CCNA M365 Apps Services Questions — Page 3 of 5

151

MCQhard

An administrator creates a new team using the above JSON template via Microsoft Graph. Which statement accurately describes the team?

A.Only team owners can add new members to the team.

B.The team is a specialized team for sales data analysis.

C.The team's classification is automatically applied based on content.

D.The team is public and anyone in the organization can join.

AnswerA

isMembershipLimitedToOwners restricts member addition to owners.

Why this answer

Option A is correct because the JSON template used to create the team via Microsoft Graph includes the 'memberSettings' property with 'allowCreateUpdateChannels' and 'allowDeleteChannels' set to false, but it does not include any setting that overrides the default member permission to add members. By default in Microsoft Teams, only team owners can add new members unless the 'allowAddRemoveApps' or similar tenant-level settings are explicitly configured. The template shown does not modify the 'memberSettings' for adding members, so the default behavior applies, making A accurate.

Exam trap

The trap here is that candidates assume all teams created via Graph are public by default, but the JSON template explicitly sets 'visibility' to 'private', and the default member permissions do not include adding members unless overridden.

How to eliminate wrong answers

Option B is wrong because the JSON template does not contain any reference to a specialized template for sales data analysis, such as 'com.microsoft.teams.templates.sales' or any data-specific configuration; it is a standard team template with no industry-specific specialization. Option C is wrong because the team's classification is not automatically applied based on content; classification labels are defined in Azure AD and must be explicitly set in the JSON template using the 'classification' property, which is absent here. Option D is wrong because the template sets 'visibility' to 'private' (as shown in the JSON snippet), meaning the team is not public and cannot be joined by anyone in the organization without an invitation from an owner.

Practice this question →

152

MCQmedium

While preparing a Microsoft 365 adoption plan, a consultant is asked to create a quick survey and export responses to Excel. Microsoft 365 app or service is the best fit?

A.Microsoft Purview Audit

C.Microsoft Forms

D.Microsoft Planner

AnswerC

Forms is designed for surveys, quizzes, and response collection.

Why this answer

Microsoft Forms is the correct choice because it is specifically designed for creating quick surveys, quizzes, and polls with automatic response collection and native export to Excel. The consultant needs a lightweight, no-code tool that integrates directly with Excel Online for real-time data analysis, which Forms provides out of the box.

Exam trap

The trap here is that candidates confuse Microsoft Planner's task assignment features with survey functionality, or mistakenly think Purview Audit can generate user-facing surveys because of its 'audit log' name, when in fact only Forms provides the direct survey-to-Excel export workflow.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities across Microsoft 365, not a survey creation tool; it cannot generate surveys or export responses to Excel. Option D is wrong because Microsoft Planner is a task management and project planning tool based on Kanban boards, lacking any survey or form-building capabilities, and cannot export structured survey responses to Excel.

Practice this question →

153

MCQmedium

A company uses Microsoft 365 and wants to create a custom app to automate expense report approvals without writing code. Which service should they use?

A.SharePoint Designer

B.Azure Logic Apps

C.Power Automate

D.Power Apps

AnswerD

Low-code app platform.

Why this answer

Power Apps is the correct choice because it enables users to build custom business applications with a low-code or no-code approach, integrating directly with Microsoft 365 data sources like SharePoint and Outlook. For automating expense report approvals, Power Apps can create a custom app that triggers approval workflows via Power Automate, all without writing traditional code.

Exam trap

The trap here is confusing Power Automate (which automates workflows) with Power Apps (which builds custom apps), as both are part of the Power Platform and often used together, but only Power Apps provides the user interface for a custom app.

How to eliminate wrong answers

Option A is wrong because SharePoint Designer is a legacy tool for customizing SharePoint workflows and forms, but it requires code-like actions and is deprecated for new development. Option B is wrong because Azure Logic Apps is a cloud-based integration service for automating workflows across enterprise systems, but it is more complex and code-oriented than needed for a simple no-code custom app. Option C is wrong because Power Automate is a workflow automation service that can handle approval processes, but it does not create custom apps with user interfaces; it focuses on automating flows between services.

Practice this question →

154

MCQmedium

A sales manager wants to create a visual representation of the sales pipeline, including stages, deal values, and win probability. They want to share this interactive chart with the team via a web link that updates automatically from the underlying data in Microsoft Lists. Which Microsoft 365 app should they use?

A.Microsoft Power BI

B.Microsoft Excel

C.Microsoft Forms

D.Microsoft SharePoint

AnswerA

Power BI connects to Microsoft Lists, creates interactive visualizations, and can be shared via a web link with automatic data refresh.

Why this answer

Microsoft Power BI allows creation of interactive dashboards and reports that can connect to various data sources, including Microsoft Lists. It can publish a web-accessible interactive report that automatically refreshes. Excel charts are static unless published as a web workbook, but they lack interactivity and automatic refresh from Lists without complex setup.

SharePoint lists display data in tabular format, not interactive charts. Forms is for surveys.

Practice this question →

155

MCQmedium

A project manager wants to create a collaborative workspace that includes a shared calendar, a document library, and a task list. The workspace should be accessible from within Microsoft Teams and allow team members to discuss topics in a threaded conversation. Which Microsoft 365 service should they use as the foundation?

A.Microsoft Teams with a channel

B.SharePoint Team Site

C.Microsoft Planner

D.Microsoft Viva Engage Community

AnswerB

A SharePoint team site includes a document library, a calendar list, a task list (or planner integration), and can be connected to Microsoft Teams for threaded conversations.

Why this answer

A SharePoint Team Site provides the foundational structure for a collaborative workspace with a shared calendar, document library, and task list. It integrates natively with Microsoft Teams, allowing the workspace to be accessed via a Teams channel, and supports threaded conversations through the connected Teams channel or Yammer web parts. This makes it the correct choice for the described requirements.

Exam trap

The trap here is that candidates often confuse a Microsoft Teams channel (Option A) as the workspace itself, not realizing that the channel is merely a collaboration layer that depends on SharePoint for persistent storage and structured components like calendars and document libraries.

How to eliminate wrong answers

Option A is wrong because a Microsoft Teams channel is a communication interface within a team, not a standalone workspace; it relies on an underlying SharePoint site for document libraries, calendars, and task lists. Option C is wrong because Microsoft Planner is a task management tool that provides task lists and boards but lacks a shared calendar and document library, and it does not serve as a full collaborative workspace foundation. Option D is wrong because Microsoft Viva Engage Community is designed for broad organizational discussions and social networking, not for structured collaboration with a shared calendar, document library, and task list within a Teams channel.

Practice this question →

156

MCQmedium

A multinational organization wants a central hub for employee communication that includes company-wide announcements, topic-based communities, and the ability to integrate with SharePoint and Power BI dashboards. Which Microsoft 365 service is designed specifically for this purpose?

A.Microsoft Teams

B.Microsoft Viva Engage

C.SharePoint Online

D.Outlook

AnswerB

Microsoft Viva Engage is an enterprise social network that allows organizations to create company-wide announcements, topic-based communities, and integrate with other apps like SharePoint and Power BI. It is the intended service for broad employee communication.

Why this answer

Microsoft Viva Engage (formerly Yammer) is designed as a social networking and employee communication hub that provides company-wide announcements, topic-based communities, and seamless integration with SharePoint and Power BI dashboards. It focuses on fostering open communication across the organization, unlike collaboration tools that are team-centric.

Exam trap

The trap here is that candidates often confuse Microsoft Teams' 'general' channel or SharePoint's news web part with a true company-wide social hub, but Viva Engage is the only service purpose-built for open, topic-based communities and organization-wide announcements with native integration to SharePoint and Power BI.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is primarily a chat-based collaboration workspace for teams and channels, not a central hub for company-wide announcements and topic-based communities; it lacks the enterprise social network features like broadcast announcements to the entire organization. Option C is wrong because SharePoint Online is a document management and intranet platform that can host announcements and dashboards but is not specifically designed as a social communication hub with topic-based communities and company-wide feeds. Option D is wrong because Outlook is an email and calendar client, not a platform for topic-based communities or integrated social networking; it cannot replace the community-driven, announcement-focused functionality of Viva Engage.

Practice this question →

157

MCQeasy

A public relations team needs to create an interactive, visually rich newsletter that includes embedded video and dynamic content from a SharePoint list. Which app should they use?

A.Sway

B.PowerPoint

C.SharePoint News

D.Microsoft Stream

AnswerA

Sway allows users to create interactive and responsive newsletters with embedded video and can integrate dynamic content from SharePoint through its card-based design.

Why this answer

Sway is the correct choice because it is designed specifically for creating interactive, visually rich newsletters that can embed videos and dynamically pull content from SharePoint lists using its integration with Microsoft 365. Unlike other apps, Sway offers a responsive design canvas that adapts to different devices and allows embedding of multimedia elements directly, making it ideal for a public relations team's needs.

Exam trap

The trap here is that candidates often confuse SharePoint News with Sway because both can display news and embed videos, but SharePoint News is a site-level feature for internal communications, not a standalone app for creating interactive, visually rich newsletters with dynamic content from SharePoint lists.

How to eliminate wrong answers

Option B (PowerPoint) is wrong because it is a presentation tool focused on slide-based content, not a newsletter format, and lacks native support for dynamically pulling content from SharePoint lists without complex add-ins. Option C (SharePoint News) is wrong because while it can display news posts and embed videos, it does not provide the same level of interactive, visually rich design flexibility as Sway and is more suited for internal communications within a SharePoint site. Option D (Microsoft Stream) is wrong because it is a video hosting and management platform, not a content creation tool for newsletters, and cannot generate interactive documents with embedded dynamic content from SharePoint lists.

Practice this question →

158

MCQeasy

A sales team wants to maintain a shared list of high-priority leads with custom columns for company name, contact person, deal value, and stage. Team members need to update the list in real time and view the change history. Which Microsoft 365 app should they use?

A.Microsoft Lists

B.Microsoft Excel

C.Microsoft SharePoint

D.Microsoft Teams

AnswerA

Correct. Microsoft Lists provides a rich list management experience with custom columns, real-time collaboration, and version history.

Why this answer

Microsoft Lists is designed for creating and sharing flexible lists with custom columns, real-time collaboration, and version history. Excel can be shared but is not as purpose-built for list management. SharePoint can host lists, but Microsoft Lists is the dedicated app.

Teams can display a list as a tab, but the underlying app is Lists.

Practice this question →

159

MCQeasy

An organization wants to use Microsoft 365 to automatically classify and protect sensitive data in emails and documents. Which service should they use?

A.Microsoft Purview Information Protection

B.Microsoft Intune

C.Microsoft Defender for Office 365

D.Microsoft Entra ID

AnswerA

This service provides automatic classification and protection of sensitive data.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides data classification, labeling, and protection capabilities directly within Microsoft 365. It uses sensitivity labels to automatically classify emails and documents based on conditions like content patterns or custom keywords, and then applies encryption, rights management, or visual markings (e.g., headers/footers) to protect sensitive data both at rest and in transit.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Office 365 (which protects against threats) with Purview Information Protection (which classifies and protects data), leading them to select Option C because they associate 'protect' with security rather than data governance.

How to eliminate wrong answers

Option B (Microsoft Intune) is wrong because it is a mobile device management (MDM) and mobile application management (MAM) service focused on managing devices and apps, not on classifying or protecting data content within emails and documents. Option C (Microsoft Defender for Office 365) is wrong because it is a security service that protects against threats like phishing, malware, and malicious links in email and collaboration tools, but it does not perform automatic data classification or sensitivity labeling. Option D (Microsoft Entra ID) is wrong because it is an identity and access management (IAM) service that handles authentication, single sign-on, and conditional access policies, not data classification or protection of content.

Practice this question →

160

MCQhard

A large enterprise needs to enforce that all documents containing financial data are automatically classified and encrypted when shared externally. Which combination of Microsoft 365 services should be used?

A.Microsoft Forms and Microsoft Stream

B.Microsoft Sentinel and Microsoft Defender XDR

C.Microsoft Purview Information Protection and Microsoft Defender for Cloud Apps

D.Microsoft Intune and Microsoft Entra ID

AnswerC

Information Protection labels and Cloud App Security broker enforce classification and encryption.

