CCNA M365 Apps Services Questions — Page 4 of 4

226

MCQhard

Refer to the exhibit. An admin creates a Microsoft Purview Data Loss Prevention (DLP) policy rule as shown. When will the rule block access?

A.When a credit card number is detected with high confidence

B.When the document is shared externally

C.When any sensitive information type is detected

D.Never, because the rule is not applied to any location

AnswerA

The rule's condition evaluates the content of the inspected document and requires the Credit Card Number sensitive information type (SIT) to be matched at the High confidence level. Content that is merely similar to a card number or detected at low or medium confidence will not satisfy this threshold. Because the exhibit shows this exact condition, a high-confidence credit card number match is the only outcome that would trigger the configured DLP action.

Why this answer

The rule is configured with a condition that triggers when a credit card number is detected with a confidence level of 'high'. The action 'Block access' is set to execute when this condition is met. Therefore, the rule blocks access specifically when a credit card number is detected with high confidence, making option A correct.

Exam trap

The trap here is that candidates may assume the rule blocks access whenever a sensitive information type is detected, overlooking the specific confidence level requirement, or they might think the rule is not applied to any location without verifying the exhibit's location configuration.

How to eliminate wrong answers

Option B is wrong because the rule does not include a condition for external sharing; the condition is solely based on detecting a credit card number, not on the sharing context. Option C is wrong because the rule specifies a particular sensitive information type (credit card number) with a high confidence level, not 'any sensitive information type'. Option D is wrong because the rule is applied to locations (as indicated by the 'Locations' section in the exhibit, which is assumed to be configured, even if not fully shown), and the question states the admin creates the rule, implying it is applied to at least one location.

Practice this question →

227

MCQmedium

A company wants to provide employees with a personal cloud storage solution that syncs files across devices and allows sharing with external partners. Which Microsoft 365 service should they use?

A.Exchange Online

B.OneDrive for Business

C.Microsoft Teams

D.SharePoint Online

AnswerB

OneDrive for Business provides each user with a dedicated personal library in the cloud, enabling file sync via the OneDrive client, Files On-Demand to conserve local storage, and granular sharing with individuals or groups. It supports version history, co-authoring in Office apps, and integration with Teams and SharePoint. This matches the requirement for personal cloud storage.

Why this answer

OneDrive for Business provides personal cloud storage that syncs files across devices via the OneDrive sync client and enables secure sharing with external partners through granular permission controls. This directly meets the requirement for individual file storage, cross-device synchronization, and external sharing.

Exam trap

The trap here is that candidates often confuse SharePoint Online's team-based document libraries with OneDrive for Business's personal storage, overlooking that the question explicitly asks for 'personal cloud storage' and 'syncs files across devices'—features unique to OneDrive for Business.

How to eliminate wrong answers

Option A is wrong because Exchange Online is an email and calendaring service, not a cloud storage solution; it lacks file sync and external file-sharing capabilities. Option C is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and channels, not a personal storage service; while files can be shared in Teams, it does not provide per-user personal sync storage. Option D is wrong because SharePoint Online is a document management and collaboration platform for team sites, not a personal cloud storage solution; it is designed for shared team libraries rather than individual file sync across devices.

Practice this question →

228

MCQmedium

An HR manager needs to collect employee feedback on a new policy. They want to create a short survey that anonymizes responses and provides automatic charts summarizing the results. Which Microsoft 365 app is best suited for this task?

A.Microsoft Lists

B.Microsoft Forms

C.Microsoft Sway

D.Microsoft Excel

AnswerB

Microsoft Forms is purpose-built for creating surveys and questionnaires with multiple question types (choice, rating, text), branching, and anonymous response options. It automatically compiles responses into real-time summary charts, supports exporting results to Excel, and can be embedded in Teams or SharePoint, making it the ideal tool for an HR manager to efficiently gather and analyze feedback.

Why this answer

Microsoft Forms is the correct choice because it is specifically designed for creating surveys and quizzes with built-in anonymous response settings and automatic chart generation. The HR manager can enable 'Record name' to be off for anonymity, and Forms automatically visualizes results with pie charts, bar graphs, and summary data without manual setup.

Exam trap

The trap here is that candidates may confuse Microsoft Lists as a survey tool because it can collect data via forms, but Lists lacks anonymous response settings and automatic charting, which are core to Forms.

How to eliminate wrong answers

Option A is wrong because Microsoft Lists is a data tracking and organization app for managing structured information like inventory or issues, not for creating surveys with automatic chart summaries. Option C is wrong because Microsoft Sway is a digital storytelling and presentation tool for interactive reports and newsletters, lacking survey creation and anonymous response collection. Option D is wrong because Microsoft Excel is a spreadsheet application that requires manual data entry and chart creation, and it does not natively support anonymous survey distribution or automatic result visualization.

Practice this question →

229

Multi-Selecthard

Which THREE Microsoft 365 services are part of the Microsoft Viva employee experience platform?

Select 3 answers

A.Viva Insights

B.Microsoft SharePoint

C.Viva Connections

D.Microsoft Teams

E.Viva Learning

AnswersA, C, E

Viva Insights is one of the Microsoft Viva modules, delivering productivity and wellbeing analytics to individuals, managers and leaders within Microsoft Teams and the Viva suite. It forms part of the employee experience platform alongside Connections, Learning and Topics.

Why this answer

Viva Insights (A) is a core Microsoft Viva module that uses Workplace Analytics and MyAnalytics data to surface productivity, wellbeing, and collaboration insights within Microsoft 365. Viva Connections (C) is the Viva gateway experience that surfaces company news, resources, and communities through a Teams app and SharePoint home site. Viva Learning (E) is the Viva module that aggregates learning content from LinkedIn Learning, Microsoft Learn, and third-party providers directly into the flow of work.

SharePoint (B) and Microsoft Teams (D) are underlying Microsoft 365 services that Viva builds upon and integrates with, but they are not themselves Viva modules.

Exam trap

MS-900 often tests whether candidates can distinguish Viva modules from the underlying Microsoft 365 services (Teams, SharePoint) that host or power them, causing them to select platform services instead of Viva-branded modules.

Practice this question →

230

MCQmedium

A consulting firm needs a tool to allow customers to schedule appointments with specific consultants online. The tool must show available time slots, send confirmation emails, and allow customers to reschedule. Which Microsoft 365 app should they use?

A.Microsoft Bookings

B.Microsoft Forms

C.Microsoft To Do

D.Microsoft Planner

AnswerA

Microsoft Bookings is a Microsoft 365 scheduling tool that provides a customer-facing booking page where clients can choose from available time slots based on the consultant's calendar. It automatically manages appointment confirmations, rescheduling, and cancellations, and syncs with Exchange Online to prevent double-booking. Bookings also supports virtual appointments through Teams, making it the correct choice for a consulting firm's scheduling needs.

Why this answer

Microsoft Bookings is the correct app because it is specifically designed for scheduling appointments, showing real-time availability of staff, sending automated confirmation and reminder emails, and allowing customers to self-manage rescheduling or cancellations. It integrates with Exchange Online for calendar synchronization and Teams for virtual meetings, meeting all stated requirements.

Exam trap

The trap here is that candidates may confuse Microsoft Bookings with Microsoft Forms or Planner, assuming any Microsoft 365 app with a calendar or task feature can handle scheduling, but only Bookings provides the dedicated customer-facing booking page and automated confirmation workflow required for external appointment management.

How to eliminate wrong answers

Option B (Microsoft Forms) is wrong because it is a survey and data collection tool, not a scheduling system; it cannot show available time slots or send confirmation emails for appointments. Option C (Microsoft To Do) is wrong because it is a personal task management app focused on to-do lists and reminders, lacking any scheduling or customer-facing booking capabilities. Option D (Microsoft Planner) is wrong because it is a project management tool for team task boards and plans, not designed for external customer appointment scheduling or time slot management.

Practice this question →

231

MCQmedium

A company wants to ensure that sensitive documents in Microsoft SharePoint Online are automatically classified and protected when they contain credit card numbers. Which Microsoft 365 service should they use?

A.Microsoft Purview Compliance Manager

B.Microsoft Purview Audit

C.Microsoft Purview Insider Risk Management

D.Microsoft Purview Information Protection

AnswerD

Microsoft Purview Information Protection delivers automatic classification by using content inspection and pattern detection to identify sensitive data types, such as credit card numbers or national identity numbers, and then applies sensitivity labels automatically without manual intervention. These labels can encrypt, restrict access, or add visual markings, ensuring that sensitive documents are consistently protected across the tenant. This is the correct solution because it directly addresses the requirement to ensure that sensitive documents are automatically classified.

Why this answer

Microsoft Purview Information Protection (D) enables organizations to automatically classify and protect sensitive documents based on data classification rules. By configuring a sensitive information type for credit card numbers, SharePoint Online can apply sensitivity labels or retention labels to documents containing that pattern, ensuring they are encrypted or restricted as defined by policy.

Exam trap

The trap here is that candidates may confuse Compliance Manager (a compliance posture dashboard) with the actual data classification and protection service, or assume Insider Risk Management handles content classification when it is actually focused on user behavior analytics.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a risk assessment and compliance score tool, not a data classification or protection engine; it does not automatically classify or protect documents based on content. Option B is wrong because Microsoft Purview Audit provides logging and investigation of user and admin activities, not automated classification or protection of sensitive data. Option C is wrong because Microsoft Purview Insider Risk Management focuses on detecting risky user behaviors (e.g., data exfiltration) through analytics and policies, not on automatically classifying or protecting documents based on content patterns like credit card numbers.

Practice this question →

232

Multi-Selectmedium

A company is planning to migrate its collaboration tools to Microsoft 365. They need a solution for real-time document co-authoring, instant messaging, and video conferencing, all in one integrated platform. Which two Microsoft 365 services should they use? (Choose two.)

Select 2 answers

A.Microsoft SharePoint

B.Microsoft Teams

C.Microsoft OneDrive

D.Microsoft Stream

AnswersA, B

Correct. Microsoft SharePoint provides cloud-based team sites that act as a central document repository, with version history, metadata, and permission controls. Real-time co-authoring in SharePoint allows multiple users to edit the same document simultaneously in a browser, making it a core collaboration workload rather than merely storage. For an organization migrating collaboration tools, SharePoint Online is the backbone for structured file sharing and intranet portals.

Why this answer

Microsoft SharePoint is correct because it provides the document storage and versioning infrastructure that enables real-time co-authoring of documents (e.g., Word, Excel, PowerPoint) via the Office Online Server integration. Microsoft Teams is correct because it integrates instant messaging, persistent chat, and video conferencing (using the underlying Skype for Business Online technology) with SharePoint and OneDrive for seamless file sharing and co-authoring within the same interface.

Exam trap

The trap here is that candidates often confuse OneDrive for Business (a personal sync tool) with SharePoint (a team-based document management platform), or they assume Microsoft Stream provides live video conferencing, when in fact Stream is for recorded video management and Teams handles live meetings.

Practice this question →

233

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage corporate training content and track employee completion?

Select 2 answers

A.Microsoft Viva Learning

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft To Do

E.SharePoint Online

AnswersA, E

Microsoft Viva Learning is a centralized learning hub integrated directly into Microsoft Teams and the Viva suite. It aggregates content from LinkedIn Learning, Microsoft Learn, and custom organizational materials, allowing L&D administrators to create learning paths, assign courses, and track employee completion. This makes it a purpose-built service for creating and managing structured training programs across the organization.

Why this answer

Microsoft Viva Learning (A) is a centralized learning hub within Microsoft Teams that allows organizations to create, assign, and track corporate training content from internal sources (like SharePoint) and external providers (like LinkedIn Learning). SharePoint Online (E) enables the creation and management of training materials as documents, pages, or custom learning portals, and can integrate with Viva Learning to track employee completion via list-based progress tracking or Power Automate workflows.

Exam trap

The trap here is that candidates often confuse Microsoft Forms (a simple quiz tool) or Microsoft Stream (a video platform) with having built-in training management capabilities, when in fact they lack the assignment and completion tracking features required for corporate training.

Practice this question →

234

Multi-Selecteasy

Which TWO Microsoft 365 apps are part of the Microsoft Viva suite?

