planner

C.SharePoint

D.Microsoft Lists

AnswerB

Microsoft Planner is the correct workload because each plan is a shared canvas backed by a Microsoft 365 group, and every task can be assigned to a specific member of that group, given a deadline, placed in a bucket, and tracked with charts on the Plan tab. Its board, charts, and schedule views give teams a visual way to monitor progress per assignee and per bucket, and the same plan can be added as a tab in Microsoft Teams or surfaced in Outlook, making it a true collaborative task management service.

Why this answer

Microsoft Planner is best suited because it provides a shared workspace with task assignment, deadline setting, and progress tracking via Kanban boards, and it integrates natively with Outlook for task synchronization and with Teams as a tab app for collaborative access.

Exam trap

Microsoft often tests the distinction between personal task tools (To Do), collaborative task management (Planner), and data tracking (Lists), where candidates may confuse Lists' custom fields with Planner's task assignment capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft To Do is a personal task management app focused on individual to-do lists, lacking shared workspaces, team assignment, and progress tracking features. Option C is wrong because SharePoint is a document management and collaboration platform for sites and libraries, not designed for task assignment, deadline tracking, or Kanban-style progress views. Option D is wrong because Microsoft Lists is a data tracking app for creating custom lists (e.g., issue trackers, inventories), but it does not provide built-in task assignment, deadline management, or the integrated Kanban boards that Planner offers.

Practice this question →

MCQmedium

A marketing team needs to collaborate on a presentation that will be updated frequently by multiple team members, and they want to ensure everyone always has the latest version without manual tracking. Which Microsoft 365 service should they use?

A.Exchange Online

B.SharePoint Online

C.Microsoft Teams

D.OneDrive for Business

AnswerB

SharePoint Online provides cloud-based team sites with document libraries that support simultaneous co-authoring, check-in/check-out, version history, and granular access controls. When users open a PowerPoint presentation from a SharePoint library, edits are tracked and saved back to the central location, enabling multiple marketing teammates to work on the same file in real time. This makes SharePoint Online the correct service for organized team collaboration on a presentation.

Why this answer

SharePoint Online is the correct choice because it provides a centralized document library with version history, co-authoring, and metadata management, ensuring all team members always access the latest version without manual tracking. Unlike OneDrive for Business, which is designed for individual use, SharePoint Online supports structured collaboration across a team with granular permissions and automated sync.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as the collaboration service itself, but Teams relies on SharePoint Online for file storage and versioning, so the correct underlying service is SharePoint.

How to eliminate wrong answers

Option A is wrong because Exchange Online is an email and calendaring service, not a document collaboration platform; it lacks version control and co-authoring for files. Option C is wrong because Microsoft Teams is a chat-based workspace that integrates with SharePoint for file storage, but it is not the primary service for managing and versioning shared documents; files in Teams are stored in SharePoint, so the underlying service is SharePoint. Option D is wrong because OneDrive for Business is optimized for personal file storage and sharing, not for team-based collaboration with multiple simultaneous editors and automated version tracking across a group; it lacks team-level metadata and permissions management.

Practice this question →

MCQeasy

Refer to the exhibit. A SharePoint admin views site properties in JSON format. What type of site is this?

A.Communication site

B.Classic team site

C.Hub site

D.Team site (group-connected)

AnswerD

The GROUP#0 template defines a modern team site connected to a Microsoft 365 group, which is exactly what the exhibit shows. This site type includes group membership, a shared mailbox and calendar, and group-based permissions, and it is created when a user provisions 'Team site' from SharePoint. It is the correct classification because GROUP#0 directly matches the group-connected team site template.

Why this answer

The JSON output includes the 'GroupId' property, which is a GUID that uniquely identifies the Microsoft 365 Group associated with the site. This property is only present on team sites that are connected to a Microsoft 365 Group (group-connected team sites). Communication sites and classic team sites do not have a GroupId, and hub sites are a site association feature, not a site template.

Exam trap

The trap here is that candidates may confuse the presence of a 'GroupId' with a hub site's association ID, or assume that any modern site (including communication sites) would have a group ID, when in fact only group-connected team sites include this property in their JSON output.

How to eliminate wrong answers

Option A is wrong because communication sites do not have a 'GroupId' property in their JSON representation; they are designed for broadcasting information and are not group-connected. Option B is wrong because classic team sites (without a Microsoft 365 Group) lack the 'GroupId' property; they use SharePoint-specific permissions and are not backed by a Microsoft 365 Group. Option C is wrong because a hub site is a site that has been designated as a hub for navigation and search aggregation, but it is not a distinct site template; the JSON shown does not include a 'HubSiteId' or 'IsHubSite' property, and hub sites can be either communication sites or group-connected team sites.

Practice this question →

MCQeasy

A company uses Microsoft SharePoint Online for intranet and wants to display important company announcements on the home page. Which SharePoint feature should they use?

A.Pages

B.Document libraries

C.Lists

D.News posts

AnswerD

News posts are a dedicated content type in SharePoint Online built for organizational announcements. They leverage the page infrastructure but add specialized features: they automatically appear in the News web part on the site home page, can be rolled up from multiple sites, support rich media, scheduling, and audience targeting, and allow engagement through comments and reactions. This makes News posts the correct and intended tool for announcements on an intranet.

Why this answer

News posts are the correct feature because they are specifically designed to display timely, engaging announcements on a SharePoint intranet home page. They support rich formatting, images, and web parts that surface news content prominently, making them ideal for company-wide communications. Unlike other options, News posts are optimized for visibility and user engagement on the home page.

Exam trap

The trap here is that candidates confuse 'Pages' (option A) with 'News posts' because both use the same underlying page infrastructure, but News posts are a distinct feature with specific properties for announcements, not general-purpose pages.

How to eliminate wrong answers

Option A is wrong because Pages are used for creating static, structured content like landing pages or detailed information, not for dynamic, time-sensitive announcements. Option B is wrong because Document libraries store files and documents, not announcements, and lack the formatting and visibility features needed for home page news. Option C is wrong because Lists are for structured data (e.g., tasks, contacts) and require custom formatting or web parts to display as announcements, making them less suitable for immediate, engaging news.

Practice this question →

MCQmedium

An administrator needs to restrict access to Microsoft 365 admin centers based on user location. Which Microsoft Entra ID feature should they configure?

A.Conditional Access

B.Identity Protection

C.Entra ID Governance

D.Privileged Identity Management (PIM)

AnswerA

Conditional Access is the Microsoft Entra ID policy engine that blocks or grants access by evaluating conditions such as user, device, application, risk, and location. You can define a named location based on IP ranges or country/geo coordinates and set an access control to 'Block access' or 'Require MFA' when users connect from certain regions. This is the directly intended mechanism for restricting Microsoft 365 access based on location.

Why this answer

Conditional Access is the correct feature because it allows administrators to enforce policies that grant or block access to Microsoft 365 admin centers based on conditions such as user location (IP address ranges or countries). By configuring a Conditional Access policy with a location condition, you can restrict access to sensitive admin portals like the Microsoft 365 admin center or Exchange admin center to trusted networks only.

Exam trap

The trap here is that candidates often confuse Identity Protection (which also uses location signals for risk detection) with Conditional Access, but Identity Protection does not enforce access policies—it only provides risk assessments that Conditional Access can consume.

How to eliminate wrong answers

Option B (Identity Protection) is wrong because it focuses on detecting and responding to identity-based risks (e.g., leaked credentials, sign-ins from anonymous IPs) but does not directly restrict access to admin centers based on location. Option C (Entra ID Governance) is wrong because it manages identity lifecycle, access reviews, and entitlement management, not real-time location-based access control. Option D (Privileged Identity Management) is wrong because it provides just-in-time privileged access and approval workflows for roles, but does not enforce location-based restrictions on accessing admin centers.

Practice this question →

MCQhard

Your company has 10,000 users across multiple regions and uses Microsoft 365 E5. You need to ensure that all users have access to Microsoft Copilot for Microsoft 365 to boost productivity. However, due to licensing costs, management wants to minimize expenses by only assigning Copilot licenses to users who will actively use it. They also want to track usage to make informed renewal decisions. What should you do?

A.Assign Copilot licenses to a pilot group and use Microsoft 365 usage reports to identify active users before expanding.

B.Disable Copilot by default and allow users to request it via a helpdesk ticket.

C.Assign Copilot licenses to all users via group-based licensing in Microsoft Entra ID.

D.Use Power Automate to automatically assign Copilot licenses to users who send more than 50 emails per day.

AnswerA

Assigning Copilot licenses to a small pilot group first is a cost-controlled approach because it limits license spend while allowing you to measure real adoption. Use Microsoft 365 admin center usage reports or the Copilot Dashboard to track active users, feature usage, and business impact. This data-driven pilot lets you expand licenses only to users who demonstrably benefit, avoiding waste and tying investment to actual demand.

Why this answer

It aligns with the management's goal of minimizing costs by first assigning Copilot licenses to a pilot group, then using Microsoft 365 usage reports (which track Copilot-specific metrics like active users, sessions, and feature adoption) to identify active users before expanding license assignment. This approach ensures only engaged users receive licenses, optimizing spend while providing data for renewal decisions.

Exam trap

The trap here is that candidates may assume group-based licensing (Option C) is the most efficient method for large-scale deployment, but the question explicitly prioritizes cost minimization and usage tracking, making a pilot group with usage reports the correct choice over blanket assignment.

How to eliminate wrong answers

Option B is wrong because disabling Copilot by default and requiring helpdesk tickets creates administrative overhead and delays user access, failing to leverage Microsoft's built-in license management and usage analytics for cost-effective scaling. Option C is wrong because assigning Copilot licenses to all 10,000 users via group-based licensing contradicts the requirement to minimize expenses, as it would pay for inactive users without any usage tracking. Option D is wrong because using Power Automate to assign licenses based on email volume (e.g., >50 emails/day) is an arbitrary, unsupported metric that does not correlate with Copilot usage; Microsoft 365 usage reports are the correct tool for tracking actual Copilot adoption.

Practice this question →

MCQhard

Refer to the exhibit. The JSON shows a device compliance policy assignment in Microsoft Intune. Based on the exhibit, what is the current compliance status of the devices in the target group?

A.Not compliant, only because the password setting is missing

B.Compliant, because both settings are compliant

C.Not compliant, because the encryption setting is not compliant

D.Compliant, because the password setting is compliant

AnswerC

The JSON clearly shows that the encryption setting is required but is not compliant, and in a device compliance policy, any single non-compliant setting causes the entire device to be flagged as not compliant. Even though the password setting is satisfied, the unresolved encryption requirement overrides that and results in a 'Not compliant' status. Microsoft Intune evaluates all rules collectively, so this device is correctly identified as non-compliant due to the encryption setting.

Why this answer

The exhibit shows a device compliance policy in Microsoft Intune with two settings: 'require device encryption' set to 'Required' and 'minimum password length' set to '6'. The compliance status for the target group is 'Not compliant, because the encryption setting is not compliant'. This is because the JSON indicates that the encryption requirement is not being met by the devices in the group, likely due to BitLocker or device encryption not being enabled.

The password setting alone does not override the encryption non-compliance, as all required settings must be satisfied for a device to be marked compliant.

Exam trap

The trap here is that candidates may focus on the password setting being present and compliant, overlooking that the encryption setting is explicitly non-compliant, and assume partial compliance is sufficient for an overall 'Compliant' status.

How to eliminate wrong answers

Option A is wrong because the password setting is present and configured (minimum length of 6), so the non-compliance is not due to a missing password setting; it is due to the encryption setting. Option B is wrong because both settings are not compliant; the encryption setting is explicitly non-compliant, as shown in the exhibit. Option D is wrong because compliance requires all settings to be compliant; even if the password setting is compliant, the encryption non-compliance makes the device not compliant overall.

Practice this question →

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage custom business processes without writing code?

Select 2 answers

A.SharePoint Designer

B.Microsoft Power Automate

C.Microsoft Flow

D.Microsoft Lists

E.Microsoft Power Apps

AnswersB, E

Microsoft Power Automate is a low-code, cloud-based workflow automation service that lets you create automated processes called flows. With triggers and actions, you can connect to multiple services and data sources, making it a primary tool for business process automation in Microsoft 365. It supports both simple repetitive tasks and complex, multi-step business workflows.

Why this answer

Microsoft Power Automate is a low-code automation platform that enables users to create custom workflows and business processes by connecting various applications and services through pre-built connectors. It allows the design of automated processes without writing code, using a visual designer to define triggers, conditions, and actions.

Exam trap

The trap here is that candidates may confuse Microsoft Flow as a separate service when it is simply the former name of Power Automate, leading them to select both B and C as correct answers, but only Power Automate (B) is the current and valid service.

Practice this question →

MCQmedium

A help desk lead is documenting the correct Microsoft 365 approach to build a simple mobile app for field workers to submit inspection results. Microsoft 365 app or service is the best fit?

A.Power Apps

B.Microsoft Planner

C.Microsoft Purview Audit

D.Microsoft Forms

AnswerA

Power Apps provides a low-code canvas environment for building simple mobile forms that capture and submit data, such as inspection results, and integrates directly with Microsoft 365 services and Dataverse for storage without custom native development.

Why this answer

Power Apps is the correct choice because it is a low-code platform specifically designed for building custom mobile apps that integrate with Microsoft 365 data sources, such as SharePoint, Dataverse, or SQL. Field workers can submit inspection results through a tailored app with forms, business logic, and offline capabilities, making it ideal for this scenario.