Why this answer

Option C is correct because Microsoft Purview Information Protection provides the classification and labeling capabilities to automatically identify documents containing financial data, while Microsoft Defender for Cloud Apps enables policy-based encryption and protection controls when those documents are shared externally. Together, they enforce data loss prevention (DLP) by applying sensitivity labels that trigger encryption upon external sharing, meeting the enterprise requirement.

Exam trap

The trap here is that candidates confuse security monitoring tools (Sentinel, Defender XDR) with data classification and encryption tools, or they mistakenly think device management (Intune) or identity (Entra ID) can enforce content-level encryption on documents shared externally.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey tool and Microsoft Stream is a video platform; neither provides document classification, encryption, or external sharing controls. Option B is wrong because Microsoft Sentinel is a SIEM/SOAR for security incident detection and Microsoft Defender XDR is for endpoint, email, and identity threat protection; they do not classify or encrypt documents based on content. Option D is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution, and Microsoft Entra ID is an identity and access management service; neither directly classifies or encrypts document content for external sharing.

Practice this question →

161

MCQmedium

A project manager wants a shared workspace where team members can create and track tasks, set deadlines, and collaborate on documents. This workspace should integrate with Microsoft Teams for quick access. Which Microsoft 365 service is best suited for this purpose?

A.Microsoft Lists

B.Microsoft Planner

C.Microsoft To Do

D.Microsoft Project Online

AnswerB

Planner offers a visual task board with assignments, due dates, and file attachments, and it integrates natively with Microsoft Teams.

Why this answer

Microsoft Planner is the correct choice because it provides a shared workspace (Plan) where team members can create and track tasks, set deadlines, and collaborate on documents. It integrates natively with Microsoft Teams via the Planner tab, allowing quick access within a Teams channel, and supports file attachments from SharePoint/OneDrive for collaboration.

Exam trap

The trap here is that candidates often confuse Microsoft Lists with Planner because both involve tracking items, but Lists is for static data collection (like a spreadsheet) while Planner is for dynamic task management with assignments and deadlines.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data-tracking app for creating custom lists (e.g., issue trackers, inventories) but lacks built-in task assignment, deadline tracking, and Kanban-style task management that Planner offers. Option C is wrong because Microsoft To Do is a personal task management tool for individual users, not designed for team collaboration or shared workspaces with document collaboration. Option D is wrong because Microsoft Project Online is a full-featured project management solution for complex scheduling, resource management, and Gantt charts, which is overkill for a simple shared workspace and does not integrate as seamlessly with Teams for quick task tracking.

Practice this question →

162

MCQmedium

A marketing manager needs to create a modern intranet site that publishes news, important announcements, and upcoming events. The site must be responsive on mobile devices and allow employees to like, comment, and share articles. Which Microsoft 365 service should they use?

A.Microsoft Teams

B.SharePoint Communication site

C.Microsoft Viva Engage

D.Microsoft Viva Connections

AnswerB

Communication sites are ideal for publishing news, events, and announcements with engagement features and mobile responsiveness.

Why this answer

A SharePoint Communication site is designed for broadcasting news, announcements, and events to a broad audience, with built-in support for responsive mobile rendering and social features like likes, comments, and sharing. This makes it the correct choice for a modern intranet that needs to engage employees across devices.

Exam trap

The trap here is that candidates often confuse Microsoft Viva Connections (a dashboard) with the underlying content source (SharePoint Communication site), leading them to select D when the question explicitly asks for the service used to create the intranet site.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration hub focused on persistent conversations and channel-based teamwork, not a publishing platform for news and announcements with like/comment/share capabilities. Option C is wrong because Microsoft Viva Engage (formerly Yammer) is an enterprise social network for community discussions and knowledge sharing, but it lacks the structured page publishing and modern intranet site features required for news and events. Option D is wrong because Microsoft Viva Connections is a personalized dashboard that aggregates content from SharePoint, Teams, and other sources, but it is not a site creation service itself—it depends on a SharePoint Communication site as its underlying content source.

Practice this question →

163

MCQhard

A multinational corporation wants to provide a single sign-on experience for employees accessing third-party SaaS applications alongside Microsoft 365. Which Microsoft Entra ID feature should they use?

A.Password hash synchronization

B.Microsoft Entra ID as identity provider with SSO integration

C.Multifactor authentication

D.Seamless single sign-on

AnswerB

Entra ID provides SSO for SaaS apps.

Why this answer

Microsoft Entra ID as an identity provider with SSO integration (Option B) is correct because it allows the organization to act as the central identity source for both Microsoft 365 and third-party SaaS applications. By configuring federated SSO (using SAML 2.0 or OpenID Connect), users authenticate once against Entra ID and gain seamless access to all integrated apps, eliminating the need for separate credentials.

Exam trap

The trap here is that candidates confuse 'Seamless SSO' (Option D) with full SSO federation, but Seamless SSO only handles the initial sign-in experience on domain-joined devices and does not extend SSO to third-party SaaS applications.

How to eliminate wrong answers

Option A is wrong because password hash synchronization only syncs user password hashes from on-premises AD to Entra ID for authentication; it does not provide SSO to third-party SaaS apps on its own. Option C is wrong because multifactor authentication is a security feature that adds a second verification step, not an SSO mechanism; it can be used alongside SSO but does not enable single sign-on. Option D is wrong because Seamless SSO is a feature that automatically signs users in when they are on a domain-joined device connected to the corporate network, but it only works for Microsoft 365 and other Entra ID-integrated apps, not for third-party SaaS applications that require explicit federation.

Practice this question →

164

Multi-Selectmedium

A corporate IT department is planning to use Microsoft 365 services to improve employee productivity with AI-powered features. Which TWO services provide AI-generated content suggestions in real-time?

Select 2 answers

A.Copilot in Power Platform

B.Microsoft Copilot for Microsoft 365

C.Microsoft Viva Insights

D.Microsoft Forms

E.Microsoft Stream

AnswersA, B

Copilot in Power Platform helps create apps and automations with AI.

Why this answer

Copilot in Power Platform provides AI-generated content suggestions in real-time by enabling users to describe their requirements in natural language, which then generates Power Apps, Power Automate flows, or Power BI reports. This real-time AI assistance directly improves employee productivity by automating the creation of business solutions.

Exam trap

Microsoft often tests the distinction between AI-powered content generation (Copilot) and analytics/insights tools (Viva Insights), leading candidates to mistakenly select Viva Insights for its 'insights' label rather than recognizing it lacks real-time content suggestion capabilities.

Practice this question →

165

MCQmedium

A tenant administrator is advising a department that wants to use persistent chat, online meetings, channels, and shared files organized by project. Microsoft 365 app or service is the best fit?

A.Microsoft Forms

B.Microsoft Teams

C.Microsoft Planner

D.Microsoft Purview Audit

AnswerB

Teams provides chat, meetings, channels, and file collaboration for groups.

Why this answer

Microsoft Teams is the best fit because it provides persistent chat, online meetings, channels, and shared files organized by project. Teams integrates with SharePoint for file storage and OneNote for notes, allowing each channel to have its own file repository and meeting scheduling, directly matching the department's requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task boards with project organization, but Planner lacks the persistent chat, meetings, and channel-based file sharing that Teams provides for project collaboration.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz tool, not designed for persistent chat, meetings, channels, or shared file organization. Option C is wrong because Microsoft Planner is a task management and lightweight project tracking tool that lacks persistent chat, online meetings, and channel-based file sharing. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user activities, not a collaboration platform for chat, meetings, or file organization.

Practice this question →

166

MCQmedium

A project team needs to create a central workspace where they can store project documents, assign tasks, track a shared calendar of milestones, and have threaded discussions about each item. The solution must integrate directly with Microsoft Teams. Which Microsoft 365 service provides this out-of-the-box?

A.SharePoint Online

B.Microsoft Lists

C.Planner

D.Project Online

AnswerA

SharePoint Online team sites include document libraries, lists for tasks, calendar web parts, and discussion capabilities, all of which can be integrated into Teams.

Why this answer

SharePoint Online provides a central workspace with document libraries for storing project documents, task lists for assignment, shared calendars for milestones, and discussion boards for threaded conversations. It integrates natively with Microsoft Teams via the SharePoint tab, allowing the team to access all these features directly within the Teams interface without additional configuration.

Exam trap

The trap here is that candidates often confuse Planner or Microsoft Lists as a complete workspace solution, but they lack the document storage, calendar, and threaded discussion capabilities that SharePoint Online provides out-of-the-box.

How to eliminate wrong answers

Option B (Microsoft Lists) is wrong because it is a data-tracking app for creating simple lists (e.g., issue trackers, inventories) but does not include document storage, shared calendars, or threaded discussions out-of-the-box. Option C (Planner) is wrong because it focuses solely on task management with Kanban boards and charts, lacking document libraries, calendars, and threaded discussions. Option D (Project Online) is wrong because it is a premium project management solution for complex scheduling and resource management, not a lightweight central workspace, and its integration with Teams requires additional connectors or third-party tools.

Practice this question →

167

MCQmedium

A business stakeholder asks how Microsoft 365 can help them support organization-wide communities, leadership announcements, and broad employee conversations. Microsoft 365 app or service is the best fit?

A.Microsoft Viva Engage

B.Microsoft Planner

C.Microsoft Forms

D.Microsoft Purview Audit

AnswerA

Viva Engage supports communities, announcements, and employee engagement.

Why this answer

Microsoft Viva Engage (formerly Yammer) is the correct choice because it is specifically designed for organization-wide social networking, enabling communities, leadership announcements, and broad employee conversations. It provides a dedicated platform for posts, polls, and threaded discussions that can reach the entire organization, unlike other Microsoft 365 tools that focus on task management, surveys, or compliance auditing.

Exam trap

The trap here is that candidates may confuse Microsoft Viva Engage with Microsoft Teams, but Teams is primarily for team-based chat and collaboration, not for organization-wide communities and leadership announcements, which is the specific use case Viva Engage addresses.

How to eliminate wrong answers

Option B (Microsoft Planner) is wrong because it is a task and project management tool for organizing work among team members, not for broadcasting announcements or fostering broad conversations. Option C (Microsoft Forms) is wrong because it is used to create surveys, quizzes, and polls for data collection, not for ongoing community discussions or leadership broadcasts. Option D (Microsoft Purview Audit) is wrong because it is a compliance and auditing solution that logs user and admin activities for security and legal purposes, not a communication or community platform.

Practice this question →

168

MCQeasy

Your company uses Microsoft 365 Business Premium and wants to enable remote wipe of company data on employees' personal mobile devices if they are lost or stolen. Which service provides this capability?

A.Microsoft Intune Mobile Application Management (MAM)

B.Microsoft Entra ID

C.Microsoft Defender for Cloud Apps

D.Microsoft Purview Compliance Manager

AnswerA

MAM enables selective wipe of corporate data from apps on personal devices.

Why this answer

Microsoft Intune Mobile Application Management (MAM) enables selective remote wipe of company data from personal mobile devices without wiping personal data. This is achieved through app-level policies that can remove corporate data from managed apps (e.g., Outlook, Teams) when a device is lost or stolen, using the Intune company portal or a wipe command triggered by an administrator.

Exam trap

The trap here is that candidates often confuse Intune Mobile Device Management (MDM) with Mobile Application Management (MAM), assuming full device wipe is required, but the question specifically asks for selective wipe of company data on personal devices, which is a MAM capability.

How to eliminate wrong answers

Option B (Microsoft Entra ID) is wrong because it is an identity and access management service that handles authentication and authorization, not device or app data wipe capabilities. Option C (Microsoft Defender for Cloud Apps) is wrong because it focuses on cloud app discovery, data loss prevention, and threat detection, not remote wipe of company data from mobile devices. Option D (Microsoft Purview Compliance Manager) is wrong because it is a compliance management tool that helps assess and manage regulatory compliance posture, not a device management or data wipe service.

Practice this question →

169

Multi-Selecthard

Which THREE Microsoft 365 services are part of the Microsoft Defender XDR suite?