Select 2 answers

A.Microsoft Viva Insights

B.Microsoft Teams

C.Microsoft SharePoint

D.Microsoft Viva Connections

E.Microsoft Power BI

AnswersA, D

Microsoft Viva Insights is a productivity and wellbeing app that uses Microsoft 365 data (calendar, email, chats, and meetings) to give employees personalized recommendations for focus time, meeting habits, and work-life balance. It is one of the core experiences in the Viva platform, alongside Viva Connections, Topics, Learning, and Goals. Unlike Teams or SharePoint, it is explicitly branded and sold as a Viva module and does not exist as a standalone collaboration or content service.

Why this answer

Microsoft Viva Insights is correct because it is a core component of the Microsoft Viva employee experience platform, providing personalized wellbeing, productivity, and collaboration analytics derived from Microsoft 365 data. It uses signals from emails, meetings, and chats to deliver actionable insights to individuals, managers, and leaders.

Exam trap

The trap here is that candidates often confuse the host platform (Microsoft Teams) or supporting services (SharePoint, Power BI) with the actual Viva suite components, leading them to select those as Viva apps instead of the dedicated Viva modules.

Practice this question →

235

MCQmedium

A department asks for the Microsoft 365 service best suited for task tracking using boards and buckets. Which service should they use?

A.Microsoft Defender for Endpoint

B.Microsoft Planner

C.Microsoft Entra Privileged Identity Management

D.Microsoft Purview Compliance Manager

AnswerB

Microsoft Planner provides task tracking through boards, buckets and cards, matching the department's stated requirement exactly. It is included with most Microsoft 365 licences, so no additional purchase is needed for planning work visually across a team.

Why this answer

Microsoft Planner is the correct service because it provides task tracking using boards and buckets, which are core features of its Kanban-style project management interface. This aligns directly with the department's request for organizing tasks visually, making it the appropriate Microsoft 365 app for lightweight project coordination.

Exam trap

The trap here is that candidates may confuse Microsoft Planner with Microsoft To Do or Microsoft Project, but Planner is specifically designed for team-based task tracking with boards and buckets, whereas To Do is for personal task lists and Project is for complex project management.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a task management tool. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance service for managing, controlling, and monitoring access to privileged roles in Azure AD, not for task tracking. Option D is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory compliance risks, not for organizing tasks with boards and buckets.

Practice this question →

236

MCQeasy

A small marketing agency uses Microsoft 365 Business Basic. They want to enable real-time co-authoring of Word, Excel, and PowerPoint documents stored in SharePoint Online and OneDrive for Business, and ensure that multiple users can edit the same document simultaneously. Which Microsoft 365 service should they use?

A.OneDrive for Business

B.Microsoft Teams

C.Office for the web

D.SharePoint Online

AnswerC

Office for the web (formerly Office Online) provides browser-based versions of Word, Excel, and PowerPoint that support real-time co-authoring. Users can edit documents stored in SharePoint Online and OneDrive for Business simultaneously, seeing each other's changes in real time. This is included in Microsoft 365 Business Basic and meets the requirement without requiring desktop app installations.

Why this answer

Office for the web provides browser-based Word, Excel, and PowerPoint with real-time co-authoring capabilities, included in Microsoft 365 Business Basic. Teams, SharePoint, and OneDrive are collaboration and storage services that integrate with Office but do not themselves provide the document editing experience required for simultaneous editing.

Exam trap

The trap here is thinking that SharePoint Online or OneDrive for Business enables co-authoring directly, when they are storage platforms and the actual editing is done through Office for the web or desktop apps.

Practice this question →

237

MCQmedium

A helpdesk team needs to provide remote assistance to users by viewing and controlling their Windows devices. Which Microsoft 365 service enables this?

A.Microsoft Teams screen sharing

B.Windows 365

C.Microsoft Quick Assist

D.Microsoft Intune Remote Help

AnswerD

Intune Remote Help is the correct solution because it provides secure, policy-compliant remote view and full control capabilities specifically for devices enrolled in Microsoft Intune. It uses Azure AD for authentication and supports role-based access control, session auditing, and elevated privilege prompts, giving the helpdesk the management integration and oversight required for enterprise remote assistance.

Why this answer

Remote Help via Intune allows support personnel to remotely view and control devices. Teams screen sharing is less secure. Quick Assist is not integrated.

Windows 365 is a cloud PC.

Practice this question →

238

MCQmedium

A hospital uses Microsoft 365 and wants to enable secure messaging between doctors and nurses that supports compliance with health data regulations. Which Microsoft 365 service provides encrypted, compliant messaging?

A.Microsoft Yammer

B.Microsoft Teams

C.Microsoft Viva

D.Microsoft Bookings

AnswerB

Microsoft Teams is the correct choice because it provides secure, persistent chat in both one-on-one and channel contexts, with all messages encrypted in transit (TLS) and at rest (AES-256). Its conversation history is stored in Exchange Online mailboxes and SharePoint, enabling compliance features like retention, legal hold, eDiscovery, and communication compliance through Microsoft Purview. For healthcare scenarios, Teams can be configured with DLP policies and sensitivity labels to help meet HIPAA requirements, making it a robust secure messaging solution that Yammer, Viva, and Bookings cannot match.

Why this answer

Microsoft Teams supports encrypted messaging and compliance with health data regulations like HIPAA through features such as data encryption at rest and in transit, Data Loss Prevention (DLP) policies, and eDiscovery. It provides secure communication channels for healthcare professionals while meeting regulatory requirements for protected health information (PHI).

Exam trap

The trap here is that candidates may confuse Microsoft Teams with Yammer as both are communication tools, but Yammer lacks the compliance and encryption features required for regulated health data messaging.

How to eliminate wrong answers

Option A is wrong because Microsoft Yammer is an enterprise social network focused on broad organizational communication and lacks the granular compliance controls (e.g., DLP, eDiscovery, retention policies) needed for secure, regulated messaging in healthcare. Option C is wrong because Microsoft Viva is an employee experience platform that integrates with Microsoft 365 and third-party tools for insights, learning, and wellbeing, but it does not provide native messaging or encrypted communication capabilities. Option D is wrong because Microsoft Bookings is a scheduling and appointment management tool, not a messaging service, and does not offer encrypted, compliant messaging features.

Practice this question →

239

MCQeasy

A marketing team needs to create a slide-based presentation that includes charts copied from an Excel spreadsheet and animated transitions. They also require the ability to collaborate in real-time with remote colleagues. Which Microsoft 365 app should they use?

A.Word

B.Excel

C.PowerPoint

D.Sway

AnswerC

Microsoft PowerPoint is the purpose-built presentation application in Microsoft 365, offering a slide-based canvas with slide masters, layouts, themes, and tools for embedding charts, images, video, and tables. It includes advanced animation and transition controls, rehearsal and presenter-coach features, and real-time co-authoring via OneDrive or SharePoint. This makes PowerPoint the correct tool for creating and delivering a traditional slide-based presentation, as it directly supports the team's need.

Why this answer

PowerPoint is the correct choice because it is specifically designed for creating slide-based presentations with rich media, including charts copied from Excel and animated transitions. It also supports real-time co-authoring via OneDrive or SharePoint, enabling multiple remote colleagues to edit simultaneously.

Exam trap

The trap here is that candidates may confuse Sway as a presentation tool because it can create visually rich content, but it is not a slide-based presentation app and lacks the specific features (animated transitions, real-time co-authoring) that PowerPoint provides for this scenario.

How to eliminate wrong answers

Option A is wrong because Word is a word-processing app for documents, not slide-based presentations, and lacks native support for animated transitions between slides. Option B is wrong because Excel is a spreadsheet app for data analysis and charting, but it cannot create slide-based presentations or apply slide transitions. Option D is wrong because Sway is a digital storytelling app for interactive web-based reports, not traditional slide-based presentations, and it does not support animated transitions or real-time co-authoring in the same way as PowerPoint.

Practice this question →

240

Multi-Selecthard

Which THREE Microsoft 365 services are included in Microsoft 365 E3 that are NOT in Microsoft 365 Business Basic?

Select 3 answers

A.Exchange Online

B.Microsoft Purview Information Protection

C.Microsoft Teams

D.Desktop versions of Office apps

E.Microsoft Intune

AnswersB, D, E

Microsoft Purview Information Protection (formerly Azure Information Protection) delivers persistent data classification and protection through sensitivity labels and encryption. These capabilities are embedded in the E3 security and compliance suite, whereas Business Basic only includes minimal eDiscovery and retention features without full information protection. Since this is a premium compliance feature absent from Business Basic, it is a valid selection.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is included in Microsoft 365 E3 but not in Microsoft 365 Business Basic. Business Basic only includes Exchange Online, Teams, and web/mobile versions of Office apps, with no data classification or rights management capabilities. E3 adds full Purview features like sensitivity labels and encryption for compliance and data loss prevention.

Exam trap

The trap here is that candidates assume all 'Business' plans lack advanced security features, but the question specifically asks for services included in E3 that are NOT in Business Basic, and Exchange Online and Teams are common to both, while desktop Office apps and Intune are also exclusive to E3.

Practice this question →

241

MCQmedium

During requirements gathering, an IT manager says the organization must create an approval workflow between SharePoint and Teams without writing code. Microsoft 365 app or service is the best fit?

A.Power Automate

B.Microsoft Purview Audit

C.Microsoft Forms

D.Microsoft Planner

AnswerA

Power Automate is a low-code/no-code automation platform included with Microsoft 365, designed to create cloud flows that connect apps and services via hundreds of connectors. It uses triggers and actions to orchestrate tasks like document approvals, email notifications, and data synchronization, directly fulfilling a requirement to automate a business process. For an IT manager specifying a collaboration or workflow need, this is the precise service.

Why this answer

Power Automate is the correct choice because it provides a low-code/no-code platform for creating automated workflows that integrate SharePoint and Teams. It allows you to trigger actions based on events in SharePoint (e.g., a new item added to a list) and then perform subsequent actions in Teams (e.g., posting an approval request in a channel). This directly meets the requirement to build an approval workflow without writing code.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task assignment features with workflow automation, but Planner lacks the cross-service orchestration and approval action types that Power Automate provides.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit is a compliance and auditing tool that logs user and admin activities across Microsoft 365; it cannot create or execute approval workflows. Option C is wrong because Microsoft Forms is used to create surveys, quizzes, and polls, not to build multi-step approval workflows between SharePoint and Teams. Option D is wrong because Microsoft Planner is a task management and project tracking tool that lacks the workflow automation capabilities needed to orchestrate an approval process across different services.

Practice this question →

242

MCQmedium

A marketing team wants to create a visual task board to track campaign activities, assign owners, and set deadlines. They do not need subtasks or dependencies. Which Microsoft 365 app is most suitable?

A.Microsoft Planner

B.Microsoft Project

C.Microsoft To Do

D.Microsoft Lists

AnswerA

Microsoft Planner is the correct choice because it provides a purpose-built Kanban-style board with customizable buckets for stages (e.g., To Do, Doing, Done), cards for each task, and built-in fields for assignments, due dates, and progress tracking. This visual board view is immediately available without configuration, and Planner integrates natively with Microsoft Teams channels so the entire marketing team can collaborate in real time. Planner is included with most Microsoft 365 enterprise and business plans, making it a low-friction, cost-effective solution for a team needing a lightweight visual task board.

Why this answer

Microsoft Planner is the most suitable app because it provides a visual Kanban-style task board specifically designed for team collaboration, allowing users to create tasks, assign owners, set deadlines, and track progress without requiring subtasks or dependencies. It integrates seamlessly with Microsoft Teams and other Microsoft 365 services, making it ideal for lightweight project management like campaign tracking.

Exam trap

The trap here is that candidates often confuse Microsoft Planner with Microsoft To Do or Microsoft Lists, assuming any task-related app can handle team boards, but only Planner provides the specific visual Kanban board with team assignment and deadline tracking without dependencies.