Exam trap

The trap here is that candidates often confuse Microsoft Forms (a simple survey tool) with Power Apps (a full app builder), assuming Forms can be used for mobile app development when it lacks the necessary customization, offline, and integration capabilities.

How to eliminate wrong answers

Option B (Microsoft Planner) is wrong because it is a task management tool for organizing work, not a platform for building custom mobile apps with data submission capabilities. Option C (Microsoft Purview Audit) is wrong because it is a compliance and auditing solution for tracking user activities, not an app development service. Option D (Microsoft Forms) is wrong because it creates simple surveys and quizzes with limited customization and no ability to build a full mobile app with offline support or complex business logic.

Practice this question →

MCQmedium

A company uses Microsoft 365 Business Premium. A user reports that when they try to access a file in SharePoint Online, they receive an error that the file is blocked by policy. The IT admin needs to identify which policy is blocking the file. Which tool should the admin use?

A.Microsoft Intune compliance policies

B.Microsoft Entra ID Conditional Access policies

C.Microsoft Defender for Cloud Apps session policies

D.Microsoft Purview Data Loss Prevention policies

AnswerD

Microsoft Purview Data Loss Prevention (DLP) policies are designed to detect and protect sensitive data across Microsoft 365 workloads, including SharePoint. A DLP policy can analyze files for sensitive content types, such as personally identifiable information, and then trigger actions like blocking external sharing or restricting access to specific users. Because it operates directly on the file's content and can execute file-level restrictions, it is the correct solution for blocking files in SharePoint based on their data sensitivity.

Why this answer

Microsoft Purview Data Loss Prevention (DLP) policies are specifically designed to detect and block the sharing or access of sensitive information, such as credit card numbers or personally identifiable information, in Microsoft 365 services like SharePoint Online. When a file is blocked with a 'blocked by policy' error, it is typically because a DLP rule has matched the file's content and applied an action to restrict access. The admin can use the Microsoft Purview compliance portal to review DLP policy matches and identify the exact rule that triggered the block.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Cloud Apps session policies (which control user actions in real-time) with SharePoint's native DLP enforcement, but the 'blocked by policy' error is a direct result of a DLP policy applied at the SharePoint level, not a session-level control.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune compliance policies are used to enforce device configuration and security requirements (e.g., requiring a PIN or encryption) for managed devices, not to block specific files based on content in SharePoint Online. Option B is wrong because Microsoft Entra ID Conditional Access policies control access at the authentication and authorization level (e.g., requiring MFA or blocking sign-ins from untrusted locations), not the content-level blocking of individual files. Option C is wrong because Microsoft Defender for Cloud Apps session policies monitor and control user actions in real-time via reverse proxy (e.g., blocking downloads of sensitive data), but they do not produce a 'blocked by policy' error on the file itself; that error originates from SharePoint's native DLP enforcement.

Practice this question →

Multi-Selectmedium

A project team needs to collaborate on forms-based surveys and quizzes and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Select 2 answers

A.Exchange anti-malware policy

B.SharePoint Online document storage

C.Microsoft Forms

D.Microsoft Purview eDiscovery case

AnswersB, C

SharePoint Online provides the foundational document storage and versioning capabilities necessary for project teams to co-author Office files. Its integration across Microsoft 365 enables multiple users to simultaneously edit Word, Excel, or PowerPoint documents related to their forms-based surveys and quizzes. This directly satisfies the requirement for co-authoring related Office files, facilitating efficient collaboration and centralised access for the team.

Why this answer

SharePoint Online provides document storage and co-authoring capabilities, enabling team members to simultaneously edit Office files (e.g., Word, Excel, PowerPoint) stored in document libraries. Microsoft Forms allows the team to create forms-based surveys and quizzes, with responses automatically collected and easily exportable to Excel for analysis.

Exam trap

The trap here is that candidates may confuse Microsoft Forms with other survey tools like Excel Online or Microsoft Lists, or mistakenly think Exchange anti-malware policy is relevant for collaboration, when it is solely an email security control.

Practice this question →

Multi-Selecthard

Which TWO Microsoft 365 services are specifically designed to help organizations manage and monitor data compliance?

Select 2 answers

A.Microsoft Purview Communication Compliance

B.Microsoft Defender for Office 365

C.Microsoft Intune

D.Microsoft Sentinel

E.Microsoft Purview

AnswersA, E

Microsoft Purview Communication Compliance uses machine-learning classifiers to detect inappropriate or risky messages across Teams, Exchange and Viva Engage, surfacing them for reviewer triage. It satisfies the stem's requirement for a service specifically built to manage and monitor data compliance.

Why this answer

Microsoft Purview Communication Compliance (A) is a purpose-built compliance solution that uses policies and machine learning to detect, triage, and remediate inappropriate or risky communications across Teams, Exchange, and other channels, making it a core data-compliance monitoring service. Microsoft Purview (E) is the overarching compliance platform that provides data mapping, classification, sensitivity labels, Data Loss Prevention, Insider Risk Management, and audit/eDiscovery capabilities for managing and monitoring compliance across the organization's data estate. Microsoft Defender for Office 365 (B) is a threat-protection service focused on phishing, malware, and zero-day attacks rather than compliance management.

Microsoft Intune (C) is a mobile device and endpoint management (MDM/MAM) service for enforcing configuration and app policies, not a data-compliance monitoring tool. Microsoft Sentinel (D) is a cloud-native SIEM/SOAR platform for security analytics, threat detection, and incident response, not a dedicated compliance-management service.

Exam trap

MS-900 often tests the distinction between security and compliance services, causing candidates to confuse Defender for Office 365 or Sentinel as compliance tools when they are primarily security-focused.

Practice this question →

MCQmedium

A multinational corporation uses Microsoft 365 E5. The IT team needs to provide users with a single integrated workspace that combines chat, file sharing, online meetings, and app integration, while also allowing external guests to collaborate on projects. Which Microsoft 365 service should they deploy?

A.SharePoint Online

B.Exchange Online

C.Microsoft Teams

D.Yammer

AnswerC

Microsoft Teams provides a hub for teamwork that integrates chat, file sharing, online meetings, and third-party and Microsoft app integration. It supports guest access, allowing external partners to collaborate in teams and channels. This matches the requirement for a single integrated workspace with external collaboration capabilities, making Teams the appropriate service.

Why this answer

Microsoft Teams is the correct service because it delivers a unified workspace with chat, file sharing, online meetings, and app integration, and it supports guest access for external collaboration. SharePoint Online, Exchange Online, and Yammer each provide only a subset of these capabilities and cannot serve as the integrated hub described.

Exam trap

The trap here is selecting SharePoint Online for collaboration because it handles files and external sharing, but it lacks integrated chat and meetings, which are central to the requirement.

Practice this question →

MCQeasy

A department asks for the Microsoft 365 service best suited for Teams channel conversations and meetings. Which service should they use?

A.Microsoft Entra Privileged Identity Management

B.Microsoft Defender for Endpoint

C.Microsoft Purview Compliance Manager

D.Microsoft Teams

AnswerD

Microsoft Teams is the central collaboration hub in Microsoft 365, bringing together persistent chat, online meetings, calling, and file sharing with coauthoring through SharePoint and OneDrive. It supports team channels, tabs for apps, and real-time communication, which are exactly the capabilities a department of coworkers needs to work together efficiently. This makes Teams the correct choice for the request.

Why this answer

Microsoft Teams is the correct service because it is specifically designed to host channel-based conversations and meetings within Microsoft 365. Teams provides persistent chat channels, audio/video conferencing, and meeting scheduling, directly fulfilling the department's request.

Exam trap

The trap here is that candidates may confuse Microsoft Teams with other Microsoft 365 services that have 'management' or 'compliance' in their names, assuming they support collaboration features, when in fact they are specialized for identity, security, or compliance tasks.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring access to Azure AD roles, not for conversations or meetings. Option B is wrong because Microsoft Defender for Endpoint is a security solution for endpoint detection and response (EDR) and vulnerability management, not a collaboration platform. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory compliance risks, not for real-time communication.

Practice this question →

MCQeasy

A user needs to access their work files from a personal device without storing a copy locally. Which Microsoft 365 app should they use?

A.Microsoft Outlook

B.OneDrive for Business

C.Microsoft Teams

D.Microsoft SharePoint

AnswerB

OneDrive for Business is the correct answer because it provides Files On-Demand, which lets users access all their work files in the cloud without requiring them to be downloaded to the device. When a user signs into OneDrive for Business with their work account on a personal device, they can stream files from the cloud, browse the entire library, and open files on demand, consuming minimal local storage. It is specifically designed to give users a personal document library that syncs across work and personal devices while maintaining compliance and security policies.

Why this answer

OneDrive for Business enables users to access work files from any device via the cloud, with the option to stream files on demand without downloading them locally. This is achieved through Files On-Demand, which uses placeholder files and syncs only metadata, ensuring no full copy is stored on the personal device unless explicitly made available offline.

Exam trap

The trap here is that candidates may confuse SharePoint's web-based access with the ability to prevent local storage, overlooking that OneDrive for Business is the only option with a dedicated Files On-Demand feature that explicitly avoids storing a full copy locally on personal devices.

How to eliminate wrong answers

Option A is wrong because Microsoft Outlook is an email and calendar client, not designed for file storage or remote access without local copies; it downloads attachments locally by default. Option C is wrong because Microsoft Teams primarily focuses on chat, meetings, and collaboration, and while it can access files from SharePoint or OneDrive, it does not provide a dedicated mechanism to prevent local storage of files on personal devices. Option D is wrong because Microsoft SharePoint is a web-based document management and collaboration platform that can be accessed via browser, but it does not natively offer a Files On-Demand feature to prevent local caching; files opened from SharePoint in a browser may still be cached locally by the browser or Office apps.

Practice this question →

MCQeasy

A team needs to create a shared online document and collaborate in real time with colleagues. They require built-in version history and the ability to access the document from any device. Which Microsoft 365 app should they use?

A.Microsoft Word (desktop)

B.Microsoft Word Online

C.Microsoft OneNote

D.Microsoft Teams

AnswerB

Microsoft Word Online is the correct choice because it runs entirely in a web browser, so no software installation is required and it works on any device with internet access. It provides full real-time co-authoring with presence indicators, automatic saving, and version history through OneDrive or SharePoint. This makes the shared document instantly accessible and lets multiple people edit simultaneously without extra setup.

Why this answer

Microsoft Word Online is the correct choice because it is a browser-based version of Word that enables real-time co-authoring, automatic version history, and access from any device with an internet connection. Unlike the desktop app, it does not require installation and syncs changes instantly via OneDrive or SharePoint, meeting all stated requirements.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as the app for document collaboration, but Teams itself is a hub for communication and relies on integrated Office Online apps for actual document editing, making Word Online the direct answer for the specific requirements of shared document creation and real-time collaboration.

How to eliminate wrong answers

Option A is wrong because Microsoft Word (desktop) requires installation on a specific device, lacks built-in real-time co-authoring without additional configuration (e.g., saving to OneDrive with AutoSave enabled), and does not inherently provide cross-device access without manual file transfer. Option C is wrong because Microsoft OneNote is a digital notebook app designed for free-form note-taking and organization, not for creating structured shared documents with the same real-time collaboration and version history features as Word Online. Option D is wrong because Microsoft Teams is a collaboration platform for chat, meetings, and channel-based file sharing, but its document editing capabilities rely on integrated Office Online apps (like Word Online) rather than providing a standalone document creation and editing experience.

Practice this question →

MCQmedium

A school uses Microsoft 365 A3 for faculty and staff. They want to create a hub for teachers to share lesson plans, collaborate on documents, and communicate via instant messaging. They also need to integrate with third-party educational apps. Which Microsoft 365 service should they use as the primary platform?

A.Yammer

B.SharePoint Online

C.OneNote for Windows 10

D.Microsoft Teams

AnswerD

Microsoft Teams is purpose-built as the collaboration hub in Microsoft 365, combining persistent threaded chat, VoIP and video meetings, file sharing, and third-party app integration in one application surface. Teams uses SharePoint Online for files, Exchange Online for calendar/chat infrastructure, and OneNote for notebook tabs, but it is the orchestrating layer that presents those services cohesively. For a school on A3, Teams gives faculty and staff a single place to transition from chat to meeting to a shared document without switching tools.

Why this answer

Microsoft Teams is the correct primary platform because it integrates chat, document collaboration (via SharePoint and OneDrive), and third-party app connectors into a single hub. For teachers sharing lesson plans, collaborating on documents, and using instant messaging, Teams provides persistent chat, file sharing, and a rich app ecosystem that supports third-party educational app integration through tabs, connectors, and bots.

Exam trap

The trap here is that candidates often confuse Yammer's social networking features with Teams' real-time collaboration capabilities, or they assume SharePoint alone can fulfill all communication needs, missing the requirement for instant messaging and integrated third-party apps.

How to eliminate wrong answers

Option A is wrong because Yammer is an enterprise social network focused on broad organizational conversations and communities, not a real-time collaboration hub for instant messaging and document co-authoring. Option B is wrong because SharePoint Online is a document management and intranet platform; while it stores and shares files, it lacks native instant messaging and real-time chat capabilities. Option C is wrong because OneNote for Windows 10 is a digital note-taking app, not a platform for instant messaging, collaborative document editing, or third-party app integration.