Select 3 answers

A.Microsoft Defender for Endpoint

B.Microsoft Defender for Cloud Apps

C.Microsoft Sentinel

D.Microsoft Defender for Office 365

E.Microsoft Defender for Identity

AnswersB, D, E

Defender for Cloud Apps is part of Microsoft Defender XDR.

Why this answer

Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, email, and cloud apps. Microsoft Defender for Cloud Apps is a core component of this suite, providing visibility and control over cloud application usage, threat detection, and data protection across SaaS and PaaS environments. It integrates directly with other Defender components to enable cross-domain incident correlation and automated response.

Exam trap

The trap here is that candidates often confuse Microsoft Sentinel (a SIEM) with a component of the Defender XDR suite, when in fact Sentinel is a separate analytics service that can consume data from Defender XDR but is not part of the suite itself.

Practice this question →

170

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage custom forms for data collection, such as employee feedback surveys?

Select 2 answers

A.SharePoint Online

B.Microsoft Lists

C.Microsoft Forms

D.Excel Online

E.Microsoft Power Apps

AnswersC, E

Microsoft Forms is designed for surveys and forms.

Why this answer

Microsoft Forms is purpose-built for creating custom forms, surveys, and quizzes, with automatic data collection into Excel Online. It provides a simple interface for designing feedback forms and viewing responses in real-time, making it the correct choice for employee feedback surveys.

Exam trap

The trap here is that candidates may confuse Microsoft Lists or SharePoint Online as form-building tools because they can display or store form data, but they lack the native form creation and response management capabilities of Microsoft Forms.

Practice this question →

171

MCQmedium

A medium-sized business uses Microsoft 365 Business Premium. The HR department needs a secure way to collect employee feedback anonymously. They also need to store the results in a structured format that can be analyzed later. They are considering using Microsoft Forms and Excel. However, the IT department is concerned about data retention and wants to ensure that responses are automatically deleted after 90 days. What should the IT department configure?

A.Create a Power Automate flow that deletes responses after 90 days.

B.Apply a Microsoft Purview retention label to the folder storing the Excel responses with a 90-day retention period.

C.Manually delete the responses every 90 days using the Forms interface.

D.Set the Forms settings to automatically delete responses after 90 days.

AnswerB

Retention labels can enforce automatic deletion after a specified period.

Why this answer

Option B is correct because Microsoft Purview retention labels can be applied to the folder in SharePoint or OneDrive where the Excel responses are stored, enforcing a 90-day retention period that automatically deletes the data after that time. This meets the IT department's data retention requirement without manual intervention or complex automation, and it integrates directly with the storage location of the structured results.

Exam trap

The trap here is that candidates may assume Microsoft Forms has a built-in auto-delete feature for responses, but it does not; instead, the correct approach involves applying a retention label to the storage location (Excel file in SharePoint/OneDrive) where the structured results are saved.

How to eliminate wrong answers

Option A is wrong because creating a Power Automate flow to delete responses after 90 days is an overly complex, custom solution that is not native to the data retention policy framework; it also requires ongoing maintenance and could fail if the flow is disabled or modified. Option C is wrong because manually deleting responses every 90 days using the Forms interface is error-prone, not automated, and does not scale for a medium-sized business; it also does not address the structured storage in Excel. Option D is wrong because Microsoft Forms does not have a native setting to automatically delete responses after a specific number of days; Forms only allows manual deletion or export, not time-based auto-deletion.

Practice this question →

172

MCQeasy

A user reports that they cannot access their email on their mobile device. The IT administrator suspects a device compliance issue. Which Microsoft 365 service can the administrator use to check the device's compliance status?

A.Microsoft Purview compliance portal

B.Microsoft Intune

C.Microsoft Exchange admin center

D.Microsoft Defender for Cloud Apps

AnswerB

Microsoft Intune provides device compliance monitoring and management.

Why this answer

Microsoft Intune is the correct tool because it is the mobile device management (MDM) and mobile application management (MAM) component of Microsoft 365. It allows administrators to define compliance policies (e.g., requiring encryption, a minimum OS version, or a healthy device attestation) and then check a device's compliance status in real time. When a device is non-compliant, Intune can block access to corporate resources like email, which matches the user's reported issue.

Exam trap

The trap here is that candidates confuse the Microsoft Purview compliance portal (which handles regulatory compliance and data protection) with device compliance (which is a mobile device management function handled exclusively by Intune).

How to eliminate wrong answers

Option A is wrong because the Microsoft Purview compliance portal focuses on data governance, eDiscovery, and compliance management (e.g., retention policies, audit logs), not on checking device compliance status for mobile access. Option C is wrong because the Microsoft Exchange admin center manages mailboxes, transport rules, and mailbox permissions, but it does not have native device compliance checking; it relies on Intune for conditional access decisions. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility into cloud app usage and threat protection, not a device compliance checker for mobile email access.

Practice this question →

173

Multi-Selectmedium

Which THREE of the following are benefits of using Microsoft Viva?

Select 3 answers

A.Detects and blocks phishing attacks.

B.Connects employees with company news and resources.

C.Improves employee engagement and well-being.

D.Provides personalized learning and skill development.

E.Backs up user data automatically.

AnswersB, C, D

Viva Connections provides a dashboard.

Why this answer

Microsoft Viva Connections provides a personalized dashboard that aggregates company news, resources, and communications from SharePoint, Yammer, and Stream, enabling employees to stay informed and engaged directly within Microsoft Teams. This integration reduces information silos and ensures timely access to relevant organizational content.

Exam trap

The trap here is that candidates may confuse Microsoft Viva's employee experience modules (Connections, Insights, Learning) with security or backup features that belong to other Microsoft 365 services like Defender or OneDrive.

Practice this question →

174

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to provide secure remote access to on-premises applications without requiring a VPN?

Select 2 answers

A.Microsoft Entra Application Proxy

B.Microsoft Purview

C.Microsoft Sentinel

D.Microsoft Intune

E.Microsoft Defender for Cloud Apps

AnswersA, E

Provides secure remote access to on-premises web apps.

Why this answer

Microsoft Entra Application Proxy provides secure remote access to on-premises web applications by publishing them through an external endpoint in Azure AD, without requiring a VPN. It works by establishing outbound connections from the on-premises Application Proxy connector to the Azure AD service, which then proxies user requests. This eliminates the need to open inbound firewall ports or maintain VPN infrastructure, making it ideal for remote access to legacy apps.

Exam trap

The trap here is that candidates often confuse Microsoft Intune (device management) or Microsoft Defender for Cloud Apps (CASB) with remote access solutions, but only Entra Application Proxy (and Defender for Cloud Apps as a reverse proxy for SaaS apps) directly provides VPN-less remote access to on-premises applications.

Practice this question →

175

MCQeasy

A training manager needs to create a simple video that includes screen recordings, webcam overlay, and transitions to announce a new compliance policy. The manager wants to use a Microsoft 365 app that is designed for video creation and editing. Which Microsoft 365 app should the manager use?

A.Microsoft Clipchamp

B.Microsoft Stream

C.Microsoft Teams

D.Microsoft PowerPoint

AnswerA

Correct. Clipchamp is the video creation and editing tool in Microsoft 365, perfect for making training videos with screen recordings and webcam.

Why this answer

Microsoft Clipchamp is the correct app because it is a dedicated video creation and editing tool included with Microsoft 365, specifically designed for tasks like combining screen recordings, webcam overlays, and transitions. Unlike other Microsoft 365 apps, Clipchamp provides a full timeline-based editor with built-in support for these features, making it ideal for producing a polished compliance policy announcement video.

Exam trap

The trap here is that candidates often confuse Microsoft Stream (a video hosting service) with a video editor, or assume PowerPoint's recording features are sufficient for multi-track video editing, when Clipchamp is the only Microsoft 365 app purpose-built for creating and editing videos with screen recordings, webcam overlays, and transitions.

How to eliminate wrong answers

Option B (Microsoft Stream) is wrong because Stream is a video hosting and sharing platform, not a video creation or editing tool; it lacks features like screen recording, webcam overlay, and transition editing. Option C (Microsoft Teams) is wrong because Teams is a collaboration and communication app focused on chat, meetings, and file sharing, not a video editor; while it can record meetings, it cannot edit or add transitions to existing recordings. Option D (Microsoft PowerPoint) is wrong because PowerPoint is a presentation software that can record slides with narration and webcam, but it does not support multi-track video editing, screen recording with overlay, or custom transitions between video clips; its video export is limited to slide-based recordings.

Practice this question →

176

MCQmedium

A user reports that they cannot schedule a meeting with external participants using Microsoft Teams. The administrator confirms that external access is enabled. What is the most likely cause?

A.The user's Exchange Online mailbox is full

B.The Teams client is outdated

C.Guest access is disabled

D.The user does not have a license that includes Microsoft Teams

AnswerD

A license is required to use Teams features.

Why this answer

Scheduling meetings with external participants in Microsoft Teams requires the user to have a license that includes Teams, such as Microsoft 365 Business Basic or Enterprise E3. Without this license, the user cannot initiate or organize meetings, even if external access is enabled. Option D is correct because licensing is a prerequisite for using Teams features, including meeting scheduling.

Exam trap

The trap here is that candidates often confuse 'external access' (federation) with 'guest access' and assume disabling one blocks all external collaboration, but the core issue is licensing, not access settings.

How to eliminate wrong answers

Option A is wrong because a full Exchange Online mailbox would prevent sending or receiving emails, but it does not directly block scheduling Teams meetings with external participants, as Teams uses Exchange for calendar resources but not mailbox capacity for meeting creation. Option B is wrong because an outdated Teams client may cause performance or feature issues, but it would not prevent scheduling with external participants if the user has a valid license and external access is enabled; the client update is not a prerequisite for basic meeting functionality. Option C is wrong because guest access controls the ability for external users to join as guests within a tenant, but the user is trying to schedule a meeting with external participants (who may be in other organizations), which relies on external access (federation), not guest access; disabling guest access does not block scheduling with federated external users.

Practice this question →

177

MCQmedium

Fabrikam Inc. is a legal firm with 500 users. They are deploying Microsoft 365 Business Premium. Requirements: (1) All sensitive emails must be automatically encrypted when sent to external recipients; (2) Users must be able to securely share files with external clients without requiring them to sign in; (3) The IT department must enforce multi-factor authentication (MFA) for all users but allow exceptions for a small group of executives; (4) All user actions in Exchange Online must be audited. Which services or features should Fabrikam use?

A.Microsoft Purview Double Key Encryption, Microsoft Teams, Microsoft Entra Conditional Access, Microsoft 365 audit log

B.Microsoft Purview Message Encryption, SharePoint Online, Microsoft Entra Conditional Access, Exchange mailbox auditing

C.Microsoft Purview Message Encryption, OneDrive, Microsoft Entra ID Protection, Microsoft 365 audit log

D.Azure Information Protection, SharePoint Online, Microsoft Entra ID Protection, Exchange mailbox auditing

AnswerB

Correct: Message Encryption for automatic encryption, SharePoint for anonymous sharing, Conditional Access for MFA with exceptions, mailbox auditing for audit.

Why this answer

Option B is correct because Microsoft Purview Message Encryption automatically encrypts sensitive emails sent to external recipients, SharePoint Online allows file sharing with external users without requiring them to sign in (via anonymous guest links), Microsoft Entra Conditional Access can enforce MFA with policy exclusions for executive groups, and Exchange mailbox auditing captures all user actions in Exchange Online. These four services directly map to the four requirements.

Exam trap

The trap here is that candidates often confuse Microsoft Entra ID Protection with Conditional Access for MFA enforcement, not realizing that ID Protection is a risk-based policy engine that requires Conditional Access to actually block or allow access, and that Exchange mailbox auditing is a distinct feature from the general Microsoft 365 audit log.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Double Key Encryption is designed for highly regulated data requiring two keys held by separate parties, not for automatic encryption of all sensitive emails to external recipients, and Microsoft Teams is not the correct service for sharing files with external clients without sign-in (SharePoint or OneDrive is needed). Option C is wrong because Microsoft Entra ID Protection is a risk-based conditional access tool, not a direct MFA enforcement mechanism with group-based exceptions (Conditional Access is required), and the Microsoft 365 audit log is a general audit log that does not specifically capture Exchange Online user actions (Exchange mailbox auditing is needed). Option D is wrong because Azure Information Protection is a classification and labeling solution, not an automatic email encryption service for external recipients (Message Encryption is required), and Microsoft Entra ID Protection again lacks the granular MFA exception capability that Conditional Access provides.