How to eliminate wrong answers

Option B (Microsoft Project) is wrong because it is a full-featured project management tool designed for complex projects with dependencies, subtasks, resource management, and Gantt charts, which is overkill for a simple visual task board and not intended for lightweight team collaboration. Option C (Microsoft To Do) is wrong because it is a personal task management app focused on individual productivity, lacking team assignment, shared boards, and deadline tracking for group activities. Option D (Microsoft Lists) is wrong because it is a data-tracking and list management app for creating custom lists, forms, and workflows, but it does not provide a native Kanban board view or built-in task assignment features like Planner does.

Practice this question →

243

Multi-Selectmedium

Which TWO Microsoft 365 services can be used to create and manage chatbots that use AI to answer user questions?

Select 2 answers

A.Microsoft Copilot Studio

B.Microsoft Forms

C.Microsoft Viva Topics

D.Microsoft Bot Framework

E.Microsoft Power Automate

AnswersA, D

Microsoft Copilot Studio is a low-code platform that lets you build AI-powered chatbots and custom copilots without writing code. It provides a graphical conversation designer, natural language understanding, and connectors to Microsoft 365 services like SharePoint, Teams, and Dataverse, enabling you to create, publish, and manage intelligent bots that can be embedded in websites or Teams. This is the only out-of-the-box, no-code chatbot builder in the Microsoft 365 ecosystem.

Why this answer

Microsoft Copilot Studio (formerly Power Virtual Agents) is a low-code platform for creating conversational AI chatbots that can answer user questions using natural language processing and generative AI. It integrates with Microsoft 365 and allows you to build, test, and deploy chatbots without extensive coding.

Exam trap

The trap here is that candidates confuse Microsoft Copilot Studio (a low-code chatbot builder) with Microsoft Power Automate (a workflow tool) or Microsoft Viva Topics (a knowledge management service), not realizing that only Copilot Studio and Bot Framework directly create and manage AI-powered conversational chatbots.

Practice this question →

244

MCQeasy

A marketing team needs to create a printed newsletter that includes custom graphics, text boxes, and precise layout control. Which Microsoft 365 app is specifically designed for desktop publishing tasks like this?

A.Microsoft Word

B.Microsoft Publisher

C.Microsoft Sway

D.Microsoft PowerPoint

AnswerB

Microsoft Publisher is a dedicated desktop publishing application engineered for creating print-ready documents, including newsletters, brochures, and flyers. It offers precise control over text boxes, graphics, and page composition through master pages, ruler guides, and linked text frames, allowing consistent multi-page layouts. Publisher also supports commercial printing specifications such as CMYK color separation and bleeds, making it the correct tool for a professional printed newsletter.

Why this answer

Microsoft Publisher is the correct answer because it is specifically designed for desktop publishing (DTP) tasks such as creating printed newsletters with custom graphics, text boxes, and precise layout control. Unlike general-purpose word processors or presentation tools, Publisher provides advanced page layout features, including master pages, typography controls, and fine-grained object positioning, making it the appropriate choice for this scenario.

Exam trap

The trap here is that candidates often confuse Microsoft Word's basic layout capabilities (like text boxes and images) with the dedicated desktop publishing features of Publisher, leading them to choose Word for tasks that require precise print layout control.

How to eliminate wrong answers

Option A is wrong because Microsoft Word is a word processing application optimized for document creation and text editing, not for precise desktop publishing layout control, and it lacks dedicated DTP features like advanced text wrapping and object layering. Option C is wrong because Microsoft Sway is a web-based presentation and storytelling app designed for interactive, responsive content, not for print-ready desktop publishing with fixed layouts. Option D is wrong because Microsoft PowerPoint is a presentation application focused on slideshows and screen-based delivery, lacking the print-oriented layout tools and page size flexibility required for a printed newsletter.

Practice this question →

245

MCQmedium

A tenant administrator is advising a department that wants to co-author a Word document with colleagues in real time from a browser. Microsoft 365 app or service is the best fit?

A.Microsoft Forms

B.Microsoft Purview Audit

C.Microsoft 365 web apps with OneDrive or SharePoint

D.Microsoft Planner

AnswerC

Microsoft 365 web apps built into OneDrive and SharePoint give users the ability to co-author Word, Excel, and PowerPoint files directly in a browser. Changes are saved automatically and merged in near real time, with presence indicators showing who is editing, while version history allows recovery of earlier drafts. Because the files live in OneDrive or SharePoint, the tenant admin can manage sharing links and permissions to support both internal and external collaborators.

Why this answer

Microsoft 365 web apps (Word, Excel, PowerPoint) combined with OneDrive or SharePoint enable real-time co-authoring from a browser. This allows multiple users to edit the same document simultaneously, with changes synced instantly via the cloud, which directly meets the department's requirement.

Exam trap

The trap here is that candidates may confuse Microsoft Forms or Planner as collaboration tools, but they are designed for data collection and task management, not real-time document co-authoring, which specifically requires web apps with OneDrive or SharePoint.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is a survey and quiz tool, not a document co-authoring solution; it does not support real-time editing of Word documents. Option B is wrong because Microsoft Purview Audit is a compliance and auditing service for tracking user activities, not a tool for collaborative document editing. Option D is wrong because Microsoft Planner is a task and project management app for organizing work, not a document co-authoring platform.

Practice this question →

246

MCQeasy

A non-profit organization, NPO Global, uses Microsoft 365 Nonprofit Business Basic. The organization has 200 users and is growing. They need to: 1. Create a central repository for storing and sharing documents with external partners. 2. Allow multiple users to co-author documents in real time. 3. Provide a secure way for external partners to access only specific folders. 4. Maintain version history for all documents. Which Microsoft 365 app should the organization primarily use?

A.Microsoft SharePoint

B.Microsoft Teams

C.Microsoft Power Apps

D.Microsoft OneDrive

AnswerA

Microsoft SharePoint provides team sites and document libraries that serve as a centralized, structured repository for organizational content. It supports granular permission management, version history, metadata columns, content types, co-authoring, and external sharing, making it the appropriate platform for a non-profit to store and collaborate on shared documents at scale.

Why this answer

Microsoft SharePoint is the correct primary app because it provides a centralized document repository with granular permission controls, enabling external sharing of specific folders via secure links. It supports real-time co-authoring through Office Online integration and maintains version history for all documents, meeting all four requirements.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a document management tool because it integrates with SharePoint, but Teams lacks the granular folder-level external sharing and centralized repository focus that SharePoint provides natively.

How to eliminate wrong answers

Option B (Microsoft Teams) is wrong because while Teams includes SharePoint-backed file storage and co-authoring, its primary focus is persistent chat and collaboration channels, not a dedicated central repository with folder-level external sharing; managing external access to specific folders is more complex and less granular than SharePoint. Option C (Microsoft Power Apps) is wrong because it is a low-code application development platform for building custom apps, not a document management or sharing solution; it lacks native document storage, co-authoring, and version history features. Option D (Microsoft OneDrive) is wrong because it is designed for individual file storage and sharing, not as a central repository for an organization; it does not support folder-level external sharing with granular permissions for multiple external partners, and its version history is per-user, not centrally managed for collaboration.

Practice this question →

247

Multi-Selecthard

Which THREE Microsoft 365 services are part of Microsoft Viva, the employee experience platform?

Select 3 answers

A.Viva Learning

B.Viva Insights

C.Viva Connections

D.Microsoft Teams

E.Microsoft Stream

AnswersA, B, C

Viva Learning is one of the four core Viva modules, delivering aggregated training content from LinkedIn Learning, Microsoft Learn and organisational sources directly within Microsoft Teams. It satisfies the stem's requirement for a genuine employee-experience service, alongside Connections, Insights and Topics.

Why this answer

Viva Learning (A) is a core Microsoft Viva module that aggregates training content from LinkedIn Learning, Microsoft Learn, and other providers directly into the flow of work, so it is correctly part of the employee experience platform. Viva Insights (B) is also a Viva module, delivering productivity and wellbeing analytics, personal insights, and manager/leader insights derived from Microsoft Graph and collaboration data. Viva Connections (C) is the Viva gateway/experience app that surfaces company news, resources, and communities through a customizable dashboard in Microsoft Teams, making it a genuine Viva service.

Microsoft Teams (D) is not part of Viva; it is the collaboration platform that hosts Viva Connections and other apps, but it is a separate Microsoft 365 service. Microsoft Stream (E) is likewise not a Viva module; it is Microsoft 365's enterprise video service, and while video content may appear within Viva Learning or Connections, Stream itself is not one of the Viva services.

Exam trap

The trap here is that candidates confuse the underlying Microsoft 365 services (like Teams or Stream) with the Viva modules that run on top of them, leading them to select Teams as a Viva component instead of recognizing that Viva is a separate employee experience platform with distinct modules.

Practice this question →

248

MCQmedium

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Defender for Endpoint

B.Microsoft Entra Privileged Identity Management

C.Microsoft Purview Compliance Manager

D.Power Apps

AnswerD

Power Apps is Microsoft 365's low-code application platform, letting makers build custom business apps through visual designers and connectors rather than operational scripts. It satisfies the requirement to avoid custom operational scripting, unlike Power Automate, which targets workflow automation instead of app creation.

Why this answer

Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without writing traditional code. It provides pre-built templates, connectors to Microsoft and third-party services, and a visual drag-and-drop designer, allowing departments to create tailored solutions without custom operational scripts.

Exam trap

The trap here is that candidates may confuse security or compliance tools (like Defender, PIM, or Compliance Manager) with app development platforms, failing to recognize that Power Apps is the designated low-code solution in the Microsoft 365 ecosystem.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a platform for building custom low-code business apps. Option B is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring privileged access within Azure AD, not for app development. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution that helps organizations assess and manage regulatory compliance, not a low-code app development service.

Practice this question →

249

MCQmedium

During requirements gathering, an IT manager says the organization must track assets using columns such as owner, status, purchase date, and location. Microsoft 365 app or service is the best fit?

A.Microsoft Forms

B.Microsoft Planner

C.Microsoft Lists

D.Microsoft Purview Audit

AnswerC

Microsoft Lists provides structured, column-based tracking with owner, status, purchase date and location fields, matching the asset-tracking requirement directly. It is included in Microsoft 365, so no separate asset-management platform or custom database build is needed.

Why this answer

Microsoft Lists is the best fit because it provides a structured, customizable data-tracking solution with columns for metadata like owner, status, purchase date, and location. Unlike simple task or form tools, Lists supports rich column types (e.g., choice, date, person), views, and integration with SharePoint, making it ideal for asset tracking.

Exam trap

The trap here is that candidates confuse Microsoft Planner (a task board) with a data tracking tool, overlooking that Lists is the correct choice for structured column-based asset management.

How to eliminate wrong answers

Option A is wrong because Microsoft Forms is designed for creating surveys and quizzes, not for tracking assets with structured columns and ongoing data management. Option B is wrong because Microsoft Planner is a task management tool for organizing work with buckets and checklists, not a data repository for asset metadata like purchase date and location. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities in Microsoft 365, not for creating and managing asset tracking lists.

Practice this question →

250

MCQeasy

A user wants to quickly set up a website for their team to share news and resources. Which Microsoft 365 app should they use?

A.Microsoft Teams

B.Microsoft Viva

C.Yammer

D.SharePoint

AnswerD

SharePoint is the correct choice because SharePoint communication sites are built specifically to create team-oriented web pages for sharing news, documents, and resources. Through modern web parts, flexible layouts, and granular site-level permissions, a user can quickly build a polished website without writing code. SharePoint Online supports both internal sharing and external sharing with appropriate configuration, making it the Microsoft 365 workload that actually delivers a website experience.

Why this answer

SharePoint is the correct choice because it is specifically designed for creating team sites that serve as centralized hubs for sharing news, documents, and resources. With SharePoint, users can quickly provision a modern team site using pre-built templates, add web parts for news feeds and document libraries, and manage permissions for team members. This directly meets the requirement for a website to share news and resources.

Exam trap

The trap here is that candidates often confuse Microsoft Teams with a website creation tool because Teams includes tabs for SharePoint pages and files, but Teams itself is not a website platform—SharePoint is the underlying service for site creation and content management.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration workspace, not a website creation tool; while it integrates with SharePoint for file storage, it does not provide a standalone website for sharing news and resources. Option B is wrong because Microsoft Viva is an employee experience platform that focuses on insights, learning, and wellbeing, not on creating team websites or resource hubs. Option C is wrong because Yammer is an enterprise social networking tool for broad organizational communication, not a site for a specific team to share news and resources in a structured website format.