Practice this question →

100

MCQmedium

A product design team wants to conduct remote brainstorming sessions where participants can draw, write sticky notes, and add images on a shared canvas in real time. Which Microsoft 365 app should they use?

A.Microsoft To Do

B.Microsoft Whiteboard

C.Microsoft Forms

D.Microsoft Planner

AnswerB

Microsoft Whiteboard provides an infinite digital canvas in Microsoft 365 with real-time co-authoring, so multiple remote participants can simultaneously draw, write, and arrange sticky notes during a Teams meeting. It supports pressure-sensitive inking on pen-enabled devices, image insertion, and automatic cloud sync via the Whiteboard service, which makes it purpose-built for visual brainstorming and ad-hoc diagramming. This freeform environment is exactly what remote ideation demands.

Why this answer

Microsoft Whiteboard is the correct choice because it provides a free-form digital canvas that supports real-time collaboration, including drawing, sticky notes, and image insertion. This directly meets the requirement for remote brainstorming sessions where participants need to interact on a shared canvas simultaneously.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task boards with a collaborative canvas, but Planner is strictly for task tracking, not for free-form drawing or sticky note brainstorming.

How to eliminate wrong answers

Option A is wrong because Microsoft To Do is a task management app focused on personal to-do lists and reminders, not a collaborative canvas for drawing or sticky notes. Option C is wrong because Microsoft Forms is used for creating surveys, quizzes, and polls, not for real-time visual collaboration or drawing. Option D is wrong because Microsoft Planner is a project management tool for organizing tasks and plans with boards, not a shared canvas for brainstorming activities.

Practice this question →

101

Multi-Selecteasy

A company uses Microsoft 365 Business Premium. They want to deploy a cloud-based phone system for their employees. Which TWO services should they use?

Select 2 answers

A.Teams Audio Conferencing

B.Direct Routing

C.Calling Plan

D.Microsoft Bookings

E.Microsoft Teams Phone System

AnswersC, E

A Calling Plan is the Microsoft-provided PSTN service that assigns a phone number and includes a pool of domestic or international minutes to make and receive external calls. It pairs directly with the Teams Phone System, and it is the simplest way to enable cloud calling in Microsoft 365 Business Premium. Without a Calling Plan (or Direct Routing), users can only make internal Teams calls, so it is a correct core component.

Why this answer

Microsoft Teams Phone System (formerly Cloud PBX) provides the core PBX functionality—call control, voicemail, and auto attendants—while a Calling Plan (Microsoft's first-party PSTN connectivity) supplies the phone numbers and minutes to make/receive external calls. Together they form a complete cloud phone system without any on-premises infrastructure.

Exam trap

The trap here is that candidates confuse Teams Audio Conferencing (meeting dial-in) with the phone system, or think Direct Routing is a cloud-only option when it actually requires on-premises hardware.

Practice this question →

102

MCQmedium

A department asks for the Microsoft 365 service best suited for forms-based surveys and quizzes. Which service should they use?

A.Microsoft Entra Privileged Identity Management

B.Microsoft Forms

C.Microsoft Purview Compliance Manager

D.Microsoft Defender for Endpoint

AnswerB

Microsoft Forms provides purpose-built survey, quiz and poll creation with branching, response collection and built-in analytics, directly satisfying the department's forms-based requirement. It integrates with Microsoft 365 groups and Excel without needing separate third-party tooling.

Why this answer

Microsoft Forms is the correct service because it is specifically designed for creating forms-based surveys, quizzes, and polls. It provides real-time response tracking, automatic grading for quizzes, and seamless integration with Microsoft 365 apps like Excel and Teams, making it the ideal choice for the department's request.

Exam trap

The trap here is that candidates may confuse Microsoft Forms with other Microsoft 365 services that have 'management' or 'compliance' in their names, assuming they include survey capabilities, but only Forms is purpose-built for forms-based data collection and quizzes.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring access to Azure AD resources, not for creating surveys or quizzes. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution that helps organizations assess and manage their compliance posture, not a forms-based survey tool. Option D is wrong because Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to protect devices from threats, not for building forms or quizzes.

Practice this question →

103

MCQmedium

A compliance-aware administrator is selecting the right Microsoft 365 capability to brainstorm using a shared digital canvas during Teams meetings. Microsoft 365 app or service is the best fit?

A.Microsoft Planner

B.Microsoft Purview Audit

C.Microsoft Forms

D.Microsoft Whiteboard

AnswerD

Microsoft Whiteboard provides the shared digital canvas for real-time brainstorming during Teams meetings, satisfying the collaboration requirement in the stem. Unlike static note-taking tools, it supports simultaneous multi-user inking and ideation, and integrates natively with Teams, letting participants co-create visually without leaving the meeting.

Why this answer

Microsoft Whiteboard is the best fit because it provides a shared digital canvas that allows meeting participants to brainstorm, draw, and collaborate in real time during Teams meetings. It integrates directly with Teams, supports ink and sticky notes, and persists content across sessions, making it ideal for interactive brainstorming.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's board view with a canvas, but Planner is strictly for task tracking, not freeform drawing or brainstorming.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management tool for organizing work with boards and checklists, not a real-time shared canvas for brainstorming. Option B is wrong because Microsoft Purview Audit is a compliance and auditing solution that tracks user and admin activities, not a collaborative whiteboarding tool. Option C is wrong because Microsoft Forms is used to create surveys, quizzes, and polls, not a freeform digital canvas for brainstorming.

Practice this question →

104

MCQmedium

Refer to the exhibit. An administrator creates a Conditional Access policy in Microsoft Entra ID. The AppId 00000003-0000-0ff1-ce00-000000000000 corresponds to Microsoft Graph. The policy requires MFA for all users accessing Microsoft Graph. However, users report that they are not prompted for MFA when using Microsoft Teams. What is the most likely reason?

A.The policy applies only to Microsoft Graph, not to the Teams service itself.

B.The policy is not enabled.

C.The policy should include the app ID for Office 365 Exchange Online.

D.The GrantControls should be set to RequireMFA for all resources.

AnswerA

Conditional Access targets the resource AppId in the token request. Teams requests its own service principal, not Microsoft Graph, so a policy scoped solely to the Graph AppId never evaluates during Teams sign-in, leaving users unprompted for MFA.

Why this answer

The Conditional Access policy targets the Microsoft Graph app ID (00000003-0000-0ff1-ce00-000000000000), which is used for programmatic access to Microsoft Graph APIs, not for the Microsoft Teams client itself. Teams uses its own service principals and app IDs for authentication, so the policy does not apply to Teams sign-ins, and users are not prompted for MFA.

Exam trap

MS-900 often tests the misconception that Microsoft Graph is a universal app ID that covers all Microsoft 365 services, when in fact each service has its own app ID and must be targeted separately.

How to eliminate wrong answers

Option B is wrong because if the policy were not enabled, it would not apply to any app, but the question implies the policy is active for Graph. Option C is wrong because including the Office 365 Exchange Online app ID would not affect Teams; Teams has its own app ID. Option D is wrong because GrantControls set to RequireMFA for all resources would apply to all apps, but the policy is scoped to Graph only.

Practice this question →

105

Multi-Selectmedium

Which THREE Microsoft 365 services are part of Microsoft Purview compliance suite?

Select 3 answers

A.Microsoft Entra ID

B.Microsoft Defender for Cloud Apps

C.Data Lifecycle Management

D.Communication Compliance

E.Audit

AnswersC, D, E

Data Lifecycle Management is a core Microsoft Purview compliance solution for automating retention, preservation, and deletion of Microsoft 365 content using labels and policies. It helps organizations meet regulatory obligations and reduce legal risk by ensuring data is kept exactly as long as needed and then permanently removed. This extends across Exchange, SharePoint, OneDrive, and Teams, making it a key part of Purview's governance toolkit.

Why this answer

Data Lifecycle Management (C) is part of Microsoft Purview because it provides automated retention and deletion policies for sensitive data across Exchange, SharePoint, OneDrive, and Teams. It helps organizations comply with regulatory requirements by governing data from creation to disposal, directly supporting the Purview compliance portal's governance capabilities.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Cloud Apps (a security tool) with a compliance service, but Purview focuses on data governance, audit, and communication monitoring, not threat detection or identity management.

Practice this question →

106

Multi-Selecteasy

Which TWO Microsoft 365 apps are included in Microsoft 365 Business Basic?

Select 2 answers

A.Microsoft Teams

B.Exchange Online

C.Microsoft Power BI Pro

D.Microsoft Project Online Plan 3

E.Microsoft Word (desktop app)

AnswersA, B

Microsoft Teams is a core application in Microsoft 365 Business Basic, providing a shared workspace for persistent chat, voice and video meetings, file collaboration, and integration with other Microsoft 365 services like SharePoint and OneDrive. It allows teams to communicate and collaborate in real time across devices, making it essential for small and medium businesses using the subscription.

Why this answer

Microsoft Teams is included in Microsoft 365 Business Basic as a core app for chat, meetings, and collaboration. Exchange Online is also included, providing hosted email, calendars, and contacts with a 50 GB mailbox per user. Both are cloud-only services in this plan, with no desktop Office apps.

Exam trap

The trap here is that candidates often assume all Microsoft 365 plans include desktop Office apps, but Business Basic explicitly excludes them, offering only web and mobile versions.

Practice this question →

107

MCQmedium

A business stakeholder asks how Microsoft 365 can help them host an intranet landing page with news, navigation links, and department content. Microsoft 365 app or service is the best fit?

A.SharePoint Online

B.Microsoft Purview Audit

C.Microsoft Forms

D.Microsoft Planner

AnswerA

SharePoint Online is the cloud-based hosting and intranet platform within Microsoft 365, providing communication sites, team sites, and modern pages that can be composed with web parts. It enables organizations to publish structured content, manage documents with versioning and approval workflows, and control access via granular permission settings. For a business stakeholder asking how Microsoft 365 can help host internal content or organization websites, SharePoint Online is the correct service.

Why this answer

SharePoint Online is the correct answer because it is a web-based platform specifically designed for creating intranet portals, team sites, and communication sites. It provides built-in web parts for news feeds, navigation links, and department content pages, making it the ideal service for hosting a company intranet landing page.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task lists with content organization, or assume Microsoft Forms can publish content, when in fact only SharePoint Online provides the structured site hierarchy and web part capabilities needed for an intranet landing page.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit is a compliance and auditing solution that tracks user and admin activities across Microsoft 365, not a tool for building intranet pages. Option C is wrong because Microsoft Forms is a survey and quiz creation tool, not a content management or intranet hosting platform. Option D is wrong because Microsoft Planner is a task management and project tracking application, not designed for publishing news or organizing department content.

Practice this question →

108

MCQmedium

A company uses Microsoft 365 Copilot to summarize a long email thread. Where does Copilot retrieve the email content from?

A.SharePoint Online

B.Exchange Online

C.OneDrive for Business

D.Microsoft Viva Topics

AnswerB

Exchange Online is the correct source because it hosts the user's mailbox, including email messages, and Copilot uses Microsoft Graph to access this data with the user's consented permissions. When summarizing a long email, Copilot reads the message content directly from the Exchange Online mailbox store, applying the same access controls and sensitivity labels that govern the user's normal mail operations. This ensures that the summary is based on the live, authoritative version of the email.

Why this answer

Microsoft 365 Copilot retrieves email content directly from Exchange Online, which is the Microsoft 365 service that stores and manages mailboxes, emails, and calendar items. When summarizing a long email thread, Copilot accesses the user's mailbox via Exchange Web Services (EWS) or the Microsoft Graph API, which provides programmatic access to email data. This allows Copilot to read the thread's messages and generate a concise summary without needing to store or index the content elsewhere.

Exam trap

The trap here is that candidates often confuse where email content is stored versus where documents or files are stored, mistakenly selecting SharePoint Online or OneDrive for Business because they associate Copilot with summarizing content from those services, but email specifically resides in Exchange Online.

How to eliminate wrong answers

Option A is wrong because SharePoint Online is a document management and collaboration platform for files, lists, and sites, not for storing individual email messages or threads. Option C is wrong because OneDrive for Business is a personal cloud storage service for files and documents, not for email content, which resides in Exchange Online mailboxes. Option D is wrong because Microsoft Viva Topics is a knowledge discovery service that uses AI to organize and surface topics from content across Microsoft 365, but it does not directly store or provide raw email thread data for Copilot summarization.

Practice this question →

109

MCQhard

A company uses a third-party Human Resources (HR) system. Whenever a new employee is added to the HR system, they want to automatically create a user account in Microsoft 365, assign the appropriate license, and send a welcome email. Which Microsoft 365 service should be used to orchestrate this automation?

A.Microsoft Power Automate

B.Microsoft Identity Manager

C.Microsoft Entra ID Connect

D.Microsoft Graph API

AnswerA

Microsoft Power Automate enables no-code/low-code cloud flows that use built-in connectors and triggers to react to events in third-party HR systems. These flows can orchestrate user provisioning, send approval emails, and update Microsoft Entra ID or other systems automatically, making it the correct tool for automating HR-driven identity workflows.

Why this answer

Microsoft Power Automate is the correct service because it provides a low-code workflow automation platform that can trigger actions based on events in external systems (e.g., a new employee record in a third-party HR system) and then orchestrate a sequence of tasks in Microsoft 365, such as creating a user account via the Microsoft Graph API, assigning a license, and sending a welcome email. It integrates seamlessly with hundreds of connectors, including HR systems and Microsoft 365 services, making it the ideal tool for this cross-system automation scenario.