Practice this question →

178

Multi-Selectmedium

A project team needs to collaborate on workflow approvals between Microsoft 365 and Dynamics 365 and co-author related Office files. Which two Microsoft 365 capabilities are most relevant?

Select 2 answers

A.Power Automate

B.Microsoft Purview eDiscovery case

C.Exchange anti-malware policy

D.SharePoint Online document storage

AnswersA, D

Power Automate creates cloud flows and business-process automation.

Why this answer

Power Automate is correct because it enables the creation of automated workflows that can integrate Microsoft 365 and Dynamics 365, handling approval processes across both platforms. It allows users to trigger flows from events in either system, such as when a record is created in Dynamics 365, and route approval requests through Microsoft 365 tools like Teams or Outlook.

Exam trap

The trap here is that candidates may confuse Power Automate with Power Apps or overlook SharePoint's role in co-authoring, instead selecting compliance or security options like eDiscovery or anti-malware policies that are unrelated to collaboration.

Practice this question →

179

MCQeasy

A sales team needs to create a shared list of customer contact information with custom fields like company, email, phone, and deal stage. The list should be accessible from within Outlook and allow real-time updates by multiple users. Which Microsoft 365 app should they use?

A.Microsoft Lists

B.Microsoft To Do

C.Microsoft Planner

D.Microsoft Dynamics 365

AnswerA

Microsoft Lists is the correct choice because it provides a customisable list interface, integrates with Outlook, and supports real-time multi-user editing.

Why this answer

Microsoft Lists is the correct choice because it provides a customizable, shared list that supports custom columns (e.g., company, email, phone, deal stage) and real-time collaboration. It integrates directly with Outlook via the Lists app or by adding a list as a tab in Outlook, allowing the sales team to access and update the list without leaving their email client.

Exam trap

The trap here is that candidates may confuse Microsoft Lists with Microsoft To Do or Planner because both involve task tracking, but Lists is the only one that supports custom columns and real-time multi-user editing for structured data like contacts.

How to eliminate wrong answers

Option B is wrong because Microsoft To Do is a personal task management app that does not support custom fields or real-time multi-user editing of shared lists; it lacks the column customization and collaborative features needed. Option C is wrong because Microsoft Planner is designed for team task management with boards and buckets, not for creating a shared list of contacts with custom fields, and it does not integrate directly into Outlook for inline access. Option D is wrong because Microsoft Dynamics 365 is a full Customer Relationship Management (CRM) platform that is far more complex and costly than needed; it is not a simple list app and does not provide the lightweight, Outlook-integrated shared list functionality required.

Practice this question →

180

MCQmedium

An organization wants to monitor and respond to security incidents across their Microsoft 365 environment, including email, endpoints, and cloud apps. Which solution should they deploy?

A.Microsoft Intune

B.Microsoft Defender XDR

C.Microsoft Sentinel

D.Microsoft Defender for Office 365

AnswerB

Defender XDR correlates signals across email, endpoints, identities, and apps for unified response.

Why this answer

Microsoft Defender XDR (formerly Microsoft 365 Defender) provides unified incident detection and response across email, endpoints, identities, and apps. Defender for Office 365 is email-specific. Sentinel is SIEM.

Intune is MDM.

Practice this question →

181

MCQeasy

A project manager wants to schedule a meeting with team members to discuss project progress. They need to find a time that works for everyone based on their calendars. Which Microsoft 365 app should they use?

A.Microsoft Teams

B.Microsoft Outlook

C.Microsoft Bookings

D.Microsoft Shifts

AnswerB

Outlook's Scheduling Assistant displays attendees' calendars to identify overlapping free times, making it the best tool for scheduling internal meetings.

Why this answer

Microsoft Outlook includes a scheduling assistant that displays the free/busy information of attendees' calendars, allowing the project manager to find a mutually available time slot. This feature is specifically designed for coordinating meetings across an organization using Exchange Online calendar data.

Exam trap

The trap here is that candidates often associate meeting scheduling with Microsoft Teams because of its 'Meet Now' and calendar integration, but the core scheduling assistant that checks everyone's availability is a feature of Outlook, not Teams.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a collaboration platform for chat, meetings, and file sharing, but it does not have a native calendar scheduling assistant that aggregates free/busy data from multiple users' calendars; it relies on Outlook for scheduling. Option C is wrong because Microsoft Bookings is a service for external customer appointment scheduling, not for internal team meeting coordination. Option D is wrong because Microsoft Shifts is a schedule management tool for frontline workers, focusing on shift assignments and time tracking, not on finding a meeting time based on calendar availability.

Practice this question →

182

Multi-Selectmedium

A company uses Microsoft 365 E3 and wants to implement a collaboration solution that allows multiple users to co-author documents in real time, track version history, and set permissions at the document level. Which THREE Microsoft 365 services can fulfill these requirements?

Select 3 answers

A.SharePoint Online

B.OneDrive for Business

C.Microsoft Teams

D.Exchange Online

E.Yammer

AnswersA, B, C

SharePoint provides team collaboration with co-authoring and permissions.

Why this answer

SharePoint Online is correct because it provides document libraries that support real-time co-authoring, version history tracking, and granular permission settings at the document level. These features align directly with the requirements for collaborative document management in Microsoft 365 E3.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a separate collaboration tool, but Teams relies on SharePoint Online and OneDrive for its file storage and co-authoring capabilities, making it a valid answer when the question explicitly asks for services that fulfill the requirements directly.

Practice this question →

183

MCQmedium

A marketing team needs to create a visually rich newsletter that includes dynamic content from a SharePoint list, such as upcoming events and product images. Which Microsoft 365 app is specifically designed for creating interactive newsletters and presentations?

A.Microsoft Sway

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft Microsoft Viva Engage

AnswerA

Sway is ideal for creating interactive, web-based newsletters and presentations that can pull in dynamic content from SharePoint lists and other sources.

Why this answer

Microsoft Sway is specifically designed for creating interactive, visually rich newsletters and presentations that can pull dynamic content from SharePoint lists, such as upcoming events and product images. It uses a web-based canvas with responsive design and supports embedding live data via SharePoint connectors, making it ideal for marketing teams needing dynamic, shareable content without coding.

Exam trap

The trap here is that candidates often confuse Microsoft Sway with Microsoft Forms or Stream because all three are content creation tools, but only Sway is purpose-built for interactive, data-driven newsletters and presentations.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms is a survey and quiz tool for collecting data, not for creating interactive newsletters or presentations. Option C is wrong because Microsoft Stream is a video hosting and sharing platform for enterprise video content, not for building newsletters or presentations. Option D is wrong because Microsoft Viva Engage is a social networking and employee engagement tool focused on communities and conversations, not on creating interactive newsletters or presentations.

Practice this question →

184

MCQeasy

A project team needs a central location to store and collaborate on project documents, with version history, co-authoring, and the ability to share files securely with external partners. Which Microsoft 365 service provides these capabilities?

A.Exchange Online

B.SharePoint Online

C.Microsoft Stream

D.Microsoft Viva Engage

AnswerB

SharePoint Online offers document libraries with versioning, real-time co-authoring, and external sharing controls.

Why this answer

SharePoint Online is the correct choice because it provides a centralized document library with version history, real-time co-authoring via Office Online integration, and granular external sharing controls through secure links or direct invitations. These capabilities align directly with the project team's need for collaborative document management and secure external partner access.

Exam trap

The trap here is that candidates confuse Exchange Online's file attachments (which lack version history and co-authoring) with a proper document management system, or mistakenly think Microsoft Stream's sharing features equate to collaborative document editing.

How to eliminate wrong answers

Option A is wrong because Exchange Online is an email and calendaring service based on the MAPI/HTTP protocol, not a document storage or collaboration platform; it lacks version history and co-authoring for files. Option C is wrong because Microsoft Stream is a video hosting and sharing service for enterprise video content, not designed for document collaboration or version control. Option D is wrong because Microsoft Viva Engage (formerly Yammer) is a social networking and employee engagement tool focused on communities and conversations, not structured document management or secure external file sharing.

Practice this question →

185

MCQhard

A company wants to automate approval workflows for expense reports. Which Microsoft 365 service should they use?

A.Microsoft Planner

B.Microsoft Forms

C.SharePoint

D.Power Automate

AnswerD

Power Automate can create automated approval workflows.

Why this answer

Power Automate is the correct service because it provides workflow automation capabilities, including the ability to create approval workflows for expense reports. It integrates with various Microsoft 365 services and third-party apps, allowing users to design automated processes that trigger approvals based on specific conditions, such as submission of an expense report via email or SharePoint.

Exam trap

The trap here is that candidates may confuse SharePoint's ability to host documents and trigger workflows with being the actual automation engine, but SharePoint requires Power Automate (or legacy SharePoint Designer) to execute the approval logic.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management tool for organizing work among teams, not a workflow automation service; it lacks the ability to create automated approval processes. Option B is wrong because Microsoft Forms is used for creating surveys and quizzes, not for automating workflows; it can collect data but cannot initiate or manage approval workflows. Option C is wrong because SharePoint is a document management and collaboration platform that can store expense reports and trigger workflows via Power Automate, but it does not natively provide the automation engine itself; SharePoint alone cannot create or run approval workflows without Power Automate or SharePoint Designer.

Practice this question →

186

Multi-Selecthard

Which THREE Microsoft 365 services are part of Microsoft Defender XDR (Extended Detection and Response)? (Select three.)

Select 3 answers

A.Microsoft Defender for Endpoint

B.Microsoft Purview

C.Microsoft Defender for Identity

D.Microsoft Sentinel

E.Microsoft Defender for Office 365

AnswersA, C, E

Defender for Endpoint protects devices.

Why this answer

Microsoft Defender XDR (Extended Detection and Response) is a unified security suite that correlates signals across endpoints, identities, and email/collaboration. Microsoft Defender for Endpoint is correct because it provides endpoint detection and response (EDR) capabilities, collecting telemetry from Windows, macOS, Linux, Android, and iOS devices to detect and remediate advanced threats.

Exam trap

The trap here is that candidates often confuse Microsoft Sentinel (a SIEM) with a component of Defender XDR, but Sentinel is a separate Azure service that ingests logs from Defender XDR rather than being part of the XDR product itself.

Practice this question →

187

MCQeasy

Your organization wants to provide employees with a personalized news feed and internal communications dashboard. Which Microsoft 365 service should you use?

A.Microsoft Stream

B.Microsoft Viva Topics

C.Microsoft Viva Connections

D.SharePoint Online

AnswerC

Viva Connections offers a personalized dashboard integrating news, conversations, and resources.

Why this answer

Microsoft Viva Connections is the correct choice because it provides a personalized news feed and internal communications dashboard directly within Microsoft Teams. It aggregates content from SharePoint, Yammer, and other sources to create a curated employee experience, aligning with the requirement for a centralized communications hub.

Exam trap

The trap here is that candidates often confuse SharePoint Online's news web part with Viva Connections' personalized dashboard, but Viva Connections is the dedicated service for a unified, personalized employee experience within Teams.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video management and sharing service, not a news feed or communications dashboard. Option B is wrong because Microsoft Viva Topics uses AI to organize knowledge into topic pages, but it does not provide a personalized news feed or internal communications dashboard. Option D is wrong because SharePoint Online is a document management and collaboration platform that can host news posts, but it lacks the personalized, dashboard-style aggregation and integration with Teams that Viva Connections offers.

Practice this question →

188

MCQhard

An organization uses Microsoft Bookings to manage customer appointments. Staff need to see their Bookings calendar within Outlook. What must be configured?

A.Configure calendar sharing between Bookings and Outlook.

B.Run a PowerShell script to sync calendars.