Practice this question →

251

MCQmedium

Refer to the exhibit. A Teams administrator runs the PowerShell commands to enable meeting transcription and recording for all users. After running the commands, users still cannot start transcription in their meetings. What is the most likely cause?

A.Users may have a custom meeting policy that overrides the global policy.

B.The admin does not have the correct permissions.

C.The admin forgot to run a Grant-CsTeamsMeetingPolicy command.

D.The AllowTranscription property is misnamed.

AnswerA

Users may have a custom meeting policy that overrides the global policy. In Teams, the global policy is the default, but if a user has been assigned a per-user meeting policy via Grant-CsTeamsMeetingPolicy, that explicit assignment takes precedence. Modifying the global policy only affects users who are not assigned a custom policy. To verify, the admin should run Get-CsTeamsMeetingPolicy with the user's identity to see which policy is actually effective.

Why this answer

In Microsoft Teams, meeting policies are applied hierarchically: a custom policy assigned directly to a user overrides the global policy. Even if the global policy has transcription enabled, users with a custom meeting policy that has AllowTranscription set to False will not be able to start transcription. The admin must either modify the custom policy or assign the global policy to those users.

Exam trap

The trap here is that candidates assume modifying the global policy affects all users, forgetting that a user-assigned custom policy takes precedence and must be explicitly updated or removed.

How to eliminate wrong answers

Option B is wrong because the admin successfully ran the PowerShell commands, which indicates they have the necessary permissions (e.g., Teams Administrator or Global Administrator role) to modify meeting policies. Option C is wrong because the Grant-CsTeamsMeetingPolicy cmdlet is used to assign a specific policy to a user; if the admin intended to modify the global policy, no Grant command is needed—the Set-CsTeamsMeetingPolicy cmdlet directly updates the global policy. Option D is wrong because the AllowTranscription property is correctly named; it is a valid parameter in the Set-CsTeamsMeetingPolicy cmdlet, and any typo would have caused an error when running the command.

Practice this question →

252

MCQmedium

A department asks for the Microsoft 365 service best suited for custom low-code business apps. Which service should they use?

A.Microsoft Defender for Endpoint

B.Microsoft Entra Privileged Identity Management

C.Microsoft Purview Compliance Manager

D.Power Apps

AnswerD

Power Apps provides a low-code canvas and model-driven environment for building custom business applications with minimal hand-written code. It directly satisfies the department's requirement for a Microsoft 365 service suited to custom low-code business apps, unlike Power Automate or Power BI.

Why this answer

Power Apps is the correct choice because it is a low-code application development platform within Microsoft 365 that enables users to build custom business apps without extensive coding. It provides pre-built templates, connectors to Microsoft and third-party services, and a drag-and-drop interface, making it ideal for department-level custom app needs.

Exam trap

The trap here is that candidates may confuse security or compliance services (like Defender, PIM, or Compliance Manager) with development tools, failing to recognize that Power Apps is the dedicated low-code platform for custom business applications.

How to eliminate wrong answers

Option A is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, threat detection, and response, not a low-code app development tool. Option B is wrong because Microsoft Entra Privileged Identity Management is an identity governance service for managing, controlling, and monitoring privileged access within Azure AD, not for building custom apps. Option C is wrong because Microsoft Purview Compliance Manager is a compliance management solution that helps organizations assess and manage regulatory compliance risks, not a low-code app builder.

Practice this question →

253

MCQmedium

A compliance-aware administrator is selecting the right Microsoft 365 capability to create dashboards showing sales and operational trends from multiple data sources. Microsoft 365 app or service is the best fit?

A.Power BI

B.Microsoft Purview Audit

C.Microsoft Planner

D.Microsoft Forms

AnswerA

Power BI connects to multiple data sources and builds interactive dashboards visualising sales and operational trends. It directly satisfies the requirement for a Microsoft 365 capability producing multi-source dashboards, whereas Power Apps builds apps and Power Automate orchestrates workflows.

Why this answer

Power BI is the correct choice because it is a business analytics service that enables users to create interactive dashboards and reports by connecting to multiple data sources, including Excel, SQL databases, and cloud services. It provides built-in data transformation, visualization, and sharing capabilities, making it ideal for aggregating sales and operational trends into a single dashboard.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Audit with Power BI due to both involving data, but Purview is strictly for compliance logging and not for analytical dashboard creation.

How to eliminate wrong answers

Option B is wrong because Microsoft Purview Audit is a compliance and auditing solution that logs user and admin activities across Microsoft 365, not a tool for creating dashboards or analyzing trends from multiple data sources. Option C is wrong because Microsoft Planner is a task management and collaboration tool for organizing work with boards and checklists, lacking data integration and visualization features for dashboards. Option D is wrong because Microsoft Forms is a survey and form creation tool for collecting responses, not designed for aggregating data from multiple sources or building analytical dashboards.

Practice this question →

254

Multi-Selectmedium

Which three of the following are Microsoft 365 apps and services that are primarily designed for productivity and collaboration? (Choose three.)

Select 3 answers

.Microsoft Teams

.Microsoft Exchange Online

.Microsoft SharePoint Online

.Microsoft Intune

.Microsoft Azure Active Directory

.Microsoft Defender for Office 365

Why this answer

Microsoft Teams, Exchange Online, and SharePoint Online are core Microsoft 365 workloads designed to enhance productivity and collaboration. Teams provides a unified communication platform with chat, meetings, and file sharing; Exchange Online delivers enterprise-grade email and calendaring; SharePoint Online enables document management, intranet portals, and team sites for collaborative content creation.

Exam trap

The trap here is that candidates often confuse security or identity services (like Intune, Azure AD, or Defender) with productivity tools, because they are part of the Microsoft 365 ecosystem, but the question specifically asks for apps and services 'primarily designed for productivity and collaboration.'

Practice this question →

255

MCQeasy

A marketing team at Contoso Ltd. needs a cloud-based workspace where they can create and share interactive dashboards, reports, and datasets with colleagues without setting up any on-premises servers. Which Microsoft 365 service should they use?

A.Microsoft Sway

B.Microsoft Viva Insights

C.Microsoft Stream

D.Microsoft Power BI

AnswerD

Power BI is Microsoft 365's cloud business analytics service that lets users build interactive dashboards, reports, and datasets and share them across the organization. It requires no on-premises infrastructure and supports natural-language queries, making it the right fit for a marketing team that needs to visualize and distribute data insights quickly and collaboratively.

Why this answer

Power BI is the Microsoft 365 service specifically designed for cloud-based business analytics, enabling users to create interactive dashboards, reports, and datasets and share them with colleagues. Viva Insights, Stream, and Sway serve different purposes—employee productivity analytics, enterprise video, and visual storytelling—and none provide the data modeling and dashboard-sharing capabilities the marketing team needs.

Exam trap

The trap here is assuming that any Microsoft 365 app that displays information visually can serve as a reporting and dashboard platform, which leads to selecting presentation or video tools instead of the dedicated analytics service.

Practice this question →

256

MCQmedium

A marketing manager wants to create a central repository for project documents, announcements, and a shared calendar. The solution must be accessible from Microsoft Teams and allow team members to co-author documents in real time. Which Microsoft 365 service should be used?

A.SharePoint Online (team site)

B.Microsoft Lists

C.Power Automate

D.Microsoft Planner

AnswerA

SharePoint Online team sites function as true central collaboration repositories, providing document libraries with co-authoring, version history, list apps, and a shared team calendar through the site's built-in Calendar list. Because a team site can be added as a tab in Microsoft Teams, it consolidates files, announcements, and events in one managed, permission-controlled location. This makes it the only option that simultaneously satisfies the marketing manager's requirement for a central repository with calendar and document management.

Why this answer

SharePoint Online team sites provide a centralized document library, announcements, and shared calendar that can be integrated directly into Microsoft Teams via the SharePoint tab. Team members can co-author documents in real time using Office Online integration, which supports simultaneous editing with auto-save. This makes SharePoint the correct choice for a central repository with real-time collaboration accessible from Teams.

Exam trap

The trap here is that candidates often confuse Microsoft Planner (task management) or Microsoft Lists (data tracking) with a full document and calendar repository, overlooking that SharePoint Online is the underlying service that provides the document library, calendar, and announcements that can be surfaced in Teams.

How to eliminate wrong answers

Option B (Microsoft Lists) is wrong because it is a data-tracking application for creating lists and tables, not a document repository or calendar; it lacks native real-time co-authoring for documents. Option C (Power Automate) is wrong because it is a workflow automation tool that orchestrates actions across services, not a storage or collaboration platform for documents and calendars. Option D (Microsoft Planner) is wrong because it is a task management and planning tool focused on Kanban boards and assignments, not a document repository or shared calendar with real-time co-authoring.

Practice this question →

257

MCQmedium

Wide World Importers is a retail company with 2,000 users. They use Microsoft 365 E3. They need to: (1) Deploy a new employee experience platform that integrates with Microsoft 365 and provides personalized news, tasks, and learning; (2) Enable employees to create low-code apps to automate approvals and workflows without custom development; (3) Provide a secure way for employees to store and share company files with granular permissions; (4) Allow IT to manage mobile devices and applications centrally. Which Microsoft 365 services should they use?

A.Viva Connections, Power Apps and Power Automate, SharePoint Online, Microsoft Intune

B.Viva Insights, Power Apps and Power Automate, SharePoint Online, Microsoft 365 Defender

C.Microsoft Teams, Power Apps and Power Automate, OneDrive, Microsoft Entra ID

D.Viva Connections, Power BI, OneDrive, Microsoft Intune

AnswerA

This option is correct because it combines the four required services. Viva Connections delivers a personalized employee experience portal within Teams and SharePoint, Power Apps and Power Automate enable low-code custom business apps and automated workflows, SharePoint Online provides centralized document storage with granular permission controls, and Microsoft Intune enforces mobile device management (MDM) and mobile application management (MAM) policies for company-owned and BYOD devices.

Why this answer

Viva Connections delivers the employee experience platform with personalized news, tasks, and learning integrated into Microsoft 365; Power Apps and Power Automate enable low-code app creation and workflow automation; SharePoint Online provides secure file storage and sharing with granular permissions; and Microsoft Intune delivers centralized mobile device and application management (MDM/MAM). All four requirements map exactly to these services, which are included in or available with Microsoft 365 E3.

Exam trap

MS-900 often tests service-to-requirement mapping — the trap is confusing Viva Connections with Viva Insights, SharePoint with OneDrive, and Intune with Defender, so candidates must match each requirement to the precise service name.

How to eliminate wrong answers

Option B is wrong because Viva Insights is an analytics/productivity tool (not the employee experience hub — that's Viva Connections), and Microsoft 365 Defender is a security suite, not a device management solution (Intune is required for MDM/MAM). Option C is wrong because Microsoft Teams is a collaboration tool, not the personalized employee experience platform (Viva Connections), OneDrive is personal file storage rather than the granular-permission team file platform (SharePoint Online), and Microsoft Entra ID is identity management, not device management. Option D is wrong because Power BI is a business analytics tool, not a low-code app/workflow platform (Power Apps/Power Automate), and OneDrive lacks the granular team-level permission model of SharePoint Online.

Practice this question →

258

MCQmedium

A user in your organization receives an email from an unknown sender with a link to a fake login page. The user reports it. You need to analyze the threat and check if other users received similar emails. Which Microsoft 365 Defender feature should you use?

A.Threat analytics

B.Threat Explorer (Explorer)

C.Attack simulation training

D.Automated investigation and response (AIR)

AnswerB

Threat Explorer in Defender for Office 365 is a real-time investigation tool that lets security teams search and filter email records by attributes such as threat type, sender, recipient, subject, message ID, and delivery action. In this scenario, an administrator could use Explorer to locate the exact unknown email, inspect its threat verdicts, and view the mail flow or delivery action. It is the correct option because it is explicitly designed for manual, forensic analysis of email threats in a Microsoft 365 tenant.