Exam trap

The trap here is that candidates often confuse the Microsoft Graph API (a development tool) with Power Automate (a no-code/low-code orchestration service), mistakenly thinking that because the Graph API can perform the individual actions, it is the correct answer for orchestrating the entire automated workflow.

How to eliminate wrong answers

Option B (Microsoft Identity Manager) is wrong because it is an on-premises identity and access management solution focused on synchronizing identities between on-premises directories and cloud directories, not on orchestrating event-driven workflows like creating users and sending emails. Option C (Microsoft Entra ID Connect) is wrong because it is a synchronization tool that replicates on-premises Active Directory objects to Microsoft Entra ID for hybrid identity scenarios; it does not provide workflow automation or trigger actions based on external HR system events. Option D (Microsoft Graph API) is wrong because while it can be used to programmatically create users, assign licenses, and send emails, it is a RESTful API that requires custom code and does not provide the orchestration, scheduling, or low-code workflow capabilities that Power Automate offers for automating a multi-step process triggered by an external system.

Practice this question →

110

MCQeasy

A training department wants to create interactive learning paths and track employee progress. Which Microsoft 365 service should they use?

A.Microsoft Viva Learning

B.Microsoft Viva Topics

C.Microsoft Stream

D.SharePoint Online

AnswerA

Microsoft Viva Learning is the correct answer because it is the M365/Viva module designed specifically for learning management. It aggregates content from LinkedIn Learning, Microsoft Learn, and third-party providers into a single Teams-based interface, and it provides core learning functionality such as learning paths, content assignments, and progress tracking. In this scenario, the training department's need to create interactive learning content and monitor learner progress aligns directly with Viva Learning's purpose.

Why this answer

Microsoft Viva Learning is the correct service because it provides a centralized hub within Microsoft Teams where organizations can create, assign, and track interactive learning paths and employee progress. It integrates with learning management systems (LMS) and content providers to surface training content, while also offering progress tracking and completion analytics for administrators.

Exam trap

The trap here is that candidates often confuse Viva Learning with SharePoint Online, assuming that SharePoint's document libraries and custom lists can replicate learning path functionality, but SharePoint lacks the integrated assignment engine, progress dashboards, and third-party content aggregation that Viva Learning provides natively.

How to eliminate wrong answers

Option B (Microsoft Viva Topics) is wrong because it is an AI-powered knowledge discovery service that automatically organizes content into topic pages from across Microsoft 365, not a tool for creating learning paths or tracking progress. Option C (Microsoft Stream) is wrong because it is a video hosting and sharing platform (formerly Azure Media Services-based) that does not include interactive learning path creation or progress tracking capabilities. Option D (SharePoint Online) is wrong because while it can host training documents and lists, it lacks native interactive learning path creation, assignment workflows, and built-in progress tracking features that Viva Learning provides.

Practice this question →

111

MCQmedium

A company uses Microsoft 365 E5 licenses. The security team wants to automatically remediate advanced threats detected on endpoints without manual intervention. Which Microsoft 365 service should they use?

A.Microsoft Intune

B.Microsoft Purview

C.Microsoft Defender XDR

D.Microsoft Sentinel

AnswerC

Microsoft Defender XDR (formerly Microsoft 365 Defender) is the correct answer because it is a unified security platform that provides automated investigation and remediation across endpoints, email, identities, and cloud apps. It uses the Microsoft Defender for Endpoint EDR engine, which continuously monitors endpoint behaviors, detects advanced threats using AI and machine learning, and automatically executes response actions such as quarantining malicious files, isolating compromised devices, blocking indicators, and rolling back registry changes. These automated response playbooks reduce the time to respond and are precisely what the security team needs for proactive threat remediation.

Why this answer

Microsoft Defender XDR (Extended Detection and Response) is the correct service because it provides automated investigation and remediation capabilities for advanced threats detected on endpoints. It uses AI-driven playbooks to automatically contain or remove threats without manual intervention, which aligns directly with the security team's requirement.

Exam trap

The trap here is that candidates often confuse Microsoft Sentinel's SIEM/SOAR capabilities with automated endpoint remediation, but Sentinel requires integration with Defender XDR to execute such actions, whereas Defender XDR provides native automated remediation directly on endpoints.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service focused on policy enforcement and device compliance, not automated threat remediation. Option B is wrong because Microsoft Purview is a data governance, compliance, and risk management solution (formerly Microsoft 365 Compliance), not designed for endpoint threat detection or automated response. Option D is wrong because Microsoft Sentinel is a cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) service that aggregates logs and alerts from multiple sources, but it does not natively perform automated remediation on endpoints; it requires integration with other tools like Defender XDR for that capability.

Practice this question →

112

MCQhard

Refer to the exhibit. A SharePoint admin is reviewing a policy JSON snippet. Which statement accurately describes the effect of this policy?

A.External sharing is allowed only for existing guests who expire in 30 days.

B.External sharing is allowed but guests expire after 30 days.

C.External sharing is allowed but only for users in the same tenant.

D.External sharing is completely disabled.

AnswerD

This is correct. The policy sets sharingCapability to Disabled and allowExternalSharing to false, which completely turns off external sharing for the tenant or site. No new guest invites can be sent, no external links can be created, and existing external access will be blocked, while internal sharing continues to work normally.

Why this answer

The policy JSON snippet sets the 'sharingCapability' to 'Disabled', which completely disables external sharing for the SharePoint environment. This means no external users can be invited, and any existing external sharing links will cease to function. The 'expirationTime' value of 30 days is irrelevant because sharing is disabled entirely.

Exam trap

The trap here is that candidates see the 'expirationTime' of 30 days and assume external sharing is allowed with an expiration, but they overlook that the 'sharingCapability' is set to 'Disabled', which nullifies any expiration settings.

How to eliminate wrong answers

Option A is wrong because it suggests external sharing is allowed only for existing guests with a 30-day expiration, but the policy disables sharing entirely, not just for new guests. Option B is wrong because it implies external sharing is allowed with a 30-day guest expiration, but the 'sharingCapability' is set to 'Disabled', overriding any expiration settings. Option C is wrong because it claims sharing is allowed only for users in the same tenant, which is the default behavior when external sharing is disabled; however, the policy explicitly disables all sharing, not just external.

Practice this question →

113

MCQhard

An organization uses Microsoft 365 E5 and wants to implement a solution that automatically detects and remediates security incidents across identities, endpoints, and email. Which Microsoft 365 service should they use?

A.Microsoft Defender XDR

B.Microsoft Defender for Endpoint

C.Microsoft Sentinel

D.Microsoft Entra ID Protection

AnswerA

Microsoft Defender XDR is the correct choice because it natively unifies telemetry from Microsoft 365 E5 across endpoints, email, identities, cloud apps, and data into a single incident queue. Its AI-driven correlation and automated response capabilities allow security teams to detect and remediate multi-stage attacks that span these domains, which is the very definition of extended detection and response (XDR).

Why this answer

Microsoft Defender XDR (Extended Detection and Response) is the correct choice because it provides a unified, cross-domain security solution that automatically correlates alerts and orchestrates remediation across identities, endpoints, email, and cloud apps. This aligns directly with the requirement to detect and remediate security incidents across identities, endpoints, and email, leveraging the Microsoft 365 Defender portal to break down silos between individual security products.

Exam trap

The trap here is that candidates often confuse Microsoft Defender XDR with its individual component products (like Defender for Endpoint or Defender for Office 365), mistakenly assuming that a single-domain solution can meet a cross-domain requirement, or they overestimate Microsoft Sentinel's out-of-the-box automation capabilities versus its actual SIEM-centric, custom-playbook nature.

How to eliminate wrong answers

Option B (Microsoft Defender for Endpoint) is wrong because it focuses solely on endpoint detection and response (EDR) for devices, lacking the cross-domain correlation and automated remediation for identities and email that the question specifies. Option C (Microsoft Sentinel) is wrong because it is a cloud-native SIEM (Security Information and Event Management) that ingests logs and requires custom analytics rules and playbooks for automation; it does not provide built-in, automatic cross-domain incident correlation and remediation across identities, endpoints, and email out of the box. Option D (Microsoft Entra ID Protection) is wrong because it is limited to identity-based risk detection and conditional access policies for user accounts, with no capability to monitor or remediate threats on endpoints or in email.

Practice this question →

114

MCQmedium

A company wants to securely share a large video file (2 GB) with an external partner without using email attachments. Which Microsoft 365 service should they use?

A.Microsoft SharePoint

B.Microsoft Teams

C.Microsoft Stream

D.Microsoft OneDrive

AnswerD

Microsoft OneDrive provides personal cloud storage with a dedicated 'Share' workflow that generates secure links for external recipients, including an option to set an expiry date and require a password. A 2GB file is well within OneDrive's file-size limit of 250GB, and the service supports both view and edit permissions without requiring external users to have a Microsoft account. This makes OneDrive the optimal choice for a single, secure, ad-hoc large-file transfer to an external partner.

Why this answer

Microsoft OneDrive is the correct choice because it allows sharing large files (up to 250 GB per file) via secure, expiring links with external users, without relying on email attachments. It integrates with Azure AD for access control and supports granular permissions like view or edit, making it ideal for ad-hoc external file sharing.

Exam trap

The trap here is that candidates often confuse Microsoft Stream as the service for sharing video files because of the word 'video,' but Stream is for hosting and streaming, not for secure file sharing with external partners, which requires a storage and sharing service like OneDrive.

How to eliminate wrong answers

Option A is wrong because Microsoft SharePoint is designed for team collaboration and document management within a site, not for ad-hoc sharing of a single large file with an external partner; it requires setting up a site and managing permissions, which is overkill for this scenario. Option B is wrong because Microsoft Teams is a chat-based collaboration platform that uses SharePoint or OneDrive for file storage; sharing a 2 GB file via Teams would still rely on underlying storage and is not optimized for direct external sharing without a Teams guest account. Option C is wrong because Microsoft Stream is a video hosting and management service for enterprise video content, not for sharing raw video files; it is designed for streaming and playback, not secure file download or external partner access.

Practice this question →

115

MCQmedium

A team wants to build a custom business app to track inventory with minimal custom code. They need a cloud-based database that can store structured data and is tightly integrated with the low-code app platform. Which Microsoft 365 service should they use as the database?

A.Microsoft Dataverse

B.Microsoft SharePoint Online list

C.Microsoft Excel Online

D.Microsoft Forms

AnswerA

Microsoft Dataverse is the correct choice because it serves as the enterprise-grade data platform beneath the Power Platform, providing relational tables, rich metadata, security roles, and built-in business rules that are essential for a custom inventory-tracking app. It supports calculated columns, rollup fields, and relationships between products, warehouses, and stock transactions — capabilities that go beyond simple file storage. Dataverse integrates natively with Power Apps and Power Automate, enabling low-code app logic without requiring a custom database. Because it offers row-level security and auditing, it satisfies compliance and scalability needs for multi-user business applications.

Why this answer

Microsoft Dataverse is the correct choice because it is a cloud-based, scalable data service designed specifically for Power Platform and Microsoft 365 low-code app development. It stores structured data in tables with rich metadata, supports relationships, business logic, and security at the row/column level, and integrates natively with Power Apps, Power Automate, and Power BI. This tight integration enables building custom business apps with minimal code, exactly as required for inventory tracking.

Exam trap

MS-900 often tests the misconception that SharePoint lists or Excel are sufficient databases for low-code apps, but the exam expects candidates to recognize Dataverse as the dedicated, scalable database service for Power Platform.

How to eliminate wrong answers

Option B is wrong because SharePoint Online lists, while integrated with Power Apps, are not a true relational database and have limitations in data types, relationships, and scalability for complex inventory scenarios; they are better for simple lists and document management. Option C is wrong because Excel Online is a spreadsheet tool, not a database; it lacks relational integrity, concurrency controls, and robust security, and is not designed for building custom business apps with minimal code. Option D is wrong because Microsoft Forms is a data collection tool for surveys and quizzes, not a database; it cannot store structured relational data or serve as a backend for custom apps.

Practice this question →

116

MCQmedium

A company's IT team needs to provide employees with a single place to access all their Microsoft 365 applications, recent documents, and personalized content from any device. Which Microsoft 365 component should they promote as the primary entry point?

A.Microsoft 365 admin center

B.Microsoft SharePoint Online

C.Microsoft 365 Copilot

D.Microsoft 365 home page (office.com)

AnswerD

The Microsoft 365 home page at office.com is the personalized portal that gives users a single launchpad for all their Microsoft 365 apps, recent and shared documents, and recommended content. It works from any device through a browser and adapts to the user's activity, making it the appropriate primary entry point for employees.

Why this answer

The Microsoft 365 home page at office.com is designed as the personalized, cross-device launchpad that aggregates all Microsoft 365 apps, recent documents, and recommended content for each user. The admin center is for administrators, Copilot is an AI assistant within apps, and SharePoint Online is a collaboration and content platform, so none of them serves as the unified end-user portal.

Exam trap

The trap here is equating the administrative management portal with the end-user productivity portal, leading to selection of the Microsoft 365 admin center instead of the personalized office.com experience.

Practice this question →

117

MCQmedium

You need to ensure that only authorized users from your tenant can access a SharePoint site. Which setting should you configure?

A.External sharing settings

B.Sensitivity labels

C.Conditional Access policy

D.Sharing links expiration

AnswerA

External sharing settings in SharePoint and OneDrive define the maximum level of external access allowed for a site, ranging from 'Anyone' (anonymous links) to 'Only people in your organization.' By configuring these settings at the tenant or site-collection level, administrators can prevent unauthorized external users from using anonymous or guest links. This is the definitive control for restricting site access to authorized users only.