C.Add staff members to the Bookings calendar.

D.Integrate Bookings with Dynamics 365.

AnswerC

When added as staff, the calendar appears automatically in Outlook.

Why this answer

Option C is correct because for staff to see their Bookings calendar within Outlook, they must be added as staff members in the Bookings calendar. This automatically creates a Bookings-specific calendar in their Outlook that syncs appointments. No additional sharing or scripting is required.

Exam trap

The trap here is that candidates may think additional sharing or scripting is required, but Microsoft has designed Bookings to automatically integrate with Outlook once staff membership is configured, making the other options unnecessary overhead.

How to eliminate wrong answers

Option A is wrong because calendar sharing between Bookings and Outlook is not a separate configuration step; the integration is built-in once staff are added. Option B is wrong because no PowerShell script is needed to sync calendars; the synchronization happens automatically via Exchange Web Services (EWS) when staff are members. Option D is wrong because integrating Bookings with Dynamics 365 is an advanced feature for customer relationship management, not a prerequisite for staff to see their Bookings calendar in Outlook.

Practice this question →

189

MCQmedium

A department asks for the Microsoft 365 service best suited for interactive business dashboards. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Purview Compliance Manager

B.Power BI

C.Microsoft Defender for Endpoint

D.Microsoft Entra Privileged Identity Management

AnswerB

Power BI provides reporting, semantic models, and dashboards.

Why this answer

Power BI is the correct choice because it is Microsoft's dedicated business analytics service that enables users to create interactive dashboards and reports from various data sources. It provides drag-and-drop visualization tools, real-time data refresh, and natural language querying (Q&A) without requiring custom operational scripts, aligning perfectly with the department's requirement for no-code dashboard creation.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager's compliance dashboards (which are static compliance scorecards) with interactive business dashboards, or assume that security tools like Defender for Endpoint include business analytics features, leading them to select a wrong option that sounds 'dashboard-like' but serves a completely different purpose.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a compliance management tool that assesses and reports on an organization's compliance posture against regulations; it does not create interactive business dashboards. Option C is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response; it is not designed for business analytics or dashboarding. Option D is wrong because Microsoft Entra Privileged Identity Management (PIM) manages just-in-time privileged access to Azure AD and Azure resources; it has no capability for building interactive dashboards.

Practice this question →

190

MCQmedium

An organization uses Microsoft Teams and wants to record meetings for compliance purposes. Which Microsoft 365 service provides meeting recording with automatic transcription?

A.Microsoft OneDrive

B.Microsoft Teams meeting recording

C.Microsoft Forms

D.Microsoft Stream

AnswerB

Teams allows recording and automatic transcription.

Why this answer

Microsoft Teams meeting recording with automatic transcription is a native feature of Teams itself, not a separate service. When a meeting is recorded, Teams stores the recording in OneDrive or SharePoint, but the recording and transcription capabilities are part of the Teams meeting experience. Option B is correct because Teams meeting recording directly provides the recording and automatic transcription for compliance purposes.

Exam trap

Microsoft often tests the misconception that Microsoft Stream is the service that provides meeting recording and transcription, but in reality, Stream is only a playback and management interface, while the recording and transcription are native Teams features.

How to eliminate wrong answers

Option A is wrong because Microsoft OneDrive is a cloud storage service that stores the recorded file after the meeting, but it does not provide the meeting recording or transcription functionality itself. Option C is wrong because Microsoft Forms is a survey and quiz tool, not a meeting recording or transcription service. Option D is wrong because Microsoft Stream (classic) was previously used for storing and managing meeting recordings, but as of 2023, Teams meeting recordings are stored in OneDrive/SharePoint, and Stream (on SharePoint) is a video playback portal, not the service that performs recording or transcription.

Practice this question →

191

MCQhard

Your organization is migrating from on-premises Exchange to Exchange Online. You need to ensure that users can access their mailboxes using Outlook for Windows without re-entering credentials each time. Which Microsoft 365 service should you configure to enable single sign-on (SSO) and modern authentication?

A.Microsoft Entra ID

B.Microsoft Intune

C.Microsoft Purview

D.Microsoft Sentinel

AnswerA

Provides identity and access management, including SSO and modern auth.

Why this answer

Microsoft Entra ID (formerly Azure AD) is the identity and access management service that provides single sign-on (SSO) and modern authentication (OAuth 2.0, OpenID Connect) for Exchange Online. When configured, Outlook for Windows can use the Microsoft Entra ID token to authenticate silently, eliminating the need for users to re-enter credentials each time they access their mailbox.

Exam trap

The trap here is that candidates confuse Microsoft Intune (device management) with identity services, or assume that any Microsoft 365 security or management tool can enable SSO, when only the identity provider (Microsoft Entra ID) can issue authentication tokens for modern auth.

How to eliminate wrong answers

Option B is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service; it does not handle authentication or SSO for Exchange Online. Option C is wrong because Microsoft Purview is a compliance and data governance solution (e.g., data loss prevention, eDiscovery); it has no role in enabling SSO or modern authentication. Option D is wrong because Microsoft Sentinel is a cloud-native security information and event management (SIEM) service; it is used for threat detection and response, not for identity-based authentication.

Practice this question →

192

MCQhard

The exhibit shows a Microsoft Purview auto-labeling policy configuration. A user uploads a document containing a credit card number to a SharePoint Online site. The document does not get automatically labeled. Which is the most likely reason?

A.The credit card number does not meet the minimum confidence threshold of 75.

B.The document was uploaded before the policy was published.

C.The policy is configured to apply to Exchange Online, not SharePoint.

D.The document is a PDF file, and auto-labeling only supports Office documents.

AnswerB

Auto-labeling policies do not apply retroactively to existing documents.

Why this answer

Option B is correct because auto-labeling policies in Microsoft Purview apply labels to documents that are newly created or modified after the policy is published. Documents uploaded before the policy's publication date are not retroactively scanned or labeled unless a separate manual or scheduled labeling job is triggered. Since the user uploaded the document before the policy was published, it falls outside the policy's scope.

Exam trap

The trap here is that candidates often assume auto-labeling policies scan all existing content in a location, but Microsoft Purview auto-labeling only applies to content created or modified after the policy is published, not retroactively.

How to eliminate wrong answers

Option A is wrong because the minimum confidence threshold of 75 is a default setting for sensitive info types, but credit card numbers are a built-in sensitive info type with a high confidence level; if the number is valid, it typically meets the threshold. Option C is wrong because the exhibit shows the policy is configured for SharePoint Online, not Exchange Online, as indicated by the location selection in the policy configuration. Option D is wrong because auto-labeling in Purview supports PDF files for sensitivity labels when applied via auto-labeling policies, not just Office documents.

Practice this question →

193

Multi-Selecthard

Which TWO Microsoft 365 compliance features are available in Microsoft Purview to help organizations manage and protect sensitive data?

Select 2 answers

A.Microsoft Defender for Cloud Apps

B.Data Lifecycle Management

C.Microsoft Entra ID Protection

D.Microsoft Defender XDR

E.Data Loss Prevention (DLP)

AnswersB, E

Data Lifecycle Management (retention and deletion) is part of Purview.

Why this answer

Data Lifecycle Management (B) is correct because it enables organizations to govern their data through retention policies and retention labels, automatically retaining or deleting content based on regulatory requirements. Data Loss Prevention (DLP) (E) is correct because it identifies, monitors, and protects sensitive data across Microsoft 365 services (Exchange, SharePoint, OneDrive, Teams) by applying policies that prevent unauthorized sharing or leakage.

Exam trap

Microsoft often tests the distinction between security tools (Defender, Entra ID Protection) and compliance tools (Purview features), so candidates mistakenly select Defender for Cloud Apps or Defender XDR because they associate 'protect sensitive data' with security rather than data governance and loss prevention.

Practice this question →

194

MCQhard

A multinational organization uses Microsoft 365 and wants to comply with data residency requirements. They need to ensure that data for European users stays within the European Union. Which Microsoft 365 feature should they configure?

A.Create retention policies for EU users.

B.Set conditional access policies to restrict access from outside EU.

C.Use data loss prevention policies to block data movement.

D.Configure multi-geo capabilities in SharePoint Online and OneDrive.

AnswerD

Multi-geo enables data residency by provisioning data in specific geographic locations.

Why this answer

Multi-Geo capabilities in SharePoint Online and OneDrive allow organizations to provision and store data at rest in specific geographic locations, such as the European Union, to meet data residency requirements. This feature enables tenant administrators to define a preferred data location for users, ensuring their content remains within the EU boundary.

Exam trap

The trap here is that candidates confuse data residency (where data is stored at rest) with data protection mechanisms like retention, access control, or DLP, which address data lifecycle and security but not physical storage location.

How to eliminate wrong answers

Option A is wrong because retention policies control how long data is kept, not where it is stored geographically; they do not enforce data residency. Option B is wrong because conditional access policies control authentication and access based on location, but they do not determine where data is physically stored at rest. Option C is wrong because data loss prevention policies prevent sensitive data from being shared or exfiltrated, but they do not control the geographic location of data storage.

Practice this question →

195

MCQeasy

A user wants to schedule a meeting with colleagues and automatically record the meeting for later viewing. Which Microsoft 365 apps should they use?

A.Microsoft SharePoint and Microsoft Viva Topics

B.Microsoft Viva Engage and Microsoft Forms

C.Microsoft OneDrive and Microsoft Stream

D.Microsoft Outlook and Microsoft Teams

AnswerD

Outlook schedules meetings; Teams can record the meeting.

Why this answer

Microsoft Outlook is used to schedule the meeting and send invitations, while Microsoft Teams provides the platform to conduct the online meeting with the capability to automatically record the session. The recording is saved to Microsoft Stream (or OneDrive/SharePoint depending on the version), but the core apps for scheduling and recording are Outlook and Teams.

Exam trap

The trap here is that candidates may think Microsoft Stream alone is sufficient for recording, but Stream is only the storage/playback service, not the app that schedules or conducts the meeting with recording capability.

How to eliminate wrong answers

Option A is wrong because Microsoft SharePoint is a document management and collaboration platform, and Viva Topics uses AI to organize knowledge; neither provides meeting scheduling or recording. Option B is wrong because Viva Engage is an enterprise social network and Forms is for surveys and quizzes; neither supports meeting scheduling or recording. Option C is wrong because OneDrive is for file storage and sync, and Stream is a video service; while Stream can host recordings, OneDrive does not schedule meetings, and the combination lacks the scheduling and real-time meeting capabilities.

Practice this question →

196

Multi-Selecteasy

Which TWO Microsoft 365 apps are included in the Microsoft 365 Business Basic subscription?

Select 2 answers

A.Microsoft Teams

B.Microsoft Outlook (web)

C.Microsoft Power BI Pro

D.Microsoft Word (desktop app)

E.Microsoft Purview Compliance Portal

AnswersA, B

Teams is included in Business Basic.

Why this answer

Microsoft 365 Business Basic is a cloud-only subscription that includes web and mobile versions of Office apps, not desktop installations. Microsoft Teams is included as the core collaboration hub for chat, meetings, and file sharing. Microsoft Outlook (web) is also included, providing email, calendar, and contacts via a browser interface.

Exam trap

The trap here is that candidates often confuse 'Business Basic' with 'Business Standard' or 'Apps for Business,' assuming desktop Office apps are included, or they mistakenly think Power BI Pro is a standard component of any Microsoft 365 plan.

Practice this question →

197

MCQhard

A company has employees who frequently work from home on personal devices. They need to ensure corporate data in Microsoft 365 is protected even if the device is lost or compromised, without managing the entire device. What should they implement?

A.Microsoft Intune App Protection Policies

B.Microsoft Defender for Endpoint

C.Microsoft Entra Conditional Access

D.Microsoft Purview Data Loss Prevention

AnswerA

App Protection Policies protect corporate data within apps on personal devices without full device management.

Why this answer

Microsoft Intune App Protection Policies (MAM) protect data at the app level without device enrollment. Conditional Access controls access. DLP prevents data loss.

MAM is the correct approach for unmanaged devices.