Why this answer

Threat Explorer (Explorer) is the correct tool because it provides a real-time, interactive view of email threats, allowing you to search for and analyze specific messages (like the phishing link) across all users. You can use filters such as sender, recipient, or URL to determine if other users received the same malicious email, enabling rapid threat hunting and response.

Exam trap

The trap here is that candidates confuse Threat Explorer (a manual hunting and analysis tool) with Automated investigation and response (AIR), which is an automated reaction system, leading them to pick D because they think 'investigation' implies manual analysis, but AIR is fully automated and not designed for ad-hoc email searches.

How to eliminate wrong answers

Option A is wrong because Threat analytics is a feature that provides intelligence about active threats, vulnerabilities, and attack campaigns, but it does not allow you to search for specific emails or check if other users received a particular message. Option C is wrong because Attack simulation training is used to create and run simulated phishing attacks for user training and awareness, not for analyzing real threats or checking email delivery. Option D is wrong because Automated investigation and response (AIR) automatically triggers investigations and remediation actions after a threat is detected, but it is not the tool you use to manually search and analyze whether other users received a similar email.

Practice this question →

259

MCQeasy

A sales team needs a centralized repository for customer proposals that multiple team members can edit simultaneously and that maintains version history. Which Microsoft 365 service should they use?

A.OneDrive for Business

B.SharePoint Online

C.Microsoft Teams

D.Exchange Online

AnswerB

SharePoint Online is the correct choice because it provides team-specific document libraries with granular permission controls, content types, and managed metadata that support a shared repository. Multiple users can co-author the same document simultaneously while version history records every change, and workflows or retention policies can be applied at the site or library level. For a centralized customer repository, SharePoint gives the sales team a governed, collaborative home rather than a personal drive or a communication tool.

Why this answer

SharePoint Online is the correct choice because it provides a centralized document library where multiple users can co-author documents simultaneously, with built-in version history to track changes over time. This aligns directly with the requirement for a shared repository with real-time collaboration and versioning, which OneDrive for Business lacks for team-wide access.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as the file storage solution, but Teams relies on SharePoint Online for its Files tab, so the underlying service providing version history and simultaneous editing is SharePoint Online, not Teams itself.

How to eliminate wrong answers

Option A is wrong because OneDrive for Business is designed for personal storage and sharing with individuals, not as a centralized team repository; it does not support simultaneous editing by multiple team members in a shared workspace. Option C is wrong because Microsoft Teams is a collaboration platform that uses SharePoint Online for file storage; Teams itself does not provide the document library or version history features required. Option D is wrong because Exchange Online is an email and calendaring service, not a document management or collaboration tool, and cannot store or version customer proposals.

Practice this question →

260

Drag & Dropmedium

Drag and drop the steps to enable Microsoft 365 audit logging in the compliance center into the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The correct sequence to enable Microsoft 365 audit logging in the compliance center is: first sign in to the Microsoft 365 Compliance center, then navigate to the Audit solution, click 'Start recording user and admin activity' to enable auditing, and finally wait for the audit log to become active (which may take up to 24 hours). This order ensures that all prerequisites are met and the feature is properly activated.

Practice this question →

261

MCQeasy

A user receives a suspicious email with a link. They report it using the built-in Microsoft 365 reporting tool. Which service will analyze the reported message?

A.Microsoft Defender for Office 365

B.Microsoft Sentinel

C.Microsoft Purview

D.Microsoft Defender XDR

AnswerA

Microsoft Defender for Office 365 is the dedicated email security workload that receives user-reported phishing or malware reports. It uses threat intelligence, URL and attachment detonation, and automated investigation/response to analyze the message and remediate threats. In this scenario, the reported suspicious link is exactly what MDO's Safe Links and anti-phishing policies are built to evaluate.

Why this answer

Microsoft Defender for Office 365 (MDO) includes the built-in reporting tool that allows users to report suspicious emails directly from Outlook. When a user submits a message via this tool, it is automatically routed to the Microsoft 365 Defender portal's Submissions page, where it is analyzed by MDO's threat protection engines, including detonation in the sandbox environment for URLs and attachments. This analysis determines whether the message is malicious, spam, or a false positive, and updates the tenant's filtering policies accordingly.

Exam trap

The trap here is that candidates confuse Microsoft Defender for Office 365 (which handles email-specific threat analysis and user submissions) with Microsoft Defender XDR (which is the broader correlation engine that ingests alerts from Defender for Office 365 and other sources, but does not itself perform the initial analysis of user-reported messages).

How to eliminate wrong answers

Option B (Microsoft Sentinel) is wrong because Sentinel is a cloud-native SIEM (Security Information and Event Management) and SOAR (Security Orchestration, Automation, and Response) solution that ingests logs and alerts from multiple sources for enterprise-wide threat detection, not a tool for analyzing user-reported emails from the built-in reporting tool. Option C (Microsoft Purview) is wrong because Purview focuses on data governance, compliance, and information protection (e.g., data loss prevention, records management, eDiscovery), not on email threat analysis or sandboxing. Option D (Microsoft Defender XDR) is wrong because Defender XDR is a cross-domain extended detection and response solution that correlates alerts across endpoints, identities, email, and cloud apps, but the actual analysis of user-reported messages is performed by Defender for Office 365's specific threat engines, not by the XDR correlation layer.

Practice this question →

262

MCQeasy

A project team needs a centralized location to store, share, and co-author documents while maintaining version history. Which Microsoft 365 service should they use?

A.SharePoint Online

B.OneDrive for Business

C.Microsoft Teams

D.Microsoft Viva Topics

AnswerA

SharePoint Online is the correct choice because it is a cloud-based team collaboration platform designed to be a centralized repository for project files. It provides team sites with configurable document libraries, version history, co-authoring, rich metadata, and granular permission controls, making it the default document management service in Microsoft 365 for shared team content.

Why this answer

SharePoint Online is the correct choice because it is designed as a centralized document management and storage platform that supports co-authoring, version history, and granular permission controls. Unlike personal storage services, SharePoint Online provides team-oriented libraries where multiple users can simultaneously edit documents while automatically tracking changes through versioning. This aligns directly with the requirement for a shared, collaborative repository with version history.

Exam trap

The trap here is that candidates often confuse OneDrive for Business with SharePoint Online, assuming both are equivalent for team collaboration, but OneDrive for Business is designed for individual use and lacks the centralized team site structure and advanced permission management that SharePoint Online provides.

How to eliminate wrong answers

Option B (OneDrive for Business) is wrong because it is primarily a personal cloud storage service for an individual user's files, not a centralized team repository; while it supports co-authoring and version history, it lacks the team-level sharing and management features required for a project team. Option C (Microsoft Teams) is wrong because it is a collaboration hub that integrates chat, meetings, and apps, but its file storage relies on underlying SharePoint Online or OneDrive for Business; Teams itself is not a dedicated document storage service. Option D (Microsoft Viva Topics) is wrong because it is a knowledge discovery and AI-powered topic experience service that surfaces information from across Microsoft 365, not a document storage or co-authoring platform.

Practice this question →

263

MCQeasy

A department asks for the Microsoft 365 service best suited for workflow approvals between Microsoft 365 and Dynamics 365. Which service should they use?

A.Microsoft Entra Privileged Identity Management

B.Microsoft Defender for Endpoint

C.Power Automate

D.Microsoft Purview Compliance Manager

AnswerC

Power Automate provides the workflow engine that connects Microsoft 365 services with Dynamics 365 through hundreds of connectors, enabling automated approval flows without custom code. This directly satisfies the department's requirement for cross-platform workflow approvals, unlike Power Apps, which builds apps, or Power BI, which only visualises data.

Why this answer

Power Automate (Option C) is the correct service because it provides a low-code, workflow automation platform that integrates directly with both Microsoft 365 (e.g., SharePoint, Teams) and Dynamics 365. It enables users to create automated approval workflows using prebuilt templates and connectors, making it the ideal choice for cross-service approval processes.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager (a compliance tool) with workflow automation, or think that Privileged Identity Management can handle approvals, but PIM only manages role activation approvals, not general business workflow approvals between Microsoft 365 and Dynamics 365.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra Privileged Identity Management (PIM) is an identity governance tool for managing, controlling, and monitoring privileged role assignments in Azure AD, not for building workflow approvals between Microsoft 365 and Dynamics 365. Option B is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response, and has no capability to create or manage workflow approvals. Option D is wrong because Microsoft Purview Compliance Manager is a compliance management tool that helps assess and manage regulatory compliance risks, not a workflow automation service.

Practice this question →

264

MCQmedium

Refer to the exhibit. A Microsoft Graph PowerShell command is run. What does this command retrieve about user jdoe?

A.Only the user's display name and email.

B.All properties of the user.

C.Display name, user principal name, assigned licenses, and usage location.

D.Only the user's display name.

AnswerC

This is correct because the exhibit's command specifies Select-Object -Property DisplayName, UserPrincipalName, AssignedLicenses, UsageLocation (or equivalent -Select parameter in Get-MgUser). These four properties map exactly to the output shown: display name, user principal name, assigned licenses (as a collection of service plan identifiers), and usage location (the ISO 3166-1 alpha-2 country code). No other properties are projected, so the selected list precisely matches the stated result.

Why this answer

The command `Get-MgUser -UserId jdoe -Property DisplayName, UserPrincipalName, AssignedLicenses, UsageLocation` explicitly specifies only those four properties in the `-Property` parameter. Microsoft Graph PowerShell by default returns a subset of properties, but when you list specific properties, it retrieves only those requested. Therefore, the output includes exactly the display name, user principal name, assigned licenses, and usage location.

Exam trap

The trap here is that candidates assume the `Get-MgUser` cmdlet returns all user properties by default, but the explicit `-Property` parameter restricts the output to only the listed fields, making it a selective retrieval rather than a full one.

How to eliminate wrong answers

Option A is wrong because it claims only display name and email are retrieved, but the command explicitly requests UserPrincipalName, AssignedLicenses, and UsageLocation in addition to DisplayName, and does not request the email property (which is a separate attribute). Option B is wrong because the `-Property` parameter restricts the output to only the listed properties; without it, all default properties would be returned, but here the explicit list overrides that behavior. Option D is wrong because it states only the display name is retrieved, ignoring the other three properties explicitly specified in the command.

Practice this question →

265

MCQmedium

A communications manager wants to create an interactive monthly newsletter that includes embedded videos, images, and links to SharePoint documents. The newsletter should be viewable on any device without needing to install an app. Which Microsoft 365 app is best suited for this?

A.Microsoft Sway

B.Microsoft PowerPoint

C.Microsoft SharePoint

D.Microsoft Stream

AnswerA

Microsoft Sway is the correct choice because it is a digital storytelling application within Microsoft 365 built specifically for creating interactive, web-based content such as newsletters. Its card-based canvas allows you to combine text, images, videos, and embedded content, and the design engine automatically generates a responsive layout that adapts to any device, which is ideal for a monthly interactive newsletter that must be visually engaging and easily shared via a link.

Why this answer

Microsoft Sway is a presentation and newsletter tool in Microsoft 365 designed specifically for creating interactive, web-based content such as newsletters, reports, and presentations. It natively supports embedding videos, images, and links, and renders responsively in any browser without requiring an installed app. This matches the communications manager's requirements exactly.

Exam trap

MS-900 often tests the distinction between content creation tools (Sway, PowerPoint) and content hosting/collaboration platforms (SharePoint, Stream), so candidates must match the specific requirement of an interactive, app-free newsletter to Sway rather than assuming SharePoint or PowerPoint can fulfill it.

How to eliminate wrong answers

Option B is wrong because PowerPoint is a slide-based presentation tool; while it can be shared online, it is not optimized for interactive newsletter-style content and typically requires the PowerPoint app or viewer for full fidelity. Option C is wrong because SharePoint is a collaboration and document management platform, not a newsletter authoring tool — it can host content but does not provide the interactive newsletter creation experience described. Option D is wrong because Microsoft Stream is a video hosting and streaming service, not a multi-format newsletter authoring tool; it cannot embed images and links in an interactive newsletter format.