Why this answer

External sharing settings control who outside your tenant can access SharePoint sites, files, and folders. By configuring these settings at the tenant or site level, you can restrict access to only authorized users from your tenant, blocking external users entirely. This is the direct mechanism for limiting access to internal users only.

Exam trap

The trap here is that candidates confuse external sharing settings with Conditional Access policies, thinking that CA policies can block external users from accessing SharePoint, when in fact CA policies apply to all users (including internal) and do not control the sharing invitation process.

How to eliminate wrong answers

Option B is wrong because sensitivity labels enforce classification and protection (encryption, watermarking) on content, not access control for external users. Option C is wrong because Conditional Access policies govern authentication and device compliance for all users, but they do not specifically block or allow external sharing of SharePoint sites. Option D is wrong because sharing links expiration controls how long a shared link is valid, not who can access the site; it does not prevent external users from being invited.

Practice this question →

118

Multi-Selectmedium

A project team needs to collaborate on Teams channel conversations and meetings and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Select 2 answers

A.Microsoft Teams

B.SharePoint Online document storage

C.Microsoft Purview eDiscovery case

D.Exchange anti-malware policy

AnswersA, B

Microsoft Teams supplies persistent channel conversations and scheduled meetings, forming the collaboration hub the project team needs. This satisfies the stem's requirement for channel discussions and meetings, while file co-authoring is delivered through the integrated SharePoint and Office workloads.

Why this answer

Microsoft Teams (A) is correct because it is the Microsoft 365 service that provides channel conversations, chat, and meetings, which directly satisfy the collaboration and meeting requirements. SharePoint Online document storage (B) is correct because Teams channels are backed by SharePoint Online, and SharePoint provides the co-authoring and versioned document storage for the related Office files. Microsoft Purview eDiscovery case (C) is not relevant because it is used for legal hold, search, and investigation of content, not for day-to-day collaboration or co-authoring.

Exchange anti-malware policy (D) is not relevant because it protects mail flow from malicious attachments and links, not Teams conversations, meetings, or Office file co-authoring.

Exam trap

The trap here is that candidates may think Microsoft Teams alone covers all collaboration needs, forgetting that SharePoint Online is the underlying file storage and co-authoring engine for Teams channel files.

Practice this question →

119

Multi-Selecthard

Which THREE Microsoft 365 services can be used to store and manage files in the cloud?

Select 3 answers

A.OneDrive for Business

B.Microsoft Teams

C.Power BI

D.SharePoint

E.Exchange Online

AnswersA, B, D

OneDrive for Business provides each Microsoft 365 user a personal, cloud-hosted library for storing work files. It includes a sync client that mirrors local folders to the cloud, enables granular sharing, and integrates deeply with Office apps. Because it is a true storage service with quota and retention controls, it directly satisfies the question's requirement to store and manage files online.

Why this answer

OneDrive for Business is a cloud storage service that allows users to store, sync, and share files individually. It is part of Microsoft 365 and provides personal storage with up to 1 TB per user, integrating with Office apps for real-time co-authoring.

Exam trap

The trap here is that Microsoft Teams is listed as a correct answer because it can store files via its Files tab (which actually uses SharePoint or OneDrive under the hood), but candidates often confuse Teams as a primary storage service rather than a collaboration hub that relies on underlying storage services.

Practice this question →

120

MCQhard

Your organization uses Microsoft 365 and wants to ensure that only managed devices can access corporate email in Exchange Online. Which conditional access policy setting should you configure?

A.Require device to be marked as compliant

B.Require approved client app

C.Require device to be joined to Azure AD

D.Require multi-factor authentication

AnswerA

Conditional Access with the 'Require device to be marked as compliant' grant checks the device's compliance status as evaluated by Microsoft Intune compliance policies. This status is only available for devices enrolled in Intune that meet rules like OS version, encryption, and threat-signal requirements. By enforcing this grant, only healthy, policy-verified devices can access email, blocking unmanaged or non-compliant devices.

Why this answer

The 'Require device to be marked as compliant' setting in a Conditional Access policy integrates with Microsoft Intune to enforce that only devices meeting compliance policies (e.g., encryption, OS version, jailbreak detection) can access Exchange Online. This ensures corporate email is accessible only from managed, trusted devices, directly addressing the requirement.

Exam trap

The trap here is that candidates often confuse 'device compliance' with 'device join status' or 'app protection,' mistakenly selecting Azure AD join or approved client app when the question specifically targets managed device enforcement via compliance policies.

How to eliminate wrong answers

Option B is wrong because 'Require approved client app' controls which applications (e.g., Outlook mobile) can access data, not the device's management state; a device could be unmanaged but still use an approved app. Option C is wrong because 'Require device to be joined to Azure AD' enforces that the device is registered in Azure AD, but it does not verify compliance with security policies like encryption or patch levels. Option D is wrong because 'Require multi-factor authentication' adds an identity verification layer but does not restrict access based on device management or compliance status.

Practice this question →

121

MCQhard

A financial services firm must comply with regulatory requirements that prevent accidental sharing of sensitive customer data via email. They need to automatically detect and block emails containing credit card numbers sent to external recipients. Which Microsoft 365 service should they configure?

A.Microsoft Defender XDR

B.Microsoft Purview

C.Microsoft Intune

D.Microsoft Entra ID

AnswerB

Microsoft Purview is the Microsoft 365 data governance and compliance solution that specifically includes Data Loss Prevention (DLP) capabilities for Exchange Online. Purview DLP policies can apply sensitive information types, trainable classifiers, and exact data match to email content and enforce actions such as blocking transmission, encrypting the message, or alerting a compliance officer. This directly enables a financial services firm to meet regulatory obligations by detecting and preventing the exfiltration of sensitive data in email.

Why this answer

Microsoft Purview (formerly Microsoft 365 Compliance) includes Data Loss Prevention (DLP) policies that can automatically detect sensitive data types, such as credit card numbers, in emails and block them from being sent to external recipients. This directly addresses the regulatory requirement to prevent accidental sharing of sensitive customer data via email.

Exam trap

The trap here is that candidates often confuse Microsoft Defender XDR (security threat detection) with Microsoft Purview (compliance and data protection), leading them to choose Defender for a data loss prevention scenario instead of the correct compliance service.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender XDR is a security solution focused on threat detection, investigation, and response across endpoints, email, and identities, not on compliance-driven data loss prevention for sensitive content like credit card numbers. Option C is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service for managing devices and apps, not for inspecting email content or enforcing DLP rules. Option D is wrong because Microsoft Entra ID (formerly Azure AD) is an identity and access management service handling authentication and authorization, not email content inspection or DLP policy enforcement.

Practice this question →

122

MCQeasy

A user needs to co-author a Word document stored in Microsoft SharePoint Online with external partners who do not have Microsoft 365 licenses. What must the administrator enable?

A.External sharing in SharePoint Online

B.Azure AD B2B collaboration

C.Anonymous access links for documents

D.Guest access in Microsoft Teams

AnswerA

External sharing in SharePoint Online is the correct mechanism because it allows sharing a Word document stored in a SharePoint site or OneDrive with authenticated external users. By configuring the sharing settings to grant edit permissions, external users can open the document in the Office desktop, web, or mobile apps and co-author in real time. This feature specifically applies to document-level collaboration in SharePoint, making it the direct and appropriate solution.

Why this answer

External sharing in SharePoint Online must be enabled at the tenant or site level to allow users to share documents with external partners who lack Microsoft 365 licenses. This setting controls the ability to send sharing invitations or generate shareable links for people outside the organization, which is the prerequisite for co-authoring with unlicensed external users.

Exam trap

The trap here is that candidates confuse Azure AD B2B collaboration as a separate setting that must be enabled, when in fact it is automatically activated once SharePoint external sharing is turned on, making the direct answer the SharePoint-level sharing configuration.

How to eliminate wrong answers

Option B is wrong because Azure AD B2B collaboration is the underlying identity mechanism that SharePoint external sharing uses, but it is not a setting an administrator must explicitly enable for this scenario—it is automatically available when external sharing is turned on. Option C is wrong because anonymous access links allow anyone with the link to view or edit the document without authentication, which is not the same as co-authoring with specific named external partners who need to sign in with a Microsoft account or one-time passcode. Option D is wrong because guest access in Microsoft Teams is a separate feature for inviting external users to Teams channels and chats, not for co-authoring a Word document stored in SharePoint Online.

Practice this question →

123

MCQeasy

A small business with 10 employees wants to use professional email with custom domain, web versions of Office apps, and 1 TB of cloud storage per user. Which Microsoft 365 plan meets these requirements?

A.Microsoft 365 Apps for Business

B.Microsoft 365 E3

C.Microsoft 365 Business Standard

D.Microsoft 365 Business Basic

AnswerD

Microsoft 365 Business Basic is the correct choice because it includes Exchange Online for professional email on a custom domain, Microsoft Teams, SharePoint, and web-based Office apps, plus 1 TB of OneDrive storage per user. This plan meets the small business's stated need for professional communication and collaboration at a lower per-user price than plans with desktop applications. The absence of desktop Office apps is acceptable because the situation calls for cloud-based productivity rather than locally installed software.

Why this answer

Microsoft 365 Business Basic provides professional email with a custom domain (Exchange Online), web versions of Office apps (Office for the web), and 1 TB of cloud storage per user (OneDrive for Business). This plan is designed for small businesses needing core productivity and communication tools at a lower cost, without desktop Office installations.

Exam trap

The trap here is that candidates often confuse Business Basic with Business Standard, assuming desktop Office apps are required for professional email, when Business Basic fully meets the stated needs with web-only Office apps and custom domain email.

How to eliminate wrong answers

Option A is wrong because Microsoft 365 Apps for Business includes only desktop and web versions of Office apps with 1 TB OneDrive storage, but it does not include Exchange Online for custom domain email. Option B is wrong because Microsoft 365 E3 is an enterprise plan with advanced security and compliance features, far exceeding the requirements and budget of a 10-employee small business. Option C is wrong because Microsoft 365 Business Standard includes desktop Office apps in addition to the required features, making it more expensive than necessary for a business that only needs web versions of Office apps.

Practice this question →

124

MCQmedium

A project manager needs to create a visual timeline of project tasks, dependencies, and milestones to share with stakeholders. The timeline should be embedded in the project team's SharePoint site. Which Microsoft 365 app should they use?

A.Microsoft Planner

B.Microsoft Project for the web

C.Microsoft To Do

D.Microsoft Lists

AnswerB

Project for the web is the Microsoft 365 solution that provides a true interactive timeline (Gantt) view of tasks, where you can set predecessor/successor dependencies and milestones, and it calcs scheduling automatically. It is cloud-based and can be embedded in a SharePoint page for broader visibility, making it the only listed tool that fulfills the requirement of visualizing task dependencies over time.

Why this answer

Microsoft Project for the web is the correct choice because it is designed specifically for creating Gantt charts that visualize project tasks, dependencies, and milestones over a timeline. It integrates directly with SharePoint, allowing the timeline to be embedded as a web part on a team site for stakeholder viewing.

Exam trap

The trap here is that candidates confuse Planner's 'Board view' and 'Charts' (which show simple bar charts) with a true Gantt timeline, but Planner cannot display task dependencies or milestones in a timeline format.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner provides a Kanban-style board for task assignment and tracking, but it lacks a timeline view with dependency lines and milestone markers. Option C is wrong because Microsoft To Do is a personal task management app focused on individual to-do lists, not project-level timelines or dependencies. Option D is wrong because Microsoft Lists is a data-tracking app for creating custom lists (e.g., issue trackers), but it does not natively support Gantt chart timelines or dependency visualization.

Practice this question →

125

MCQmedium

A manager wants to quickly create a survey to collect employee feedback on a new policy. The survey must automatically store responses in an Excel spreadsheet and trigger an email notification when a response is submitted. Which Microsoft 365 service should the manager use?

A.Microsoft Forms

B.Microsoft Lists

C.Microsoft Power Apps

D.Microsoft SharePoint

AnswerA

Microsoft Forms is the correct choice because it provides an out-of-the-box survey creation interface with ready-to-use question types, branching, and themes, enabling an employee feedback survey to be built in minutes. Responses are automatically collected into an Excel workbook for immediate analysis, and the built-in Power Automate integration allows you to trigger an email alert to a manager or HR whenever a new response is submitted, without writing any code.

Why this answer

Microsoft Forms is the correct choice because it is designed specifically for creating surveys and quizzes, and it natively integrates with Excel to automatically store responses in a spreadsheet. Additionally, Forms supports Power Automate flows out of the box, allowing you to trigger an email notification whenever a new response is submitted, meeting both requirements without custom development.

Exam trap

The trap here is that candidates may confuse Microsoft Lists with Forms because both can collect data, but Lists is a structured data repository, not a survey tool, and lacks the automatic Excel storage and email trigger capabilities that Forms offers through its native Power Automate integration.

How to eliminate wrong answers

Option B is wrong because Microsoft Lists is a data-tracking application for organizing information in a list format, not a survey tool; it lacks built-in survey creation and does not automatically store responses in Excel or trigger email notifications on submission. Option C is wrong because Microsoft Power Apps is a low-code platform for building custom applications, which would require significant development effort to create a survey and integrate Excel storage and email triggers, making it overkill for this simple task. Option D is wrong because Microsoft SharePoint is a content management and collaboration platform; while it can host surveys via SharePoint lists or web parts, it does not automatically store responses in Excel or provide native email notification triggers without additional configuration or Power Automate flows.