Practice this question →

198

Multi-Selecteasy

Which TWO Microsoft 365 services are primarily used for enterprise social networking and communication within an organization?

Select 2 answers

A.Microsoft Teams

B.Microsoft Viva Engage

C.Microsoft SharePoint

D.Microsoft Stream

E.Exchange Online

AnswersA, B

Microsoft Teams provides chat and channels for communication.

Why this answer

Microsoft Teams is correct because it serves as the primary hub for persistent chat, meetings, and collaboration, integrating enterprise social networking features such as channels, @mentions, and threaded conversations. Microsoft Viva Engage (formerly Yammer) is correct because it provides a dedicated enterprise social network for broad organizational communication, communities, and knowledge sharing, distinct from Teams' more team-focused interactions.

Exam trap

Microsoft often tests the distinction between collaboration tools by making SharePoint or Exchange Online seem like social networking options, but the trap here is confusing document management or email with enterprise social networking, which requires persistent, community-driven communication features.

Practice this question →

199

Multi-Selectmedium

WideWorldImporters is a retail company with 500 employees. They use Microsoft 365 Business Premium. The company has a shared mailbox for customer inquiries that several employees monitor. Recently, they noticed that some emails from the shared mailbox are being deleted before being read. The IT admin investigates and finds that a PowerShell script runs daily to clean up the shared mailbox by deleting emails older than 30 days. However, some emails are being deleted before 30 days. The admin needs to ensure that no emails are deleted from the shared mailbox before they are read by at least one person. The admin also wants to retain all emails for a minimum of 30 days for compliance purposes, even if they are read. Additionally, the admin wants to prevent users from accidentally deleting emails from the shared mailbox. Which three configurations should the admin implement? (Choose three. Each correct answer is part of the solution.)

Select 3 answers

A.Disable the PowerShell script that deletes emails older than 30 days.

B.Place the shared mailbox on litigation hold for 30 days.

C.Enable the shared mailbox for archiving to move old emails to archive.

D.Modify the shared mailbox permissions to remove 'Delete' access for users.

E.Apply a messaging records management (MRM) policy that deletes emails after 30 days.

AnswersA, B, D

The script is deleting emails prematurely; disabling it stops the issue.

Why this answer

Option A is correct because the PowerShell script is the root cause of premature deletions. Disabling it stops the automated cleanup that deletes emails before they are read, allowing the admin to implement controlled retention policies instead.

Exam trap

The trap here is that candidates may confuse archiving (Option C) with retention, not realizing that archiving does not prevent deletion or enforce a minimum retention period, and may incorrectly assume an MRM deletion policy (Option E) can be tuned to meet both the read-before-delete and 30-day retention requirements simultaneously.

Practice this question →

200

MCQmedium

A company uses Microsoft 365 E3. They want to upgrade to include advanced compliance features like communication compliance and insider risk management. Which add-on license do they need?

A.Microsoft 365 E5 Compliance

B.Microsoft 365 E5 Security

C.Microsoft Purview Compliance Manager

D.Microsoft Defender for Cloud Apps

AnswerA

Correct. E5 Compliance add-on includes communication compliance and insider risk management.

Why this answer

Microsoft 365 E5 Compliance is the correct add-on license because it includes advanced compliance features such as Communication Compliance (for monitoring and detecting inappropriate messages) and Insider Risk Management (for identifying and mitigating internal data risks). These features are not available in the base Microsoft 365 E3 subscription and require the E5 Compliance SKU to unlock.

Exam trap

The trap here is that candidates often confuse Microsoft 365 E5 Security with Microsoft 365 E5 Compliance, assuming that advanced security features automatically include compliance capabilities, but Microsoft separates these into distinct SKUs with different feature sets.

How to eliminate wrong answers

Option B is wrong because Microsoft 365 E5 Security provides advanced security features like Microsoft Defender for Office 365 and Microsoft Defender for Identity, but it does not include Communication Compliance or Insider Risk Management, which are compliance-specific capabilities. Option C is wrong because Microsoft Purview Compliance Manager is a tool within the Microsoft Purview compliance portal for managing compliance assessments and controls, not a license add-on; it is included with E5 Compliance but cannot be purchased as a standalone license to enable the required features. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) focused on securing cloud applications and data, not a license that provides Communication Compliance or Insider Risk Management.

Practice this question →

201

Matchingmedium

Match each Microsoft 365 service level agreement (SLA) term to its meaning.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Service is available at least 99.9% of the time monthly

Discount on bill if SLA is not met

Scheduled downtime for updates

Minimum spend or term length in contract

Why these pairings

SLAs define service availability and compensation for downtime.

Practice this question →

202

MCQhard

Your organization uses Microsoft 365 E5 and experiences a security incident where a user's account is compromised. You need to immediately prevent the attacker from accessing Microsoft 365 services while preserving the user's data for investigation. Which action should you take?

A.Block sign-in for the user in Microsoft Entra ID

B.Delete the user account from Microsoft Entra ID

C.Revoke the user's sessions using Microsoft Entra ID

D.Reset the user's password

AnswerA

Blocking sign-in immediately prevents all access while preserving data for investigation.

Why this answer

Blocking sign-in for the user in Microsoft Entra ID immediately prevents the attacker from authenticating to any Microsoft 365 service, while the user's data remains intact in Exchange Online, SharePoint, and OneDrive for forensic analysis. This action does not delete or alter any data, preserving the full investigation trail.

Exam trap

The trap here is that candidates confuse 'revoke sessions' (which only kills current sessions but allows re-authentication) with 'block sign-in' (which prevents all future authentication), leading them to choose Option C as a quick fix without realizing the attacker can simply log back in.

How to eliminate wrong answers

Option B is wrong because deleting the user account permanently removes the user object and all associated data (mailbox, OneDrive files, SharePoint access) from Microsoft 365, destroying evidence needed for investigation. Option C is wrong because revoking sessions only terminates active tokens and sessions but does not prevent the attacker from re-authenticating with the compromised credentials, leaving the account still vulnerable. Option D is wrong because resetting the password alone does not invalidate existing refresh tokens or active sessions; the attacker could still use cached tokens or non-expired sessions to access services until those tokens expire or are explicitly revoked.

Practice this question →

203

MCQeasy

An HR manager needs to collect anonymous feedback from employees about a new benefits policy. They want the responses to be automatically summarized into charts and graphs. Which Microsoft 365 app is best suited for this task?

A.Microsoft Forms

B.Microsoft Excel

C.Microsoft Sway

D.Microsoft Power BI

AnswerA

Forms includes built-in anonymous response options and automatically generates charts from responses.

Why this answer

Microsoft Forms is the correct choice because it is specifically designed for creating surveys and quizzes, with built-in support for anonymous responses and automatic generation of charts and graphs from collected data. The HR manager can create a feedback form, enable anonymous submissions, and view real-time summaries with visualizations directly within Forms, without needing additional tools.

Exam trap

The trap here is that candidates often confuse Microsoft Forms with Microsoft Power BI, assuming that any charting or graphing requirement must involve a dedicated analytics tool, but Forms handles simple survey summarization natively without needing Power BI's complexity.

How to eliminate wrong answers

Option B is wrong because Microsoft Excel is a spreadsheet application for data analysis and manual chart creation, but it lacks native anonymous survey capabilities and does not automatically collect responses or generate charts without manual setup. Option C is wrong because Microsoft Sway is a presentation and storytelling app for creating interactive reports and newsletters, not for collecting feedback or generating charts from survey data. Option D is wrong because Microsoft Power BI is a business analytics service for advanced data visualization and reporting from multiple data sources, but it is overkill for simple anonymous feedback collection and does not provide built-in survey creation or anonymous response handling.

Practice this question →

204

MCQmedium

Refer to the exhibit. An admin configures these two Conditional Access policies in Microsoft Entra ID. A user signs in from a new location with a device that is not compliant and is assigned a high risk level by identity protection. What will happen to the user's sign-in?

A.The user is granted access because the second policy requires MFA.

B.The user is prompted for MFA due to the second policy.

C.The user is blocked from signing in.

D.The user is allowed access but with session restrictions.

AnswerC

High risk triggers the block policy.

Why this answer

The first Conditional Access policy blocks all access for users assigned a high risk level. Since the user is assigned a high risk level by Identity Protection, this policy is triggered first, and because Conditional Access policies are evaluated in order and the first applicable policy that results in a block will prevent further evaluation, the user is blocked from signing in. The second policy requiring MFA for non-compliant devices is never evaluated because the block policy takes precedence.

Exam trap

The trap here is that candidates assume the second policy (requiring MFA) will be applied because the device is non-compliant, but they overlook that the first policy with a 'Block' grant control takes precedence and stops all further policy evaluation.

How to eliminate wrong answers

Option A is wrong because the user is blocked by the first policy before the second policy can grant access, and the second policy does not grant access unconditionally—it requires MFA. Option B is wrong because the user is blocked by the first policy, so they are never prompted for MFA by the second policy; the block overrides any subsequent grant controls. Option D is wrong because the user is blocked entirely, not allowed access with session restrictions; session restrictions would only apply if access were granted.

Practice this question →

205

MCQmedium

A sales manager wants to create an interactive dashboard that visualizes the sales pipeline, customer interactions, and team performance. The data resides in Dynamics 365. The manager needs to build the dashboard quickly without coding and share it with the team. Which Microsoft 365 app should they use?

A.Power BI

B.Power Apps

C.Power Automate

D.Power Virtual Agents

AnswerA

Power BI is designed for data visualization and dashboard creation, connecting to Dynamics 365 and sharing with others.

Why this answer

Power BI is the correct choice because it is a business analytics service that enables users to create interactive dashboards and visualizations from data sources like Dynamics 365 without writing code. It supports quick data modeling, real-time updates, and easy sharing with team members via Power BI service or embedded reports, meeting the manager's need for speed and collaboration.

Exam trap

The trap here is that candidates may confuse Power BI with Power Apps because both are part of the Power Platform and can integrate with Dynamics 365, but Power Apps is for building custom apps, not for creating dashboards or visualizations.

How to eliminate wrong answers

Option B (Power Apps) is wrong because it is a low-code platform for building custom applications, not for creating interactive dashboards or visualizations; it focuses on app logic and forms, not data analytics. Option C (Power Automate) is wrong because it is designed for workflow automation and process orchestration, not for building dashboards or visual data exploration. Option D (Power Virtual Agents) is wrong because it is a tool for creating conversational AI chatbots, not for data visualization or reporting.

Practice this question →

206

MCQmedium

A global sales team uses Microsoft Teams for communication. They need to automate business workflows such as sending approval requests when a new lead is created in Dynamics 365. Which Microsoft 365 service should they integrate with Teams?

A.Power Apps

B.Power Automate

C.Power BI

D.Power Virtual Agents

AnswerB

Power Automate allows you to create automated workflows that integrate Dynamics 365 with Teams for approvals.

Why this answer

Power Automate (Option B) is the correct service because it is designed specifically for automating business workflows across Microsoft 365 and third-party services. When a new lead is created in Dynamics 365, a Power Automate flow can trigger an approval request in Teams, enabling seamless process automation without custom code.

Exam trap

The trap here is that candidates may confuse Power Automate with Power Apps, mistakenly thinking that building a custom app is necessary for workflow automation, whereas Power Automate is the dedicated service for no-code/low-code process automation.

How to eliminate wrong answers

Option A is wrong because Power Apps is a low-code platform for building custom applications, not for automating workflows or sending approval requests. Option C is wrong because Power BI is a business analytics tool for data visualization and reporting, not for workflow automation. Option D is wrong because Power Virtual Agents is a chatbot service for creating conversational AI agents, not for triggering automated approval workflows.

Practice this question →

207

MCQhard

An organization uses Microsoft Teams for collaboration. The security team wants to ensure that external guests cannot download files shared in Teams channels. Compliance requirements also demand that all communication in Teams be encrypted at rest and in transit. Which built-in Teams capabilities address these requirements?

A.Sensitivity labels applied to the Teams site

B.Microsoft Purview Data Loss Prevention policies

C.Microsoft Entra Conditional Access policies

D.Teams information barriers and default encryption

AnswerD

Information barriers block guest downloads; default encryption covers at rest and in transit.