Practice this question →

266

MCQhard

Refer to the exhibit. You are reviewing a role definition in Microsoft Purview compliance portal. Which actions can a user assigned this role perform?

A.Manage compliance and data governance tasks in Microsoft Purview

B.Manage user accounts in Microsoft Entra ID

C.Manage security settings in Microsoft Defender XDR

D.View only compliance reports without making changes

AnswerA

This role definition grants the 'allTasks' permission, which provides full control across the Security & Compliance Center and Protection Center interfaces now consolidated in Microsoft Purview. With full management capability, the holder can configure retention policies, data loss prevention rules, eDiscovery cases, and other compliance data governance workloads. Because the role includes every task rather than a read-only scope, it is correctly identified as managing compliance and data governance tasks.

Why this answer

The question refers to a role definition in the Microsoft Purview compliance portal. The Compliance Administrator role (or a custom role with equivalent permissions) is designed specifically to manage compliance and data governance tasks, such as data classification, data loss prevention (DLP), eDiscovery, and retention policies. Option A correctly identifies this scope, as Purview roles do not extend to identity management or security operations in other portals.

Exam trap

The trap here is that candidates often confuse the scopes of Microsoft Purview, Microsoft Entra ID, and Microsoft Defender XDR, assuming a single admin role covers all security and compliance tasks, when in fact each portal has its own distinct RBAC model and role assignments.

How to eliminate wrong answers

Option B is wrong because managing user accounts in Microsoft Entra ID requires roles like User Administrator or Global Administrator, which are assigned in the Microsoft Entra admin center, not in the Microsoft Purview compliance portal. Option C is wrong because managing security settings in Microsoft Defender XDR requires roles like Security Administrator or Security Operator, which are assigned in the Microsoft 365 Defender portal, not in Purview. Option D is wrong because a user assigned a role in Purview can perform actions beyond viewing reports, such as creating and managing compliance policies, unless they are assigned a read-only role like Compliance Reader.

Practice this question →

267

MCQeasy

A user wants to create a dashboard that visualizes sales data from multiple sources in real time. Which Microsoft 365 app should they use?

A.Excel

B.Microsoft Lists

C.Microsoft Forms

D.Power BI

AnswerD

Power BI connects to multiple data sources and refreshes datasets on schedules or via streaming, rendering live dashboards that update without manual intervention. This satisfies the real-time, multi-source visualisation requirement, whereas Excel and Power Apps lack native streaming dashboards across heterogeneous sources.

Why this answer

Power BI is Microsoft's business analytics service that enables users to create interactive dashboards and reports from multiple data sources, with real-time data refresh capabilities. It is designed for data visualization and business intelligence, making it the appropriate tool for this requirement.

Exam trap

MS-900 often tests the distinction between apps for data entry (Forms, Lists) and data visualization (Power BI), and candidates may confuse Excel's charting with Power BI's interactive dashboards.

How to eliminate wrong answers

Option A is wrong because Excel is a spreadsheet application primarily for data analysis and modeling, but it lacks the real-time dashboarding and multi-source connectivity of Power BI. Option B is wrong because Microsoft Lists is for tracking information and managing workflows, not for data visualization. Option C is wrong because Microsoft Forms is for creating surveys and quizzes, not for dashboarding.

Practice this question →

268

Multi-Selectmedium

Which TWO Microsoft 365 services allow users to collaborate in real-time on the same document?

Select 2 answers

A.SharePoint Online

B.OneDrive for Business

C.Microsoft Viva

D.Yammer

E.Microsoft Teams

AnswersA, B

SharePoint Online is a cloud-based collaboration platform that stores documents in team libraries. Multiple users can co-author these documents in real time using Office for the web, desktop apps, or mobile apps, with version history and presence indicators. It enforces granular permissions and metadata, enabling organization-wide shared editing on a single source of truth.

Why this answer

SharePoint Online and OneDrive for Business both support real-time co-authoring, allowing multiple users to edit the same document simultaneously. This is enabled by the Office Online Server infrastructure and the use of WebDAV and REST APIs to synchronize changes in near real-time. Co-authoring works in Word, Excel, and PowerPoint files stored in these services, with conflict resolution handled by the application.

Exam trap

The trap here is that candidates often select Microsoft Teams as a correct answer because it is a collaboration tool, but Teams itself does not provide real-time document editing—it merely hosts files that are stored in SharePoint or OneDrive, where the actual co-authoring happens.

Practice this question →

269

MCQeasy

A sales team needs to collaborate on a document in real time and track changes. Which Microsoft 365 app is most suitable?

A.OneNote

B.Microsoft Forms

C.Word for the web

D.Microsoft Teams

AnswerC

Word for the web is the correct choice because it was purpose-built for document authoring and includes native real-time co-authoring, allowing multiple users to edit the same document simultaneously with visible presence indicators. It also provides track changes, comments, and version history, all of which are essential for a sales team iterating on a document together. Because it synchronizes through OneDrive or SharePoint, every collaborator immediately sees updates without conflict.

Why this answer

Word for the web (Option C) is the most suitable app because it is specifically designed for real-time co-authoring, allowing multiple users to edit a document simultaneously while tracking changes via the built-in version history and 'Track Changes' feature. Unlike desktop Word, the web version requires no manual sync and leverages Microsoft's Fluid Framework for seamless collaboration across devices.

Exam trap

The trap here is that candidates often confuse Microsoft Teams as a document collaboration tool because it displays files, but Teams relies on Word for the web for actual editing; the question specifically asks for the app that enables real-time editing and change tracking, which is Word for the web, not Teams.

How to eliminate wrong answers

Option A is wrong because OneNote is a digital notebook for free-form note-taking, not a word processor; it lacks structured document formatting and granular change tracking required for collaborative document editing. Option B is wrong because Microsoft Forms is a survey and quiz tool, not a document editor; it cannot support real-time co-authoring or track changes on a document. Option D is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, but its built-in document editing relies on Word for the web; Teams itself does not provide native document editing or change tracking capabilities.

Practice this question →

270

Multi-Selecthard

Which THREE Microsoft 365 capabilities are included in Microsoft 365 E5 that are NOT included in Microsoft 365 E3?

Select 3 answers

A.Microsoft Purview Audit (Standard)

B.Microsoft Defender for Office 365 Plan 1

C.Microsoft Defender for Office 365 Plan 2

D.Microsoft Purview Advanced Audit

E.Microsoft Power BI Pro

AnswersC, D, E

Microsoft Defender for Office 365 Plan 2 is a true E5 component: it builds on Plan 1 by adding threat hunting in the advanced hunting schema, automated investigation and response (AIR) across email, Teams, and SharePoint, and full access to Threat Explorer's real-time detections. These capabilities are not bundled with E3, making Plan 2 the security-operations answer for this question. It is the choice that specifically represents E5's expanded threat-investigation posture.

Why this answer

Microsoft Defender for Office 365 Plan 2 is included in Microsoft 365 E5 but not in E3. It provides advanced threat protection capabilities such as automated investigation and response (AIR), threat hunting with Threat Explorer, and simulation training, which are not available in Plan 1 or E3.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Office 365 Plan 1 (included in E3) with Plan 2 (included in E5), or mistakenly think that Purview Audit (Standard) is an E5-only feature when it is actually available in both E3 and E5.

Practice this question →

271

MCQmedium

A company uses Microsoft 365 Business Premium and wants to enable secure remote access for employees using personal devices. Which Microsoft 365 app should they configure to enforce conditional access policies based on device compliance?

A.Microsoft Purview

B.Microsoft Intune

C.Microsoft Sentinel

D.Microsoft Defender for Cloud Apps

AnswerB

Microsoft Intune is the correct answer because it serves as the mobile device management (MDM) and mobile application management (MAM) service that enrolls devices, applies compliance policies (such as requiring encryption, OS versions, or jailbreak detection), and reports each device's compliance status to Microsoft Entra ID. Entra ID then uses that status as a condition in Conditional Access policies to grant or block access. Without Intune, there is no authoritative source for device health and no way to enforce access restrictions based on device compliance.

Why this answer

Microsoft Intune is the correct answer because it is the Microsoft 365 app that provides mobile device management (MDM) and mobile application management (MAM). It allows administrators to define device compliance policies (e.g., requiring encryption, PIN, or a minimum OS version) and integrate those policies with Microsoft Entra ID (formerly Azure AD) Conditional Access. When a user attempts to access corporate resources from a personal device, Conditional Access checks the device's compliance status reported by Intune before granting access.

Exam trap

The trap here is that candidates may confuse Microsoft Defender for Cloud Apps (a CASB) with device compliance enforcement, but Defender for Cloud Apps controls app access via session policies, not device health checks, which is Intune's role.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview is a suite of data governance, compliance, and risk management solutions (e.g., data loss prevention, eDiscovery, insider risk management); it does not enforce device compliance policies for remote access. Option C is wrong because Microsoft Sentinel is a cloud-native security information and event management (SIEM) and security orchestration automated response (SOAR) solution; it analyzes security logs and threats but does not manage device compliance or conditional access policies. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility and control over cloud app usage, including session policies and threat detection, but it does not directly enforce device compliance-based conditional access; that function belongs to Intune and Entra ID.

Practice this question →

272

MCQhard

A company wants to use AI-powered features to summarize chat conversations in Microsoft Teams. Which Microsoft 365 service provides this capability?

A.Microsoft 365 Copilot

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft Viva Insights

AnswerA

Microsoft 365 Copilot is the correct answer because it integrates large language models with the Microsoft 365 Graph, enabling it to read and summarize Teams chat threads, meeting transcripts, and channel conversations. It uses grounded AI to generate concise summaries that cite specific messages, capturing decisions, action items, and key discussion points directly from the chat context.

Why this answer

Microsoft 365 Copilot is the correct answer because it integrates AI directly into Microsoft Teams to summarize chat conversations, leveraging large language models and the Microsoft Graph to process conversation context and generate concise summaries. This capability is part of Copilot's broader AI-powered features across Microsoft 365 apps, specifically designed for real-time productivity enhancements like chat summarization.

Exam trap

The trap here is that candidates may confuse Microsoft Viva Insights' personal analytics features (like meeting recaps) with AI-powered chat summarization, but Viva Insights does not provide generative AI summaries of chat conversations.

How to eliminate wrong answers

Option B (Microsoft Forms) is wrong because it is a survey and data collection tool, not designed for AI-powered chat summarization in Teams. Option C (Microsoft Stream) is wrong because it is a video hosting and sharing service, lacking the natural language processing capabilities needed to summarize text-based chat conversations. Option D (Microsoft Viva Insights) is wrong because it focuses on personal productivity and wellbeing analytics, such as meeting habits and focus time, not on summarizing chat conversations using AI.

Practice this question →

273

MCQeasy

A user wants to create a custom dashboard that displays key performance indicators from multiple data sources, such as Excel files and SharePoint lists. Which Microsoft 365 app should the user use?

A.Microsoft Excel

B.Microsoft Lists

C.Microsoft Power BI

D.Microsoft Forms

AnswerC

Power BI is Microsoft's dedicated business analytics service that connects to dozens of data sources, builds a semantic model with DAX measures, and publishes interactive, shareable dashboards in the Power BI service. Its features such as custom visuals, real-time refresh, and row-level security make it the appropriate tool for creating a custom dashboard that displays key metrics.

Why this answer

Microsoft Power BI is the correct choice because it is a business analytics service designed to connect to multiple data sources—including Excel files and SharePoint lists—and create interactive, custom dashboards with key performance indicators (KPIs). Unlike the other options, Power BI provides built-in data modeling, visualization, and real-time refresh capabilities, making it the only app in this list that fulfills the requirement for a multi-source KPI dashboard.

Exam trap

The trap here is that candidates often confuse Microsoft Lists or Excel as capable of creating dashboards because they can display data visually, but neither supports multi-source, interactive KPI dashboards with live data integration like Power BI does.