Practice this question →

126

MCQhard

Refer to the exhibit. A device management report from Microsoft Intune shows a device with non-compliant status. Which action should the administrator take to bring the device into compliance?

A.Enable BitLocker encryption

B.Force a check-in

C.Remediate jailbreak status

D.Install antivirus software

AnswerA

BitLocker Device Encryption is a required compliance setting in Microsoft Intune for Windows devices. The report shows the device as not encrypted, so enabling BitLocker directly addresses this specific noncompliance by invoking the full volume encryption process, which is often a prerequisite for conditional access policies.

Why this answer

The device is marked non-compliant because Intune's compliance policy requires BitLocker encryption on Windows devices. Enabling BitLocker satisfies that policy requirement, allowing the device to report as compliant on its next check-in.

Exam trap

The trap here is that candidates confuse a non-compliant status with a connectivity or agent issue, and choose 'Force a check-in' instead of addressing the specific missing configuration (BitLocker) that caused the non-compliance.

How to eliminate wrong answers

Option B is wrong because forcing a check-in only triggers a re-evaluation of the current state; it does not resolve the underlying missing encryption. Option C is wrong because jailbreak status applies to iOS/iPadOS devices, not Windows, and is unrelated to BitLocker compliance. Option D is wrong because antivirus software is a separate compliance setting (e.g., requiring Windows Defender or a third-party AV), but the exhibit specifically indicates a BitLocker encryption requirement, not an antivirus requirement.

Practice this question →

127

MCQmedium

A project manager needs a digital notebook where team members can capture meeting notes, add ink drawings using a stylus, and share content in real time. The solution must integrate with Microsoft Teams and support tagging for easy search. Which Microsoft 365 app is best suited?

A.OneNote

B.Word Online

C.SharePoint Wiki

D.Microsoft Lists

AnswerA

OneNote is a dedicated digital notebook that combines native inking support with real-time co-authoring, hierarchical sections/pages, and tag-based organization. Its free-form canvas allows meeting attendees to sketch diagrams, annotate shared notes, and sync seamlessly across devices via OneDrive, making it the correct choice for collaborative note-taking with hand-drawn content.

Why this answer

OneNote is the best fit because it provides a digital notebook with support for ink drawings via stylus, real-time collaboration, and tagging for search. It integrates natively with Microsoft Teams through the OneNote tab, allowing team members to capture and share meeting notes directly within Teams channels.

Exam trap

The trap here is that candidates may confuse Word Online's co-authoring capabilities with OneNote's specialized notebook features, overlooking the specific requirements for ink drawings and tagging that are native to OneNote.

How to eliminate wrong answers

Option B (Word Online) is wrong because while it supports real-time co-authoring and basic drawing tools, it lacks a dedicated notebook structure for organizing meeting notes and does not support ink drawings with a stylus as seamlessly as OneNote. Option C (SharePoint Wiki) is wrong because it is a web-based wiki for static content, not a real-time collaborative notebook, and it does not support stylus input or tagging for search in the same way. Option D (Microsoft Lists) is wrong because it is designed for tracking and organizing data in list format, not for capturing freeform meeting notes with ink drawings or real-time sharing.

Practice this question →

128

MCQeasy

A user needs to create a form to collect feedback from customers. The responses should be automatically stored in an Excel spreadsheet in OneDrive. Which Microsoft 365 app should they use?

A.Microsoft Lists

B.Microsoft Forms

C.Microsoft Power Apps

D.Microsoft Sway

AnswerB

Microsoft Forms is the correct tool because it is a purpose-built survey and quiz service within Microsoft 365, designed specifically for creating feedback forms with multiple question types, branching logic, and anonymous response settings. When users submit responses, Forms automatically compiles them into an Excel workbook, enabling easy analysis and visualization without requiring additional customization. Its straightforward workflow — create, distribute, collect, and export — directly matches the stated need to collect feedback from customers.

Why this answer

Microsoft Forms is the correct app because it is specifically designed for creating surveys, quizzes, and feedback forms, and it natively integrates with Excel to automatically store responses in a spreadsheet hosted on OneDrive. This meets the user's requirement without additional configuration or custom development.

Exam trap

The trap here is that candidates may confuse Microsoft Lists with Forms because both can collect data, but Lists requires manual setup for Excel export and lacks the automatic, one-click response-to-Excel workflow that Forms provides.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a tracking and organization app for managing data in list format (e.g., issue tracking, inventory), not for creating forms with automatic Excel storage. Option C is wrong because Microsoft Power Apps is a low-code platform for building custom business applications, which is overkill and not the intended tool for simple form creation and Excel integration. Option D is wrong because Microsoft Sway is a presentation and storytelling app for creating interactive reports and newsletters, not for collecting form responses or storing them in Excel.

Practice this question →

129

MCQeasy

A project manager needs to create a shared workspace for a cross-functional team to manage tasks, share files, track deadlines, and have threaded conversations. Which Microsoft 365 app should be the primary platform for this workspace?

A.Microsoft SharePoint

B.Microsoft Teams

C.Microsoft Planner

D.Microsoft To Do

AnswerB

Microsoft Teams is designed specifically as a shared workspace, offering persistent channels with threaded conversations, native file sharing and co-authoring via the SharePoint-backed Files tab, and integration of Planner tasks through the Tasks by Planner and To Do app. This convergence of chat, files, meetings, and tasks within a single interface makes it the ideal hub for a cross-functional team. Additionally, Teams supports multiple channels for distinct workstreams, ensuring that communication and collaboration are contextual and organized, which is exactly what dynamic team environments need.

Why this answer

Microsoft Teams is the correct primary platform because it integrates chat, threaded conversations, file sharing, task management (via integrated Planner or Tasks by Planner and To Do), and deadline tracking into a single shared workspace. Unlike SharePoint, which is a document management and intranet platform, Teams provides a real-time collaboration hub with persistent threaded conversations and direct task assignment capabilities, making it ideal for cross-functional team coordination.

Exam trap

The trap here is that candidates often confuse SharePoint as the primary collaboration workspace because it is a powerful content management platform, but the question specifically requires threaded conversations and real-time task management, which are native to Teams, not SharePoint.

How to eliminate wrong answers

Option A is wrong because Microsoft SharePoint is a document management and intranet portal platform focused on content storage, version control, and site-based collaboration, not a real-time workspace with threaded conversations and integrated task management. Option C is wrong because Microsoft Planner is a lightweight task management tool that provides Kanban boards and task assignments but lacks native threaded conversations, file sharing, and a persistent chat workspace. Option D is wrong because Microsoft To Do is a personal task management app designed for individual productivity and list-based task tracking, not for team collaboration, shared workspaces, or threaded conversations.

Practice this question →

130

MCQmedium

A sales team needs to track leads, manage customer contact information, record interactions, and automate follow-up email sequences. Which Microsoft 365 app should they use as the primary platform?

A.Microsoft Dynamics 365 Sales

B.Microsoft Power Automate

C.Microsoft SharePoint

D.Microsoft Teams

AnswerA

Microsoft Dynamics 365 Sales is the dedicated customer relationship management (CRM) solution for sales teams, built on the Microsoft Dataverse. It includes native lead and opportunity entities, configurable business process flows, activity tracking, and embedded email integration so salespeople can log every customer interaction and move deals through defined pipelines. Because it is a model-driven app, you get built-in security roles, relationship hierarchies, and a reporting layer specifically tailored to sales metrics, making it the correct choice for managing leads and customer contact information.

Why this answer

Microsoft Dynamics 365 Sales is a customer relationship management (CRM) application specifically designed to manage leads, track customer contact information, record interactions, and automate sales processes such as follow-up email sequences. It provides built-in lead scoring, opportunity management, and workflow automation that directly match the sales team's requirements, making it the correct primary platform.

Exam trap

The trap here is that candidates often confuse Microsoft Power Automate as the primary tool for automation, overlooking that Dynamics 365 Sales provides the CRM foundation needed to manage leads and contacts, while Power Automate is only an add-on for extending workflows.

How to eliminate wrong answers

Option B is wrong because Microsoft Power Automate is a workflow automation tool that can create flows to trigger actions, but it is not a primary platform for managing leads, contacts, or interactions; it lacks native CRM data models and lead management features. Option C is wrong because Microsoft SharePoint is a document management and collaboration platform focused on content storage, sharing, and intranet sites, not designed for tracking sales leads or automating email sequences. Option D is wrong because Microsoft Teams is a chat-based collaboration workspace for real-time communication and meetings, not a CRM system capable of managing customer relationships or automating sales workflows.

Practice this question →

131

MCQeasy

A small law firm uses Microsoft 365 Business Premium. The partners want to ensure that all confidential client documents stored in SharePoint Online are protected with encryption at rest and that they can classify and label documents to restrict access. Which Microsoft 365 feature should they use?

A.Exchange Online transport rules

B.Microsoft Purview Information Protection sensitivity labels

C.Microsoft Defender for Office 365 safe attachments

D.SharePoint Online site-level permissions

AnswerB

Sensitivity labels in Microsoft Purview Information Protection allow organizations to classify and protect documents and emails by applying encryption, access restrictions, and visual markings. In SharePoint Online, labels can enforce encryption at rest and control who can access content. This directly meets the law firm's need to classify and label confidential documents to restrict access while ensuring encryption.

Why this answer

Microsoft Purview Information Protection sensitivity labels are the correct choice because they enable classification, labeling, and encryption of documents in SharePoint Online, ensuring confidential client files are protected and access is restricted. Site permissions, Safe Attachments, and transport rules do not provide document-level classification and encryption.

Exam trap

The trap here is assuming that SharePoint permissions alone provide document encryption and classification, when they only control site access and do not label or encrypt individual files.

Practice this question →

132

MCQmedium

A company uses Microsoft 365 and wants to create a custom app to automate expense report approvals without writing code. Which service should they use?

A.SharePoint Designer

B.Azure Logic Apps

C.Power Automate

D.Power Apps

AnswerD

Power Apps is the correct answer because it is the Microsoft Power Platform's low-code application development service, purpose-built for creating custom business apps without extensive coding. It provides both canvas apps, which give designers pixel-level control over the user interface, and model-driven apps, which are built on Dataverse and automatically generate a responsive, data-centric UI. Power Apps integrates directly with Microsoft 365 data sources like SharePoint, Dynamics 365, and hundreds of other connectors, making it the ideal tool for organizations that need a custom app within the Microsoft ecosystem.

Why this answer

Power Apps is the correct choice because it enables users to build custom business applications with a low-code or no-code approach, integrating directly with Microsoft 365 data sources like SharePoint and Outlook. For automating expense report approvals, Power Apps can create a custom app that triggers approval workflows via Power Automate, all without writing traditional code.

Exam trap

The trap here is confusing Power Automate (which automates workflows) with Power Apps (which builds custom apps), as both are part of the Power Platform and often used together, but only Power Apps provides the user interface for a custom app.

How to eliminate wrong answers

Option A is wrong because SharePoint Designer is a legacy tool for customizing SharePoint workflows and forms, but it requires code-like actions and is deprecated for new development. Option B is wrong because Azure Logic Apps is a cloud-based integration service for automating workflows across enterprise systems, but it is more complex and code-oriented than needed for a simple no-code custom app. Option C is wrong because Power Automate is a workflow automation service that can handle approval processes, but it does not create custom apps with user interfaces; it focuses on automating flows between services.

Practice this question →

133

MCQmedium

A sales manager wants to create a visual representation of the sales pipeline, including stages, deal values, and win probability. They want to share this interactive chart with the team via a web link that updates automatically from the underlying data in Microsoft Lists. Which Microsoft 365 app should they use?

A.Microsoft Power BI

B.Microsoft Excel

C.Microsoft Forms

D.Microsoft SharePoint

AnswerA

Power BI is the correct choice because it has a native Microsoft Lists connector that lets you ingest pipeline data directly into a data model, then build interactive dashboards with slicers, drill-throughs, and cross-filtering. Once published to the Power BI Service, the report is accessible via a secure web link, and a scheduled refresh can automatically pull updated list data without manual exports or file re-uploads.

Why this answer

Power BI is Microsoft's dedicated business intelligence and data visualization service, designed to build interactive dashboards and reports from data sources such as Microsoft Lists, Excel, and SharePoint. It supports automatic refresh schedules and can publish reports to a web link (Publish to web) that updates as the underlying data changes. This directly satisfies the sales manager's requirement for an interactive, auto-updating pipeline visualization.

Exam trap

MS-900 often tests the confusion between Excel's charting capabilities and Power BI's dedicated BI/auto-refresh features, tempting candidates to pick Excel for 'visualization' questions.

How to eliminate wrong answers

Option B is wrong because Excel can create charts and even publish to the web, but it is a spreadsheet application, not a dedicated BI tool, and its web-published charts do not refresh automatically from Microsoft Lists without manual republishing or Power BI integration. Option C is wrong because Microsoft Forms is a survey/quiz tool for collecting responses, not for visualizing or sharing data pipelines. Option D is wrong because SharePoint is a collaboration and document management platform; while it can host lists and embed web parts, it does not natively produce interactive, auto-refreshing BI visualizations of the kind described.