Why this answer

Option D is correct because Teams information barriers can be configured to restrict external guest actions, such as preventing file downloads, while default encryption (Microsoft 365 uses BitLocker for disk-level encryption and TLS 1.2+ for data in transit) ensures all communication is encrypted at rest and in transit. These are built-in capabilities that directly address both the guest download restriction and encryption compliance requirements without additional licensing or complex configuration.

Exam trap

The trap here is that candidates often confuse information barriers with DLP or Conditional Access, but information barriers are the specific built-in Teams capability that can restrict guest download actions, while DLP and Conditional Access serve different purposes (data leak prevention and access control, respectively).

How to eliminate wrong answers

Option A is wrong because sensitivity labels applied to a Teams site control access and protection settings (e.g., encryption, visual markings) but do not have a specific setting to block external guests from downloading files shared in channels; they focus on classification and protection of content, not guest download permissions. Option B is wrong because Microsoft Purview Data Loss Prevention (DLP) policies monitor and prevent accidental sharing of sensitive data (e.g., credit card numbers) but cannot restrict guest download actions; DLP policies are about detecting and blocking data leaks, not controlling user permissions like download capability. Option C is wrong because Microsoft Entra Conditional Access policies enforce access controls based on conditions (e.g., device compliance, location) but do not directly prevent external guests from downloading files; they manage authentication and access, not file-level download restrictions within Teams.

Practice this question →

208

MCQhard

A sales team uses SharePoint Online to store contract templates. When a new contract is added to a specific library, a notification should be sent to a Microsoft Teams channel with a direct link to the document. Additionally, the contract owner must receive a custom approval request via email before the document is shared externally. Which Microsoft 365 services must be combined to achieve this?

A.Microsoft Power Automate and Microsoft Teams

B.Microsoft Teams and Microsoft Power Apps

C.Microsoft Forms and Microsoft Teams

D.Microsoft Power BI and Microsoft Teams

AnswerA

Correct. Power Automate enables the workflow (triggered by SharePoint, actions to Teams and email), and Teams receives the notification.

Why this answer

Option A is correct because Microsoft Power Automate can trigger a flow when a new contract is added to a SharePoint Online library, sending a notification with a direct link to a Microsoft Teams channel. Additionally, Power Automate can initiate a custom approval request via email to the contract owner before external sharing is allowed. This combination directly addresses both requirements without needing additional services.

Exam trap

The trap here is that candidates may assume Microsoft Teams alone can handle notifications and approvals, but Teams lacks native workflow automation for SharePoint events, requiring Power Automate as the orchestration layer.

How to eliminate wrong answers

Option B is wrong because Microsoft Power Apps is a low-code platform for building custom apps, not for automating workflows or sending notifications and approvals; it lacks the built-in triggers and actions for SharePoint events and Teams messaging. Option C is wrong because Microsoft Forms is used for creating surveys and quizzes, not for triggering notifications or approval workflows based on SharePoint document events. Option D is wrong because Microsoft Power BI is a business analytics tool for data visualization and reporting, not for workflow automation or real-time notifications.

Practice this question →

209

Multi-Selecteasy

Which TWO Microsoft 365 apps are primarily used for real-time communication and collaboration?

Select 2 answers

A.Microsoft Teams

B.Microsoft Planner

C.Microsoft Forms

D.OneNote

E.Microsoft Viva Engage

AnswersA, E

Teams is a hub for real-time chat, meetings, and collaboration.

Why this answer

Microsoft Teams is primarily designed for real-time communication and collaboration, offering features such as instant messaging, voice and video calls, and persistent chat channels. It integrates deeply with Microsoft 365 to enable synchronous teamwork, making it the core hub for real-time interactions.

Exam trap

The trap here is that candidates may confuse productivity tools (like Planner or OneNote) with communication apps, or mistakenly think Viva Engage (formerly Yammer) is not a real-time collaboration tool, but it is indeed used for enterprise social networking and real-time conversations across the organization.

Practice this question →

210

MCQeasy

A marketing team needs to create a visually compelling newsletter that can be distributed via email and viewed in a browser. Which Microsoft 365 app should they use?

A.Microsoft Publisher

B.Microsoft PowerPoint

C.Microsoft Word

D.Microsoft Sway

AnswerD

Sway is designed for creating interactive newsletters and reports that can be shared via a link.

Why this answer

Microsoft Sway is the correct choice because it is specifically designed for creating interactive, web-based newsletters and presentations that can be easily shared via a link and viewed in any browser. Unlike traditional desktop publishing tools, Sway uses a responsive design canvas that automatically adapts to different screen sizes, making it ideal for email distribution and browser viewing without requiring recipients to download attachments.

Exam trap

The trap here is that candidates often confuse Microsoft Publisher (a desktop publishing tool) with Sway because both can create visually rich content, but Publisher lacks the web-first, responsive, and browser-based sharing capabilities that the question explicitly requires.

How to eliminate wrong answers

Option A is wrong because Microsoft Publisher is a desktop publishing application focused on print layouts (e.g., brochures, flyers) and does not natively support web-based distribution or responsive browser viewing without manual conversion. Option B is wrong because Microsoft PowerPoint is optimized for slide-based presentations and lacks the fluid, scrollable storytelling format and built-in web publishing features that Sway offers for newsletters. Option C is wrong because Microsoft Word is a word processor designed for documents and print, and while it can be saved as HTML, it does not provide a responsive, interactive web layout or easy browser-based sharing without attachments.

Practice this question →

211

MCQmedium

A department head asks which Microsoft 365 option should be used to allow customers to book appointments online based on staff availability. Microsoft 365 app or service is the best fit?

A.Microsoft Planner

B.Microsoft Purview Audit

C.Microsoft Bookings

D.Microsoft Forms

AnswerC

Bookings provides online appointment scheduling and calendar integration.

Why this answer

Microsoft Bookings is the correct choice because it is a Microsoft 365 app specifically designed to allow customers to book appointments online based on staff availability. It integrates with Exchange Online to synchronize staff calendars, manage time slots, and send automated confirmations, making it the ideal solution for scheduling customer-facing appointments.

Exam trap

The trap here is that candidates may confuse Microsoft Bookings with Microsoft Forms, thinking Forms can handle scheduling, but Forms lacks calendar integration and real-time availability checks, which are core to Bookings.

How to eliminate wrong answers

Option A is wrong because Microsoft Planner is a task management tool for organizing team work and projects, not for scheduling customer appointments. Option B is wrong because Microsoft Purview Audit is a compliance and auditing service that logs user and admin activities, not a booking or scheduling tool. Option D is wrong because Microsoft Forms is used to create surveys, quizzes, and polls, not for managing staff availability or customer bookings.

Practice this question →

212

MCQmedium

A training department needs to create interactive learning modules that include content pages, quizzes, and surveys. They also need to track completion and results for each learner. Which Microsoft 365 app should they use as the primary authoring tool for the quizzes and surveys?

A.Microsoft Stream

B.Microsoft Forms

C.Microsoft Sway

D.Microsoft Viva Learning

AnswerB

Forms allows creation of quizzes with automatic scoring, surveys, and integrates with SharePoint for embedding in learning modules.

Why this answer

Microsoft Forms is the correct primary authoring tool because it is specifically designed for creating quizzes, surveys, and polls with automatic grading, branching logic, and result tracking. It integrates seamlessly with Microsoft Lists and Power Automate to record completion and results per learner, making it ideal for interactive learning modules.

Exam trap

The trap here is that candidates may confuse Microsoft Forms with Microsoft Sway because both can create interactive content, but Sway lacks quiz/survey functionality and result tracking, which Forms provides natively.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video hosting and sharing platform, not an authoring tool for quizzes or surveys; it lacks native quiz creation and result tracking capabilities. Option C is wrong because Microsoft Sway is a digital storytelling and presentation tool for creating interactive reports and newsletters, but it does not support quiz creation, grading, or survey result tracking. Option D is wrong because Microsoft Viva Learning is a learning hub that aggregates content from various sources (e.g., LinkedIn Learning, SharePoint) but is not an authoring tool; it cannot create quizzes or surveys itself.

Practice this question →

213

Multi-Selecteasy

Which TWO Microsoft 365 apps can be used to create and edit documents collaboratively in real time? (Select exactly 2.)

Select 2 answers

A.Microsoft Teams

B.Outlook on the web

C.Access for the web

D.Word for the web

E.OneNote for the web

AnswersD, E

Word for the web allows real-time co-authoring.

Why this answer

Word for the web and OneNote for the web are both part of the Microsoft 365 web apps suite that support real-time co-authoring. They leverage the Office Online Server infrastructure and the Fluid Framework to allow multiple users to edit the same document simultaneously, with changes syncing via WebSocket connections and operational transforms.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a document editing app because it allows file sharing and preview, but it does not natively provide the real-time collaborative editing capability; that is a feature of the web versions of Office apps like Word and OneNote.

Practice this question →

214

MCQmedium

During a Microsoft 365 planning workshop, provide business-class email, calendars, contacts, and mailboxes. Microsoft 365 app or service is the best fit?

A.Exchange Online

B.Microsoft Purview Audit

C.Microsoft Forms

D.Microsoft Planner

AnswerA

Exchange Online provides hosted email, calendar, contacts, and mailbox services.

Why this answer

Exchange Online is the correct choice because it is Microsoft's cloud-hosted messaging platform that provides business-class email, shared calendars, contact management, and mailbox services. It is the core service within Microsoft 365 designed specifically for these communication and collaboration needs, supporting features like shared mailboxes, resource mailboxes, and calendar sharing via Exchange Web Services (EWS) and MAPI over HTTP.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Audit (a compliance tool) with Exchange Online's mailbox auditing or confuse Planner or Forms as capable of handling email and calendar functions, when in fact only Exchange Online provides the core messaging infrastructure.

How to eliminate wrong answers

Option B (Microsoft Purview Audit) is wrong because it is a compliance and auditing solution that logs user and admin activities across Microsoft 365 services; it does not provide email, calendar, or mailbox functionality. Option C (Microsoft Forms) is wrong because it is a survey and quiz creation tool that collects responses via web forms; it lacks any email hosting, calendar, or contact management capabilities. Option D (Microsoft Planner) is wrong because it is a task management and project planning application integrated with Microsoft Teams and SharePoint; it does not handle email, calendars, or mailboxes.

Practice this question →

215

MCQeasy

A user receives a phishing email that bypasses the spam filter. The security team wants to report the email to Microsoft for analysis. Which Microsoft 365 Defender portal should they use?

A.Microsoft 365 Defender portal

B.Exchange admin center

C.Azure portal

D.Microsoft Purview compliance portal

AnswerA

Correct. The Defender portal allows reporting phishing attempts.

Why this answer

The Microsoft 365 Defender portal (security.microsoft.com) is the correct destination for submitting user-reported phishing emails for analysis. It provides the Submissions page under Email & collaboration, where security teams can send suspicious messages directly to Microsoft for review, bypassing the spam filter's failure. This portal consolidates threat intelligence and automated investigation capabilities for email threats.

Exam trap

The trap here is that candidates often confuse the Microsoft 365 Defender portal with the Exchange admin center, thinking email-related tasks must be done in EAC, but Microsoft 365 Defender is the dedicated security hub for threat submission and analysis.

How to eliminate wrong answers

Option B (Exchange admin center) is wrong because it is used for managing Exchange Online mail flow, transport rules, and mailbox settings, not for submitting phishing samples to Microsoft for analysis. Option C (Azure portal) is wrong because it manages Azure infrastructure, subscriptions, and resources, not Microsoft 365 security operations like email threat submissions. Option D (Microsoft Purview compliance portal) is wrong because it focuses on data governance, compliance, eDiscovery, and retention policies, not on reporting phishing emails for security analysis.

Practice this question →

216

MCQeasy

A company needs to ensure that sensitive documents stored in SharePoint Online are automatically encrypted and cannot be shared with external users. Which Microsoft Purview feature should they use?

A.Communication compliance

B.Data Loss Prevention (DLP) policies

C.Retention labels

D.Sensitivity labels

AnswerD

Sensitivity labels can apply encryption and restrict external sharing.