How to eliminate wrong answers

Option A is wrong because Microsoft Excel is a spreadsheet application for data entry and analysis, but it cannot natively create a live, multi-source dashboard that aggregates data from SharePoint lists and other sources without manual data import or complex add-ins. Option B is wrong because Microsoft Lists is a data tracking app for creating and managing lists (like SharePoint lists), but it lacks dashboarding and data visualization features to combine multiple data sources into a KPI dashboard. Option D is wrong because Microsoft Forms is a survey and form creation tool for collecting responses, not a dashboard or analytics tool; it cannot display KPIs from Excel or SharePoint lists.

Practice this question →

274

MCQeasy

A user is trying to access Microsoft 365 services but is prompted for additional verification via a phone call. Which Microsoft 365 feature is enforcing this?

A.Microsoft Entra ID

B.Microsoft Purview

C.Microsoft Defender XDR

D.Microsoft Intune

AnswerA

Microsoft Entra ID is the cloud identity and access management service that authenticates user credentials and issues security tokens for Microsoft 365. When a user attempts to access services, Entra ID validates their sign-in and can enforce multifactor authentication (MFA) and conditional access policies for additional verification. Thus, any authentication failure or prompt for MFA is handled at the Entra ID layer, making it the correct service for sign-in problems.

Why this answer

Microsoft Entra ID (formerly Azure AD) is the identity and access management service that enforces Conditional Access policies. When a user is prompted for additional verification via a phone call, it means a Conditional Access policy requiring multi-factor authentication (MFA) has been triggered. Entra ID evaluates the sign-in risk, user location, or device compliance and then invokes MFA through the Microsoft Authenticator service, which can deliver a phone call as one of the verification methods.

Exam trap

The trap here is that candidates often confuse Microsoft Defender XDR (a security monitoring tool) with identity security features, or they mistakenly think Intune or Purview handle authentication challenges, when in fact only Microsoft Entra ID (the identity provider) can enforce MFA prompts like phone call verification.

How to eliminate wrong answers

Option B (Microsoft Purview) is wrong because it is a compliance and data governance solution (e.g., data loss prevention, eDiscovery, retention policies), not an identity or authentication service; it does not enforce MFA prompts. Option C (Microsoft Defender XDR) is wrong because it is a unified security operations platform for threat detection and response across endpoints, email, and identities, but it does not directly enforce user authentication challenges like phone call verification. Option D (Microsoft Intune) is wrong because it is a mobile device management (MDM) and mobile application management (MAM) service that manages devices and apps, not authentication policies; while Intune can provide device compliance signals to Entra ID, the actual MFA enforcement is done by Entra ID, not Intune.

Practice this question →

275

Multi-Selectmedium

Which THREE Microsoft 365 services are included in the Enterprise Mobility + Security (EMS) suite?

Select 3 answers

A.Microsoft Sentinel

B.Microsoft Purview

C.Microsoft Intune

D.Microsoft Entra ID

E.Microsoft Defender for Cloud Apps

AnswersC, D, E

Microsoft Intune is a cloud-based endpoint management service that provides mobile device management (MDM) and mobile application management (MAM) across Windows, iOS, Android, and macOS. As a core EMS pillar, Intune enforces device configuration, deploys applications, and integrates with conditional access to restrict access to compliant devices. Without Intune, EMS would lack its primary mechanism for controlling user device security and application availability.

Why this answer

Microsoft Intune is a core component of Enterprise Mobility + Security (EMS) because it provides cloud-based mobile device management (MDM) and mobile application management (MAM) using the OMA-DM protocol. It enforces conditional access policies and allows IT to manage devices and applications without requiring on-premises infrastructure, directly aligning with EMS's goal of securing and managing endpoints.

Exam trap

Microsoft often tests the misconception that Microsoft Purview or Microsoft Sentinel are part of EMS, when in fact EMS focuses exclusively on identity, endpoint management, and cloud app security, not on SIEM or data governance.

Practice this question →

276

MCQmedium

An organization wants to provide employees with a personalized news feed and learning resources within Microsoft 365. Which app should they use?

A.Microsoft Teams

B.Microsoft Stream

C.Microsoft Viva

D.Microsoft SharePoint

AnswerC

Microsoft Viva is the correct answer because it is the employee experience platform (EXP) built on Microsoft 365, with Viva Connections delivering a personalized news feed and Viva Learning curating micro-learning content. Viva uses Microsoft Graph to aggregate signals from email, calendar, and collaboration data to tailor what each employee sees. It includes Viva Insights for productivity analytics and Viva Topics for knowledge discovery, making it the only option that directly provides the personalized news, insights, and learning resources described.

Why this answer

Microsoft Viva is the correct app because it is an employee experience platform that integrates with Microsoft 365 to deliver personalized news feeds via Viva Connections and curated learning resources through Viva Learning. Unlike other apps, Viva is specifically designed to aggregate content from across the organization and external sources into a single, tailored dashboard.

Exam trap

The trap here is that candidates often confuse Microsoft Viva with SharePoint or Teams, assuming those apps can natively provide personalized news and learning, but they lack the dedicated employee experience and AI-driven personalization that Viva is specifically built for.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, not a dedicated app for personalized news feeds and learning resources. Option B is wrong because Microsoft Stream is a video service for recording, sharing, and managing videos, not for delivering personalized news or learning content. Option D is wrong because Microsoft SharePoint is a document management and collaboration platform that can host news and learning content, but it lacks the built-in personalization and aggregation features that Viva provides out of the box.

Practice this question →

277

MCQeasy

A company wants to enable its sales team to automatically generate meeting summaries and action items from Microsoft Teams conversations. Which Microsoft 365 app or feature provides this capability?

A.Microsoft Viva Insights

B.Microsoft Stream

C.Microsoft Copilot for Microsoft 365

D.Microsoft Forms

AnswerC

Microsoft Copilot for Microsoft 365 uses the Microsoft Graph and large language models to summarise Teams meetings and extract action items automatically. It satisfies the requirement by generating recaps from conversation content within the sales team's existing Teams workflow.

Why this answer

Microsoft Copilot for Microsoft 365 is an AI-powered assistant integrated across Microsoft 365 apps, including Microsoft Teams. It can automatically generate meeting summaries, action items, and key discussion points from Teams conversations using advanced natural language processing. This capability is part of Copilot's intelligent recap and meeting productivity features, directly addressing the sales team's need.

Exam trap

MS-900 often tests the confusion between analytics tools like Viva Insights and AI assistants like Copilot, so candidates may mistakenly choose Viva Insights for meeting summarization.

How to eliminate wrong answers

Option A is wrong because Microsoft Viva Insights focuses on employee well-being, productivity analytics, and work patterns, not on generating meeting summaries or action items from conversations. Option B is wrong because Microsoft Stream is a video streaming service for uploading, sharing, and managing videos, not an AI tool for meeting summarization. Option D is wrong because Microsoft Forms is a survey and quiz creation tool, not designed for meeting content analysis or summarization.

Practice this question →

278

Multi-Selectmedium

A sales team needs to manage leads, track customer interactions, and automate follow-up emails. They also want to collect customer feedback through surveys. Which two Microsoft 365 apps should they adopt for these requirements? (Choose two.)

Select 2 answers

A.Microsoft Dynamics 365 Sales

B.Microsoft Forms

C.Microsoft Stream

D.Microsoft Planner

AnswersA, B

Microsoft Dynamics 365 Sales is a purpose-built customer relationship management (CRM) application that uses a relational data model with entities such as Lead, Opportunity, Account, and Contact. It provides out-of-the-box business process flows for lead qualification and opportunity management, plus customizable workflows and Power Automate integration for automated follow-ups. Because it securely stores customer interaction history, tracks deal stages, and integrates with Outlook and Teams, it directly fulfills the sales team's requirement to manage leads and monitor customer interactions.

Why this answer

Microsoft Dynamics 365 Sales is a customer relationship management (CRM) application that provides lead management, customer interaction tracking, and automated follow-up email workflows. Microsoft Forms enables the creation and distribution of surveys to collect customer feedback, with responses automatically stored in Excel for analysis.

Exam trap

The trap here is that candidates may confuse Microsoft Stream or Planner as tools for customer interaction or feedback, overlooking that Dynamics 365 Sales is the dedicated CRM solution and Microsoft Forms is the specific survey tool within the Microsoft 365 ecosystem.

Practice this question →

279

MCQhard

An organization uses Microsoft 365 E5 and wants to automatically classify and protect sensitive documents stored in SharePoint Online based on content patterns (e.g., credit card numbers). They need to apply encryption and restrict access when such content is detected. Which Microsoft 365 service should they configure?

A.Microsoft Entra ID

B.Microsoft Purview Information Protection

C.Microsoft Sentinel

D.Microsoft Defender for Cloud Apps

AnswerB

Microsoft Purview Information Protection applies sensitivity labels with automatic classification based on content patterns such as credit card numbers, and labels can enforce encryption and access restrictions. Configuring it in SharePoint Online satisfies the detection, encryption and access-limiting requirements.

Why this answer

Microsoft Purview Information Protection (formerly Azure Information Protection) is the correct service because it provides content-based classification and protection for sensitive data. It uses trainable classifiers and sensitive information types (e.g., credit card numbers) to automatically apply encryption and restrict access via sensitivity labels in SharePoint Online.

Exam trap

The trap here is that candidates often confuse Microsoft Defender for Cloud Apps (a CASB) with data classification, but it lacks the native content scanning and encryption enforcement that Purview Information Protection provides.

How to eliminate wrong answers

Option A is wrong because Microsoft Entra ID is an identity and access management service, not a content classification or protection engine; it cannot scan documents for patterns like credit card numbers. Option C is wrong because Microsoft Sentinel is a security information and event management (SIEM) solution for threat detection and response, not for data classification or encryption. Option D is wrong because Microsoft Defender for Cloud Apps is a cloud access security broker (CASB) that provides visibility and control over cloud apps, but it does not natively classify or encrypt content based on patterns within SharePoint documents.

Practice this question →

280

MCQeasy

A sales team uses Microsoft 365 and wants to automatically capture and store email signatures for all outgoing messages. Which Microsoft 365 app should the administrator configure?

A.Microsoft Teams

B.Microsoft Viva Insights

C.Microsoft SharePoint Online

D.Microsoft Exchange Online

AnswerD

Microsoft Exchange Online applies mail flow rules (transport rules) that append signatures and disclaimers to outgoing messages server-side, regardless of client. This satisfies the requirement to capture and store signatures automatically for all outgoing mail across the sales team, without relying on per-device Outlook configuration.

Why this answer

(Microsoft Exchange Online) is correct because email signatures are managed via Exchange mail flow rules or the Exchange admin center. Option A is wrong because Microsoft Teams is for collaboration, not email signatures. Option B is wrong because Microsoft Viva Insights focuses on productivity analytics.

Option C is wrong because Microsoft SharePoint Online is for document management.

Exam trap

Candidates may confuse Microsoft Teams with Exchange Online for email features, but Teams is not involved in email signature management.

Practice this question →

281

MCQhard

A company wants to automate a business process where an approval request is sent to a manager when a new employee is added to the HR system. The HR system is a custom list in SharePoint Online. The process should run without any custom code. Which Microsoft 365 tool should they use to create this automation?

A.Microsoft Power Automate

B.Microsoft Power Apps

C.Microsoft SharePoint Designer

D.Microsoft Visio

AnswerA

Microsoft Power Automate is the correct choice because it is a cloud-based workflow service within the Power Platform designed specifically for automating business processes. It offers pre-built connectors for SharePoint, such as the 'When an item is created or modified' trigger, and an Approvals connector that can route an approval request to specific users or groups with customizable conditions and templates. This makes it the ideal tool to listen for SharePoint list changes and initiate an interactive approval workflow without requiring custom code.

Why this answer

Microsoft Power Automate is the correct tool because it is designed specifically for creating automated workflows between apps and services without custom code. In this scenario, Power Automate can use a trigger (e.g., 'When an item is created or modified' in SharePoint) to send an approval request to a manager, fully meeting the requirement for a no-code solution.

Exam trap

The trap here is that candidates may confuse Microsoft Power Apps (for building apps) with Power Automate (for workflows), or mistakenly think SharePoint Designer is still a viable no-code option, when in fact it is deprecated and requires custom code.