Practice this question →

134

MCQhard

A financial services firm uses Microsoft 365 E5. Compliance officers must ensure that sensitive client data in Exchange Online, SharePoint Online, and OneDrive for Business is classified and protected consistently, and that documents are labeled with protection settings that travel with the file. Which Microsoft 365 service should they implement?

A.Microsoft Purview Information Protection

B.Microsoft Purview Data Loss Prevention

C.Microsoft Purview eDiscovery

D.Microsoft Defender for Office 365

AnswerA

Microsoft Purview Information Protection provides sensitivity labels and encryption that classify and protect data across Exchange Online, SharePoint Online, OneDrive, and Office apps. Labels can apply persistent protection that travels with the file, even when it is shared externally, which directly meets the compliance officers' requirement for consistent classification and protection of sensitive client data.

Why this answer

Microsoft Purview Information Protection delivers sensitivity labels and encryption that classify and protect content across Exchange Online, SharePoint Online, OneDrive, and Office apps, with protection that persists when files are shared. Data Loss Prevention, Defender for Office 365, and eDiscovery address blocking risky sharing, threat protection, and legal investigations respectively, but none provides the labeling and persistent protection the compliance officers need.

Exam trap

The trap here is assuming that any Microsoft Purview workload that mentions sensitive data, such as Data Loss Prevention, can classify and encrypt documents, when labeling and persistent protection are specifically the domain of Information Protection.

Practice this question →

135

MCQmedium

A project manager wants to create a collaborative workspace that includes a shared calendar, a document library, and a task list. The workspace should be accessible from within Microsoft Teams and allow team members to discuss topics in a threaded conversation. Which Microsoft 365 service should they use as the foundation?

A.Microsoft Teams with a channel

B.SharePoint Team Site

C.Microsoft Planner

D.Microsoft Viva Engage Community

AnswerB

A SharePoint Team Site is the correct choice because it natively provides a shared calendar list, a document library, and task management capabilities in one place. This team site can be connected to Microsoft Teams for chat and meetings, but the calendar and files live in SharePoint, making it the actual collaboration workspace. It fully satisfies the requirement of a shared calendar without relying on external services.

Why this answer

A SharePoint Team Site provides the foundational structure for a collaborative workspace with a shared calendar, document library, and task list. It integrates natively with Microsoft Teams, allowing the workspace to be accessed via a Teams channel, and supports threaded conversations through the connected Teams channel or Yammer web parts. This makes it the correct choice for the described requirements.

Exam trap

The trap here is that candidates often confuse a Microsoft Teams channel (Option A) as the workspace itself, not realizing that the channel is merely a collaboration layer that depends on SharePoint for persistent storage and structured components like calendars and document libraries.

How to eliminate wrong answers

Option A is wrong because a Microsoft Teams channel is a communication interface within a team, not a standalone workspace; it relies on an underlying SharePoint site for document libraries, calendars, and task lists. Option C is wrong because Microsoft Planner is a task management tool that provides task lists and boards but lacks a shared calendar and document library, and it does not serve as a full collaborative workspace foundation. Option D is wrong because Microsoft Viva Engage Community is designed for broad organizational discussions and social networking, not for structured collaboration with a shared calendar, document library, and task list within a Teams channel.

Practice this question →

136

MCQmedium

A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?

A.Microsoft Teams

B.Microsoft Viva Engage

C.SharePoint Online

D.Outlook

AnswerB

Microsoft Viva Engage is an enterprise social network that allows organizations to create company-wide announcements, topic-based communities, and integrate with other apps like SharePoint and Power BI. It is the intended service for broad employee communication.

Why this answer

Microsoft Viva Engage (formerly Yammer) is designed as a social networking and employee communication hub that provides company-wide announcements, topic-based communities, and seamless integration with SharePoint and Power BI dashboards. It focuses on fostering open communication across the organization, unlike collaboration tools that are team-centric.

Exam trap

The trap here is that candidates often confuse Microsoft Teams' 'general' channel or SharePoint's news web part with a true company-wide social hub, but Viva Engage is the only service purpose-built for open, topic-based communities and organization-wide announcements with native integration to SharePoint and Power BI.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is primarily a chat-based collaboration workspace for teams and channels, not a central hub for company-wide announcements and topic-based communities; it lacks the enterprise social network features like broadcast announcements to the entire organization. Option C is wrong because SharePoint Online is a document management and intranet platform that can host announcements and dashboards but is not specifically designed as a social communication hub with topic-based communities and company-wide feeds. Option D is wrong because Outlook is an email and calendar client, not a platform for topic-based communities or integrated social networking; it cannot replace the community-driven, announcement-focused functionality of Viva Engage.

Practice this question →

137

MCQeasy

A public relations team needs to create an interactive, visually rich newsletter that includes embedded video and dynamic content from a SharePoint list. Which app should they use?

A.Sway

B.PowerPoint

C.SharePoint News

D.Microsoft Stream

AnswerA

Sway's card-based, responsive canvas is purpose-built for interactive digital storytelling; it automatically rearranges text, images, and embedded video into a fluid layout that adapts to any device. It supports direct embedding of dynamic SharePoint content and social media, requiring no manual updates, making it the ideal choice for a visually engaging newsletter.

Why this answer

Sway is the correct choice because it is designed specifically for creating interactive, visually rich newsletters that can embed videos and dynamically pull content from SharePoint lists using its integration with Microsoft 365. Unlike other apps, Sway offers a responsive design canvas that adapts to different devices and allows embedding of multimedia elements directly, making it ideal for a public relations team's needs.

Exam trap

The trap here is that candidates often confuse SharePoint News with Sway because both can display news and embed videos, but SharePoint News is a site-level feature for internal communications, not a standalone app for creating interactive, visually rich newsletters with dynamic content from SharePoint lists.

How to eliminate wrong answers

Option B (PowerPoint) is wrong because it is a presentation tool focused on slide-based content, not a newsletter format, and lacks native support for dynamically pulling content from SharePoint lists without complex add-ins. Option C (SharePoint News) is wrong because while it can display news posts and embed videos, it does not provide the same level of interactive, visually rich design flexibility as Sway and is more suited for internal communications within a SharePoint site. Option D (Microsoft Stream) is wrong because it is a video hosting and management platform, not a content creation tool for newsletters, and cannot generate interactive documents with embedded dynamic content from SharePoint lists.

Practice this question →

138

MCQeasy

A sales team wants to maintain a shared list of high-priority leads with custom columns for company name, contact person, deal value, and stage. Team members need to update the list in real time and view the change history. Which Microsoft 365 app should they use?

A.Microsoft Lists

B.Microsoft Excel

C.Microsoft SharePoint

D.Microsoft Teams

AnswerA

Microsoft Lists is the dedicated list management app in Microsoft 365, purpose-built for tracking structured data like a high-priority sales target list. It offers rich column types (choice, person, date), custom views, conditional formatting, item-level versioning, and real-time co-authoring. Because Lists stores data in SharePoint but exposes a simplified UI, it gives the sales team immediate collaboration without requiring a full SharePoint site design.

Why this answer

Microsoft Lists is the M365 app purpose-built for shared, structured lists with custom columns, real-time co-authoring, and built-in version history. It supports column types such as text, choice, person, currency, and date, and integrates with Teams and SharePoint. This matches the sales team's need for a shared, editable lead tracker with change history.

Exam trap

The trap is choosing Excel because it is familiar for tabular data; the exam expects you to recognize that shared lists with custom columns and version history are the domain of Microsoft Lists.

How to eliminate wrong answers

Option B is wrong because Excel is a spreadsheet, not a shared list app; while co-authoring is supported, it lacks the structured list semantics, per-item version history, and Teams integration that Microsoft Lists provides. Option C is wrong because SharePoint is the underlying platform that hosts lists, but the user-facing app for creating and managing them is Microsoft Lists; SharePoint alone is too broad and does not directly answer the app question. Option D is wrong because Microsoft Teams is a collaboration hub that can host a Lists tab, but it is not the app used to create and manage the list itself.

Practice this question →

139

MCQeasy

An organization wants to use Microsoft 365 to automatically classify and protect sensitive data in emails and documents. Which service should they use?

A.Microsoft Purview Information Protection

B.Microsoft Intune

C.Microsoft Defender for Office 365

D.Microsoft Entra ID

AnswerA

Microsoft Purview Information Protection automatically classifies and protects sensitive data by applying sensitivity labels based on sensitive info types, trainable classifiers, and machine-learning models. It can trigger encryption or access restrictions immediately when content is created or edited, making it the direct answer for automatic data-level protection.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides data classification, labeling, and protection capabilities directly within Microsoft 365. It uses sensitivity labels to automatically classify emails and documents based on conditions like content patterns or custom keywords, and then applies encryption, rights management, or visual markings (e.g., headers/footers) to protect sensitive data both at rest and in transit.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Office 365 (which protects against threats) with Purview Information Protection (which classifies and protects data), leading them to select Option C because they associate 'protect' with security rather than data governance.

How to eliminate wrong answers

Option B (Microsoft Intune) is wrong because it is a mobile device management (MDM) and mobile application management (MAM) service focused on managing devices and apps, not on classifying or protecting data content within emails and documents. Option C (Microsoft Defender for Office 365) is wrong because it is a security service that protects against threats like phishing, malware, and malicious links in email and collaboration tools, but it does not perform automatic data classification or sensitivity labeling. Option D (Microsoft Entra ID) is wrong because it is an identity and access management (IAM) service that handles authentication, single sign-on, and conditional access policies, not data classification or protection of content.

Practice this question →

140

MCQhard

A large enterprise needs to enforce that all documents containing financial data are automatically classified and encrypted when shared externally. Which combination of Microsoft 365 services should be used?

A.Microsoft Forms and Microsoft Stream

B.Microsoft Sentinel and Microsoft Defender XDR

C.Microsoft Purview Information Protection and Microsoft Defender for Cloud Apps

D.Microsoft Intune and Microsoft Entra ID

AnswerC

Microsoft Purview Information Protection provides sensitivity labels that can classify and, when configured, encrypt documents using rights-management templates, while Microsoft Defender for Cloud Apps acts as a cloud access security broker to enforce policies on those labels—such as blocking download or applying visual markings. Together, they create a complete control plane that can conditionally require a label, apply automatic classification, and govern sharing behavior for documents in SharePoint, OneDrive, or third-party cloud apps. This directly enforces the enterprise requirement to protect all documents containing sensitive data.

Why this answer

Microsoft Purview Information Protection provides the classification and labeling capabilities to automatically identify documents containing financial data, while Microsoft Defender for Cloud Apps enables policy-based encryption and protection controls when those documents are shared externally. Together, they enforce data loss prevention (DLP) by applying sensitivity labels that trigger encryption upon external sharing, meeting the enterprise requirement.

Exam trap

The trap here is that candidates confuse security monitoring tools (Sentinel, Defender XDR) with data classification and encryption tools, or they mistakenly think device management (Intune) or identity (Entra ID) can enforce content-level encryption on documents shared externally.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey tool and Microsoft Stream is a video platform; neither provides document classification, encryption, or external sharing controls. Option B is wrong because Microsoft Sentinel is a SIEM/SOAR for security incident detection and Microsoft Defender XDR is for endpoint, email, and identity threat protection; they do not classify or encrypt documents based on content. Option D is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution, and Microsoft Entra ID is an identity and access management service; neither directly classifies or encrypts document content for external sharing.

Practice this question →

141

MCQmedium

A project manager wants a shared workspace where team members can create and track tasks, set deadlines, and collaborate on documents. This workspace should integrate with Microsoft Teams for quick access. Which Microsoft 365 service is best suited for this purpose?

A.Microsoft Lists

B.Microsoft Planner

C.Microsoft To Do

D.Microsoft Project Online

AnswerB

Microsoft Planner is a collaborative task management tool built around a visual Kanban board where each task has assignees, due dates, checklists, labels, and file attachments. Every Planner plan is backed by a Microsoft 365 Group, giving the team a shared mailbox, calendar, and SharePoint document library for co-authoring, and the Board can be embedded into Teams as a tab. Its simplicity and native Teams integration make it the correct choice for a shared workspace with assignments and deadlines.

Why this answer

Microsoft Planner is the correct choice because it provides a shared workspace (Plan) where team members can create and track tasks, set deadlines, and collaborate on documents. It integrates natively with Microsoft Teams via the Planner tab, allowing quick access within a Teams channel, and supports file attachments from SharePoint/OneDrive for collaboration.

Exam trap

The trap here is that candidates often confuse Microsoft Lists with Planner because both involve tracking items, but Lists is for static data collection (like a spreadsheet) while Planner is for dynamic task management with assignments and deadlines.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data-tracking app for creating custom lists (e.g., issue trackers, inventories) but lacks built-in task assignment, deadline tracking, and Kanban-style task management that Planner offers. Option C is wrong because Microsoft To Do is a personal task management tool for individual users, not designed for team collaboration or shared workspaces with document collaboration. Option D is wrong because Microsoft Project Online is a full-featured project management solution for complex scheduling, resource management, and Gantt charts, which is overkill for a simple shared workspace and does not integrate as seamlessly with Teams for quick task tracking.

Practice this question →

142

MCQmedium

A marketing manager needs to create a modern intranet site that publishes news, important announcements, and upcoming events. The site must be responsive on mobile devices and allow employees to like, comment, and share articles. Which Microsoft 365 service should they use?