Why this answer

Sensitivity labels are the correct choice because they enforce encryption and access restrictions directly on documents, including blocking external sharing. Unlike DLP policies, which detect and prevent sharing after the fact, sensitivity labels apply persistent protection that travels with the file, ensuring it remains encrypted even if downloaded or shared outside SharePoint Online.

Exam trap

The trap here is that candidates often confuse DLP policies with sensitivity labels, assuming DLP can both detect and encrypt content, but DLP only monitors and blocks sharing actions—it does not apply persistent encryption to the files themselves.

How to eliminate wrong answers

Option A is wrong because Communication compliance is designed to monitor and detect inappropriate communications (e.g., offensive language or regulatory violations) in Exchange Online, Teams, and Yammer, not to encrypt or restrict sharing of documents. Option B is wrong because Data Loss Prevention (DLP) policies can block external sharing of sensitive content, but they do not automatically encrypt the documents themselves; encryption requires a sensitivity label or Azure Information Protection. Option C is wrong because Retention labels are used to manage data lifecycle (retain or delete content) and do not provide encryption or access controls; they are unrelated to preventing external sharing.

Practice this question →

217

Multi-Selectmedium

A company uses Microsoft 365 E5. They want to implement a solution to automatically classify and protect sensitive data in emails and documents. Which THREE Microsoft Purview features should they use?

Select 3 answers

A.Sensitivity labels

B.Auto-labeling policies

C.Retention policies

D.eDiscovery

E.Data Loss Prevention (DLP) policies

AnswersA, B, E

Correct. Sensitivity labels classify and protect data.

Why this answer

Sensitivity labels are correct because they allow organizations to classify and protect sensitive data by applying encryption, markings, and access restrictions directly to emails and documents. Auto-labeling policies extend this by automatically applying sensitivity labels based on conditions like sensitive information types or patterns, ensuring consistent protection without manual user intervention. Data Loss Prevention (DLP) policies are correct because they detect and prevent accidental sharing of sensitive data by enforcing rules on email and document transmission, such as blocking or warning when sensitive content is detected.

Exam trap

The trap here is that candidates often confuse retention policies (which manage data retention and deletion) with data classification and protection features, leading them to incorrectly select retention policies as a solution for automatically classifying and protecting sensitive data.

Practice this question →

218

MCQmedium

A department asks for the Microsoft 365 service best suited for department document libraries with version history. Which service should they use?

A.Microsoft Purview Compliance Manager

B.SharePoint Online

C.Microsoft Entra Privileged Identity Management

D.Microsoft Defender for Endpoint

AnswerB

SharePoint provides team sites, document libraries, metadata, permissions, and versioning.

Why this answer

SharePoint Online is the correct answer because it provides document libraries with built-in version history, allowing users to track, restore, and manage previous versions of documents. This feature is essential for collaboration and compliance, as it enables rollback to earlier versions and audit trails without additional configuration.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager's compliance features with document version history, but version history is a core SharePoint Online capability, not a compliance or security tool.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a compliance management tool that helps assess and manage regulatory compliance risks, not a service for document storage or version history. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance service for managing, controlling, and monitoring privileged access to Azure AD and other Microsoft Online Services, not for document libraries. Option D is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response, not a document management service with version history capabilities.

Practice this question →

219

MCQmedium

A company uses Microsoft 365 and wants to ensure that sensitive customer data in emails and documents is automatically classified and protected based on content. Which service should they implement?

A.Microsoft Entra ID

B.Microsoft Intune

C.Microsoft Defender for Cloud Apps

D.Microsoft Purview Information Protection

AnswerD

Purview Information Protection uses sensitivity labels to automatically classify and protect data.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides automated classification, labeling, and protection of sensitive data based on content inspection, such as credit card numbers or social security numbers, using trainable classifiers and sensitivity labels. This directly addresses the requirement to automatically classify and protect sensitive customer data in emails and documents within Microsoft 365.

Exam trap

Microsoft often tests the distinction between Microsoft Purview Information Protection (content classification and labeling) and Microsoft Defender for Cloud Apps (cloud app security and DLP), leading candidates to mistakenly choose Defender for Cloud Apps because they associate 'protection' with security monitoring rather than content-based classification.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra ID is an identity and access management service that handles authentication and authorization, not content-based data classification or protection. Option B is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service for managing devices and apps, not for classifying or protecting data within emails and documents. Option C is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility and control over cloud app usage, including threat detection and data loss prevention (DLP) policies, but it does not natively perform automatic content-based classification and labeling of emails and documents; that is the role of Purview Information Protection.

Practice this question →

220

MCQmedium

Your organization is adopting Microsoft 365 Copilot and wants to ensure that Copilot responses are based only on organizational data that the user has permission to access. Which Microsoft 365 feature ensures this?

A.Microsoft Purview Compliance Manager

B.Microsoft Entra ID

C.Microsoft Intune

D.Microsoft Graph permissions

AnswerD

Copilot uses Microsoft Graph to access only the data the user has permissions to.

Why this answer

Microsoft Graph permissions are the correct answer because Copilot uses Microsoft Graph to access organizational data. When a user asks a question, Copilot queries the Microsoft Graph API, which enforces the user's existing permissions (e.g., from Entra ID and SharePoint) to ensure responses are based only on data the user is authorized to see. This is the core mechanism that ties Copilot's responses to the user's access rights.

Exam trap

The trap here is that candidates often confuse identity management (Entra ID) with data-level permission enforcement (Microsoft Graph permissions), assuming that because Entra ID handles authentication, it also controls what data Copilot can access, but the actual data access control is delegated to Graph's permission model.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a tool for assessing and managing compliance posture (e.g., against regulations like GDPR), not for controlling real-time data access permissions for Copilot. Option B is wrong because Microsoft Entra ID (formerly Azure AD) is the identity and authentication service that defines user accounts and groups, but it does not directly enforce data-level permissions within Microsoft Graph queries; it provides the identity token that Graph uses, but the actual permission check is done via Graph permissions. Option C is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) service for managing devices and apps, not for controlling data access permissions within Microsoft 365 services like Copilot.

Practice this question →

221

MCQmedium

A sales team needs to track customer interactions, manage leads, and automate follow-up emails. Which Microsoft 365 app is specifically designed for this customer relationship management (CRM) purpose?

A.Microsoft Dynamics 365 Sales

B.Microsoft Outlook

C.Microsoft SharePoint

D.Microsoft Power Automate

AnswerA

Correct. This is a dedicated CRM app for managing sales processes, leads, and customer interactions.

Why this answer

Microsoft Dynamics 365 Sales is a dedicated customer relationship management (CRM) application within the Dynamics 365 suite, purpose-built for tracking customer interactions, managing leads, and automating follow-up emails. Unlike general productivity tools, it provides structured pipelines, lead scoring, and workflow automation specifically for sales processes.

Exam trap

The trap here is that candidates confuse a general productivity tool (Outlook) or a workflow engine (Power Automate) with a full CRM solution, overlooking that Dynamics 365 Sales is the only option specifically architected for end-to-end customer relationship management.

How to eliminate wrong answers

Option B is wrong because Microsoft Outlook is an email and calendar client, not a CRM system; it lacks lead management, pipeline tracking, and automated follow-up workflows. Option C is wrong because Microsoft SharePoint is a document management and collaboration platform, not designed for CRM functions like lead scoring or interaction tracking. Option D is wrong because Microsoft Power Automate is a workflow automation tool that can integrate with CRM systems but is not a CRM application itself; it has no native lead or customer interaction management capabilities.

Practice this question →

222

MCQmedium

A sales manager needs a visual tool to track the sales pipeline with stages, deal values, and assigned team members. The team should be able to update the board in real time and see changes instantly. Which Microsoft 365 app is most suitable?

A.Microsoft Lists

B.Microsoft Dynamics 365 Sales

C.Microsoft Planner

D.Microsoft Excel

AnswerA

Lists allows creation of a visual board (using the Gallery or Board view) that can track stages, values, and assignments with real-time updates across the team.

Why this answer

Microsoft Lists is the most suitable app because it provides a customizable, real-time collaborative board view that can track sales pipeline stages, deal values, and assigned team members. Lists supports real-time co-authoring and instant updates via SharePoint, making it ideal for a visual, always-current sales tracking tool without requiring a full CRM system.

Exam trap

The trap here is that candidates often confuse Microsoft Planner's task board with a sales pipeline tool, but Planner lacks custom fields for deal values and real-time data updates across multiple users, making Lists the correct choice for this specific requirement.

How to eliminate wrong answers

Option B (Microsoft Dynamics 365 Sales) is wrong because it is a full-featured CRM platform designed for complex sales processes, not a simple visual board tool; it requires licensing and setup beyond the scope of a lightweight team tracking need. Option C (Microsoft Planner) is wrong because it is task-oriented with Kanban boards but lacks native fields for deal values and pipeline stages, and its real-time sync is limited to task status, not custom data like monetary amounts. Option D (Microsoft Excel) is wrong because while it can track data, it does not support real-time collaborative board views with instant updates; changes require manual refresh or sharing, and it lacks the visual pipeline stage representation needed.

Practice this question →

223

MCQmedium

A manager wants to create a team site to collaborate with external partners on a project. They need to share documents with external users and control permissions. Which Microsoft 365 service should they use?

A.Microsoft Viva Connections

B.Microsoft Teams

C.OneDrive for Business

D.SharePoint Online

AnswerD

SharePoint team sites allow external sharing and granular permissions.

Why this answer

SharePoint Online is the correct choice because it provides team sites with granular permission controls, including the ability to share documents with external users via secure links or direct invitations. It supports external sharing at the site level, allowing the manager to collaborate with partners while maintaining control over permissions and document access.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as the primary collaboration tool for external sharing, but Teams relies on SharePoint for file storage and permission management, making SharePoint the correct answer when the question emphasizes creating a team site and controlling permissions.

How to eliminate wrong answers

Option A is wrong because Microsoft Viva Connections is a personalized employee experience app within Teams and SharePoint, not designed for external collaboration or document sharing with partners. Option B is wrong because Microsoft Teams is primarily a chat-based collaboration platform that relies on SharePoint for file storage; while it can share with external users, the question specifically asks for a service to create a team site and control permissions, which is SharePoint's core function. Option C is wrong because OneDrive for Business is a personal storage service for individual users, not designed for creating team sites or managing external partner collaboration with granular permissions.

Practice this question →

224

Drag & Dropmedium

Drag and drop the steps to assign a Microsoft 365 license to a user via the admin center into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

Why this order

License assignment involves selecting the user, managing licenses, choosing the product, and saving.

Practice this question →

225

MCQhard

A graphic designer needs to create a professional printed brochure with custom page layouts, text wrapping around images, and precise control over typography. Which Microsoft 365 app is designed for this type of desktop publishing task?

A.Microsoft Publisher

B.Microsoft Sway

C.Microsoft Word

D.Microsoft PowerPoint

AnswerA

Correct. Publisher is specifically built for desktop publishing tasks like creating brochures, flyers, and newsletters with advanced layout and design tools.

Why this answer

Microsoft Publisher is the correct choice because it is specifically designed for desktop publishing tasks such as creating professional brochures with custom page layouts, text wrapping around images, and precise typography control. Unlike general-purpose apps, Publisher offers advanced layout tools like master pages, baseline guides, and typographic controls that are essential for print-ready documents.

Exam trap

The trap here is that candidates often confuse Microsoft Word's basic text wrapping and image placement capabilities with the full desktop publishing features of Publisher, assuming Word can handle professional print layouts when it lacks the necessary precision and print-production tools.

How to eliminate wrong answers

Option B is wrong because Microsoft Sway is a web-based storytelling and presentation app focused on interactive, responsive layouts for digital consumption, not precise print desktop publishing. Option C is wrong because Microsoft Word is a word processor optimized for text-heavy documents and basic formatting, lacking the advanced layout and typography controls needed for professional brochure design. Option D is wrong because Microsoft PowerPoint is designed for slide-based presentations with sequential content, not for creating multi-page print layouts with text wrapping and precise typography.

Practice this question →