A.Microsoft Teams

B.SharePoint Communication site

C.Microsoft Viva Engage

D.Microsoft Viva Connections

AnswerB

SharePoint Communication sites are the specific modern intranet site type built to broadcast information to a broad audience. They provide flexible page layouts, news web parts, audience targeting, scheduling, approval workflows, and responsive mobile rendering, making them ideal for a marketing manager publishing company news and events. These sites integrate with Viva Connections and Teams, but the communication site itself is the authoritative content repository and structured intranet destination.

Why this answer

A SharePoint Communication site is designed for broadcasting news, announcements, and events to a broad audience, with built-in support for responsive mobile rendering and social features like likes, comments, and sharing. This makes it the correct choice for a modern intranet that needs to engage employees across devices.

Exam trap

The trap here is that candidates often confuse Microsoft Viva Connections (a dashboard) with the underlying content source (SharePoint Communication site), leading them to select D when the question explicitly asks for the service used to create the intranet site.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration hub focused on persistent conversations and channel-based teamwork, not a publishing platform for news and announcements with like/comment/share capabilities. Option C is wrong because Microsoft Viva Engage (formerly Yammer) is an enterprise social network for community discussions and knowledge sharing, but it lacks the structured page publishing and modern intranet site features required for news and events. Option D is wrong because Microsoft Viva Connections is a personalized dashboard that aggregates content from SharePoint, Teams, and other sources, but it is not a site creation service itself—it depends on a SharePoint Communication site as its underlying content source.

Practice this question →

143

MCQhard

A multinational corporation wants to provide a single sign-on experience for employees accessing third-party SaaS applications alongside Microsoft 365. Which Microsoft Entra ID feature should they use?

A.Password hash synchronization

B.Microsoft Entra ID as identity provider with SSO integration

C.Multifactor authentication

D.Seamless single sign-on

AnswerB

Microsoft Entra ID as identity provider with SSO integration serves as the central cloud identity provider that supports industry-standard SSO protocols such as SAML 2.0, OpenID Connect, and WS-Fed. A user authenticates once to Entra ID and receives a session token that is accepted by thousands of pre-integrated SaaS applications, eliminating the need to sign in again to each application. This directly fulfills the multinational's requirement for single sign-on, making it the correct option.

Why this answer

Microsoft Entra ID as an identity provider with SSO integration (Option B) is correct because it allows the organization to act as the central identity source for both Microsoft 365 and third-party SaaS applications. By configuring federated SSO (using SAML 2.0 or OpenID Connect), users authenticate once against Entra ID and gain seamless access to all integrated apps, eliminating the need for separate credentials.

Exam trap

The trap here is that candidates confuse 'Seamless SSO' (Option D) with full SSO federation, but Seamless SSO only handles the initial sign-in experience on domain-joined devices and does not extend SSO to third-party SaaS applications.

How to eliminate wrong answers

Option A is wrong because password hash synchronization only syncs user password hashes from on-premises AD to Entra ID for authentication; it does not provide SSO to third-party SaaS apps on its own. Option C is wrong because multifactor authentication is a security feature that adds a second verification step, not an SSO mechanism; it can be used alongside SSO but does not enable single sign-on. Option D is wrong because Seamless SSO is a feature that automatically signs users in when they are on a domain-joined device connected to the corporate network, but it only works for Microsoft 365 and other Entra ID-integrated apps, not for third-party SaaS applications that require explicit federation.

Practice this question →

144

MCQmedium

A tenant administrator is advising a department that wants to use persistent chat, online meetings, channels, and shared files organized by project. Microsoft 365 app or service is the best fit?

A.Microsoft Forms

B.Microsoft Teams

C.Microsoft Planner

D.Microsoft Purview Audit

AnswerB

Microsoft Teams is the correct choice because it is a comprehensive collaboration hub that brings together persistent chat, meetings, video calls, channels for organized discussions, and shared file storage via SharePoint. It enables department members to work together in real time on documents, hold virtual meetings, and maintain a central repository of information—all within a single, governed platform. This matches the department's need for a unified collaboration environment.

Why this answer

Microsoft Teams is the best fit because it provides persistent chat, online meetings, channels, and shared files organized by project. Teams integrates with SharePoint for file storage and OneNote for notes, allowing each channel to have its own file repository and meeting scheduling, directly matching the department's requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task boards with project organization, but Planner lacks the persistent chat, meetings, and channel-based file sharing that Teams provides for project collaboration.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz tool, not designed for persistent chat, meetings, channels, or shared file organization. Option C is wrong because Microsoft Planner is a task management and lightweight project tracking tool that lacks persistent chat, online meetings, and channel-based file sharing. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user activities, not a collaboration platform for chat, meetings, or file organization.

Practice this question →

145

MCQmedium

A project team needs to create a central workspace where they can store project documents, assign tasks, track a shared calendar of milestones, and have threaded discussions about each item. The solution must integrate directly with Microsoft Teams. Which Microsoft 365 service provides this out-of-the-box?

A.SharePoint Online

B.Microsoft Lists

C.Planner

D.Project Online

AnswerA

SharePoint Online provides the full collaborative workspace the team needs: a team site includes document libraries for file storage and versioning, list apps for tracking tasks and issues, a shared calendar web part, and a discussion board for threaded conversations. These capabilities can also be surfaced directly inside Microsoft Teams via tabs, making SharePoint the underlying storage and permissions backbone for Teams-connected teamwork.

Why this answer

SharePoint Online provides a central workspace with document libraries for storing project documents, task lists for assignment, shared calendars for milestones, and discussion boards for threaded conversations. It integrates natively with Microsoft Teams via the SharePoint tab, allowing the team to access all these features directly within the Teams interface without additional configuration.

Exam trap

The trap here is that candidates often confuse Planner or Microsoft Lists as a complete workspace solution, but they lack the document storage, calendar, and threaded discussion capabilities that SharePoint Online provides out-of-the-box.

How to eliminate wrong answers

Option B (Microsoft Lists) is wrong because it is a data-tracking app for creating simple lists (e.g., issue trackers, inventories) but does not include document storage, shared calendars, or threaded discussions out-of-the-box. Option C (Planner) is wrong because it focuses solely on task management with Kanban boards and charts, lacking document libraries, calendars, and threaded discussions. Option D (Project Online) is wrong because it is a premium project management solution for complex scheduling and resource management, not a lightweight central workspace, and its integration with Teams requires additional connectors or third-party tools.

Practice this question →

146

MCQeasy

Your company uses Microsoft 365 Business Premium and wants to enable remote wipe of company data on employees' personal mobile devices if they are lost or stolen. Which service provides this capability?

A.Microsoft Intune Mobile Application Management (MAM)

B.Microsoft Entra ID

C.Microsoft Defender for Cloud Apps

D.Microsoft Purview Compliance Manager

AnswerA

Microsoft Intune Mobile Application Management (MAM) is the correct answer because it uses app protection policies that work directly on mobile apps, regardless of device enrollment. These policies enforce data-protection controls such as app-level PIN, encryption, and conditional launch, and critically support selective wipe, which removes only corporate data from an app like Outlook while leaving personal data intact. This makes MAM ideal for BYOD scenarios where employees access company resources from personal devices.

Why this answer

Microsoft Intune Mobile Application Management (MAM) enables selective remote wipe of company data from personal mobile devices without wiping personal data. This is achieved through app-level policies that can remove corporate data from managed apps (e.g., Outlook, Teams) when a device is lost or stolen, using the Intune company portal or a wipe command triggered by an administrator.

Exam trap

The trap here is that candidates often confuse Intune Mobile Device Management (MDM) with Mobile Application Management (MAM), assuming full device wipe is required, but the question specifically asks for selective wipe of company data on personal devices, which is a MAM capability.

How to eliminate wrong answers

Option B (Microsoft Entra ID) is wrong because it is an identity and access management service that handles authentication and authorization, not device or app data wipe capabilities. Option C (Microsoft Defender for Cloud Apps) is wrong because it focuses on cloud app discovery, data loss prevention, and threat detection, not remote wipe of company data from mobile devices. Option D (Microsoft Purview Compliance Manager) is wrong because it is a compliance management tool that helps assess and manage regulatory compliance posture, not a device management or data wipe service.

Practice this question →

147

Multi-Selecthard

Which FOUR Microsoft 365 services are part of the Microsoft Defender XDR suite?

Select 4 answers

A.Microsoft Defender for Endpoint

B.Microsoft Defender for Cloud Apps

C.Microsoft Sentinel

D.Microsoft Defender for Office 365

E.Microsoft Defender for Identity

AnswersA, B, D, E

Microsoft Defender for Endpoint natively shares endpoint telemetry with the other Defender XDR workloads, so correlated incidents and automated investigation appear in a single portal. It satisfies the stem's requirement for a constituent service of the suite, unlike standalone compliance or identity products such as Microsoft Entra ID.

Why this answer

Microsoft Defender XDR is the unified extended detection and response suite that natively correlates signals across four Defender workloads. Option A, Microsoft Defender for Endpoint, is correct because it is the endpoint detection and response (EDR) pillar that surfaces device alerts and integrates into the XDR incident queue. Option B, Microsoft Defender for Cloud Apps, is correct because it is the Cloud App Security (CASB) component that feeds SaaS and cloud-app telemetry into Defender XDR.

Option D, Microsoft Defender for Office 365, is correct because it protects email, collaboration, and Office apps (phishing, malware, URL detonation) and shares incidents with the suite. Option E, Microsoft Defender for Identity, is correct because it monitors on-premises Active Directory signals (DC sensors) to detect identity-based attacks and is a native XDR pillar. Option C, Microsoft Sentinel, is not part of Defender XDR; it is a separate cloud-native SIEM/SOAR product that can ingest Defender XDR incidents but is licensed and managed independently.

Exam trap

Candidates often mistakenly believe the suite includes only three of these four services or incorrectly include Microsoft Sentinel. In reality, all four Defender components are integral parts of Defender XDR.

Practice this question →

148

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Select 2 answers

A.SharePoint Online

B.Microsoft Lists

C.Microsoft Forms

D.Excel Online

E.Microsoft Power Apps

AnswersC, E

Microsoft Forms is the dedicated survey and form builder in Microsoft 365, purpose-built for creating quizzes, polls, and data-collection forms. It provides an intuitive designer, branching rules, built-in response analytics, and automatic export of responses to an Excel Online workbook. Because it is natively designed for building and distributing forms, it is one of the two correct services that can directly create and manage forms.

Why this answer

Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Exam trap

The trap here is that candidates may confuse Microsoft Lists or SharePoint Online as form-building tools because they can display or store form data, but they lack the native form creation and response management capabilities of Microsoft Forms.

Practice this question →

149

MCQeasy

A user reports that they cannot access their email on their mobile device. The IT administrator suspects a device compliance issue. Which Microsoft 365 service can the administrator use to check the device's compliance status?

A.Microsoft Purview compliance portal

B.Microsoft Intune

C.Microsoft Exchange admin center

D.Microsoft Defender for Cloud Apps

AnswerB

Microsoft Intune is the correct answer because it is the service that manages device compliance and integrates with Conditional Access in Microsoft Entra ID. Intune collects health and configuration signals—such as OS version, jailbreak/root status, encryption, and threat-defense status—and marks a device as compliant or noncompliant. When a user tries to access email on a mobile device, Exchange Online consults Conditional Access, which checks the device's compliance state from Intune and blocks access if the device does not meet policy. This is exactly the mechanism that would prevent a noncompliant device from reaching email.

Why this answer

Microsoft Intune is the correct tool because it is the mobile device management (MDM) and mobile application management (MAM) component of Microsoft 365. It allows administrators to define compliance policies (e.g., requiring encryption, a minimum OS version, or a healthy device attestation) and then check a device's compliance status in real time. When a device is non-compliant, Intune can block access to corporate resources like email, which matches the user's reported issue.

Exam trap

The trap here is that candidates confuse the Microsoft Purview compliance portal (which handles regulatory compliance and data protection) with device compliance (which is a mobile device management function handled exclusively by Intune).

How to eliminate wrong answers

Option A is wrong because the Microsoft Purview compliance portal focuses on data governance, eDiscovery, and compliance management (e.g., retention policies, audit logs), not on checking device compliance status for mobile access. Option C is wrong because the Microsoft Exchange admin center manages mailboxes, transport rules, and mailbox permissions, but it does not have native device compliance checking; it relies on Intune for conditional access decisions. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility into cloud app usage and threat protection, not a device compliance checker for mobile email access.

Practice this question →

150

Multi-Selectmedium

Which THREE of the following are benefits of using Microsoft Viva?

Select 3 answers

A.Detects and blocks phishing attacks.

B.Connects employees with company news and resources.

C.Improves employee engagement and well-being.

D.Provides personalized learning and skill development.

E.Backs up user data automatically.

AnswersB, C, D

Viva Connections delivers a tailored digital dashboard and feed inside Teams and SharePoint where employees see company news, policies, tasks, and useful resources from HR and leadership. It centralizes the employee experience with cards for announcements, events, and quick actions, so this is a genuine Viva benefit. This function is distinct from Viva Insights and Viva Learning, which focus on wellbeing and skill development respectively.

Why this answer

Microsoft Viva Connections provides a personalized dashboard that aggregates company news, resources, and communications from SharePoint, Yammer, and Stream, enabling employees to stay informed and engaged directly within Microsoft Teams. This integration reduces information silos and ensures timely access to relevant organizational content.

Exam trap

The trap here is that candidates may confuse Microsoft Viva's employee experience modules (Connections, Insights, Learning) with security or backup features that belong to other Microsoft 365 services like Defender or OneDrive.

Practice this question →