How to eliminate wrong answers

Option B (Microsoft Power Apps) is wrong because Power Apps is a low-code platform for building custom applications, not for automating workflows or approval processes. Option C (Microsoft SharePoint Designer) is wrong because SharePoint Designer is a legacy tool for customizing SharePoint sites and workflows, but it requires custom code and is deprecated in favor of Power Automate. Option D (Microsoft Visio) is wrong because Visio is a diagramming and visualization tool for creating process maps, not for executing automated workflows.

Practice this question →

282

MCQmedium

A company wants to automatically send an email notification to a manager when a new request is submitted in a SharePoint list. The process should require no custom code. Which Microsoft 365 tool should they use?

A.Power Automate

B.SharePoint Designer

C.Power Apps

D.Microsoft Lists

AnswerA

Power Automate is the correct answer because it is a cloud-based automation service specifically designed to connect apps and services. With pre-built templates and triggers such as 'When a new item is created in SharePoint,' it can instantly fire a condition-based email notification, requiring no code. Its robust connector library includes Outlook and Microsoft 365, enabling automated manager alerts directly from list or library events. Authoring a flow in Power Automate takes minutes and is the standard modern solution for this task.

Why this answer

Power Automate is the correct choice because it provides a no-code, trigger-based workflow engine that can automatically send an email when a new item is added to a SharePoint list. It integrates directly with SharePoint and Outlook, requiring no custom code or developer intervention.

Exam trap

The trap here is that candidates may confuse Microsoft Lists (a data storage tool) with Power Automate (the automation engine), or mistakenly think SharePoint Designer is still the standard for no-code workflows, when in fact Power Automate is the modern, recommended solution for this scenario.

How to eliminate wrong answers

Option B is wrong because SharePoint Designer is a legacy tool that requires custom workflows (often using SharePoint 2010/2013 workflow types) and is deprecated for new solutions; it also demands more technical overhead and is not recommended for modern no-code automation. Option C is wrong because Power Apps is a low-code platform for building custom applications and user interfaces, not for automating email notifications based on list events. Option D is wrong because Microsoft Lists is a data management and tracking application that does not include built-in automation capabilities; it relies on Power Automate for any workflow or notification logic.

Practice this question →

283

MCQmedium

A manager wants to set up a daily automated reminder email to employees who have not completed a mandatory training video in Microsoft Stream. The reminder should stop once the training is marked complete. Which Microsoft 365 tool should the manager use?

A.Power Automate

B.Microsoft Forms

C.SharePoint Designer

D.Viva Learning

AnswerA

Power Automate is the correct solution because it uses a recurrence trigger to start a cloud flow daily. That flow can query training completion status via Microsoft Graph or a SharePoint list, apply a conditional branch to filter only employees who haven't completed, and then send personalized reminder emails through Outlook. Crucially, you can add a 'terminate' or condition-based logic to stop the flow after all employees finish, and schedule maintenance is built into the platform's licensing.

Why this answer

Power Automate is the correct tool because it can create an automated workflow that queries Microsoft Stream (or a connected system like SharePoint or a custom list) for employees who have not completed the training, sends a daily reminder email, and stops when the training status changes to 'complete'. This leverages triggers like 'Recurrence' and conditions based on data from Stream or a related data source.

Exam trap

The trap here is that candidates often confuse Viva Learning (a learning portal) with an automation tool, assuming it can send reminders, but Viva Learning lacks workflow triggers and actions for automated email scheduling.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms is a survey and data collection tool, not an automation engine; it cannot send automated reminders or check completion status. Option C is wrong because SharePoint Designer is a legacy tool for SharePoint 2010/2013 workflows, not designed for Microsoft 365 cloud automation or integration with Stream. Option D is wrong because Viva Learning is a learning management interface for accessing and assigning training content, but it lacks native workflow automation to send recurring reminders based on completion status.

Practice this question →

284

MCQhard

Refer to the exhibit. You are configuring a Microsoft Purview Data Loss Prevention (DLP) policy in the Microsoft 365 compliance portal. The policy is intended to block access to files containing credit card numbers when accessed from outside the organization. However, users report that the policy is not blocking access. What is the most likely reason?

A.The policy is not assigned to any locations.

B.The policy mode is set to 'advanced' which is not a valid mode; it should be 'enforce' or 'test'.

C.The confidence level is set to 'high' which is too restrictive.

D.The sensitive information type is incorrect.

AnswerB

The mode column displays 'advanced', which is not a valid Microsoft Purview DLP policy mode. Valid modes are 'Enforce' and 'Test'; when a policy is in Enforce mode it applies protective actions, while Test mode lets you observe matches without blocking. An unhandled value such as 'advanced' means the policy is not validly configured and will not enforce, so this is the actual cause.

Why this answer

The policy mode 'advanced' is not a valid mode in Microsoft Purview DLP. The valid modes are 'enforce' (to actively block actions) and 'test' (to simulate policy effects without blocking). Setting the mode to an invalid value like 'advanced' would prevent the policy from enforcing any restrictions, explaining why access is not being blocked.

Exam trap

The trap here is that candidates may confuse policy mode with other settings like confidence level or location assignment, or assume 'advanced' is a valid mode similar to other Microsoft 365 features (e.g., advanced audit), when in fact DLP only supports 'enforce' and 'test' modes.

How to eliminate wrong answers

Option A is wrong because if the policy were not assigned to any locations, it would not apply at all, but users report the policy is configured and expected to work, implying it is assigned; the issue is with enforcement mode. Option C is wrong because setting the confidence level to 'high' makes the policy more restrictive (requiring stronger evidence of a credit card number), which would reduce false positives but not prevent blocking when a match occurs; it would not cause a failure to block. Option D is wrong because if the sensitive information type were incorrect, the policy would not detect credit card numbers at all, but users report the policy is intended to block such content, and the issue is that it is not blocking despite being configured; the type is likely correct.

Practice this question →

285

MCQeasy

Refer to the exhibit. A PowerShell script snippet. What is this script creating?

A.A mail-enabled security group.

B.A distribution group.

C.A shared mailbox.

D.A Microsoft 365 group.

AnswerD

The script calls the Microsoft Graph or Exchange Online cmdlets that provision a unified group with a mail-enabled identity, creating a Microsoft 365 group rather than a distribution list or security group. Its group type and mail attributes match the Microsoft 365 group object.

Why this answer

The New-UnifiedGroup cmdlet (Exchange Online PowerShell) creates a Microsoft 365 group — a modern group object that provides a shared mailbox, calendar, SharePoint site, and Teams-compatible membership. A mail-enabled security group or distribution group would be created with New-DistributionGroup, and a shared mailbox with New-Mailbox -Shared. The "Unified" in the cmdlet name is the historical term for Microsoft 365 groups (formerly Office 365 unified groups).

Exam trap

The MS-900 exam tests recognising which group type each admin tool or cmdlet produces. The trap is confusing Microsoft 365 groups (New-UnifiedGroup — collaboration features) with distribution groups (New-DistributionGroup — email broadcast only).

How to eliminate wrong answers

Option A is wrong because a SQL database is deployed using the 'Microsoft.Sql/servers/databases' resource type, not 'Microsoft.Storage/storageAccounts'. Option B is wrong because a virtual machine is deployed using the 'Microsoft.Compute/virtualMachines' resource type, which includes properties like 'hardwareProfile' and 'storageProfile', not storage account properties. Option C is wrong because a web app is deployed using the 'Microsoft.Web/sites' resource type, which defines site configurations and app settings, not storage account properties.

Practice this question →

286

MCQmedium

A marketing team needs to create a short promotional video that includes screen recordings, webcam footage, and text overlays. Which Microsoft 365 app should they use to create this video?

A.Microsoft Stream

B.Microsoft Clipchamp

C.Microsoft PowerPoint

D.Microsoft Sway

AnswerB

Microsoft Clipchamp is Microsoft 365's built-in video editor, acquired and integrated into the suite. It provides a full editing experience including a multi-track timeline, screen recording, webcam capture, and text overlays, making it exactly the tool needed to assemble a short promotional video. Unlike the other options, Clipchamp directly enables the required content creation and editing.

Why this answer

Microsoft Clipchamp is the correct app because it is a built-in video editor in Microsoft 365 designed for creating and editing videos with features like screen recording, webcam capture, and text overlays. It provides a timeline-based editing interface that allows users to combine multiple media sources into a single promotional video, making it the ideal tool for this task.

Exam trap

The trap here is that candidates often confuse Microsoft Stream (a video hosting service) with a video creation tool, or assume PowerPoint's basic video insertion capabilities are sufficient for multi-track editing, leading them to overlook Clipchamp's dedicated video editing functionality.

How to eliminate wrong answers

Option A is wrong because Microsoft Stream is a video hosting and sharing platform, not a video creation or editing tool; it lacks native editing capabilities for combining screen recordings, webcam footage, and text overlays. Option C is wrong because Microsoft PowerPoint is a presentation application that can insert videos but does not offer a timeline-based video editor with multi-track support for screen recordings and webcam footage simultaneously. Option D is wrong because Microsoft Sway is a digital storytelling and presentation tool focused on interactive web-based content, not a video editor with screen recording or webcam integration.

Practice this question →

287

Multi-Selecthard

A healthcare organization is adopting Microsoft 365 and must meet compliance requirements: retain all communications for 7 years, prevent accidental deletion of documents, and classify sensitive data automatically. Which THREE Microsoft Purview features should the organization use?

Select 3 answers

A.Data loss prevention (DLP) policies

B.eDiscovery

C.Auto-labeling

D.Preservation hold lock

E.Retention policies

AnswersC, D, E

Auto-labeling in Microsoft 365 automatically applies sensitivity or retention labels to content based on rules, sensitive information patterns, or machine-learning classifiers. For a healthcare organization, this ensures that communications containing protected health information (e.g., a patient ID with a diagnosis) are immediately classified as sensitive without manual user intervention. This classification is a prerequisite for enforcing downstream governance actions like encryption or access restrictions, and it directly fulfills the 'classify' part of the requirement. Auto-labeling alone does not retain content for a set period, but it is the correct mechanism for automated classification.

Why this answer

Auto-labeling (Option C) is correct because it enables the organization to automatically classify sensitive data based on content patterns (e.g., healthcare records, PII) without manual intervention. This aligns directly with the requirement to classify sensitive data automatically, using trainable classifiers or sensitive info types in Microsoft Purview.

Exam trap

The trap here is that candidates often confuse DLP policies with auto-labeling, but DLP is about preventing data loss after classification, not the classification itself.

Practice this question →

288

MCQmedium

A company uses Microsoft 365 and wants to automatically classify documents containing credit card numbers as 'Highly Confidential' and apply encryption when shared externally. Which solution should they use?

A.Microsoft Intune

B.Microsoft Sentinel

C.Microsoft Purview Information Protection with auto-labeling

D.Microsoft Defender for Cloud Apps

AnswerC

Microsoft Purview Information Protection with auto-labeling is the correct service for automatic classification. It uses sensitivity labels and service-side detection of sensitive info types to automatically apply labels to documents and emails stored in Exchange, SharePoint, and OneDrive. Administrators define policies that trigger on credit card numbers, driver's license IDs, or other data types, ensuring sensitive content is consistently protected.

Why this answer

Microsoft Purview Information Protection with auto-labeling is the correct solution because it uses trainable classifiers or exact data match (EDM) to detect sensitive data types like credit card numbers, automatically apply a 'Highly Confidential' sensitivity label, and enforce encryption when the document is shared externally. This capability is built into Microsoft 365 compliance center and integrates with sensitivity labels to protect data at rest and in transit.

Exam trap

The trap here is that candidates confuse Microsoft Defender for Cloud Apps (a CASB) with Purview's auto-labeling, assuming a CASB can classify and encrypt content natively, when in fact it only applies labels that are already defined and managed by Purview Information Protection.

How to eliminate wrong answers

Option A is wrong because Microsoft Intune is a mobile device management (MDM) and mobile application management (MAM) solution that manages devices and apps, not content classification or encryption based on sensitive data patterns. Option B is wrong because Microsoft Sentinel is a cloud-native SIEM/SOAR solution for security analytics and threat detection, not for automatic content classification or labeling of documents. Option D is wrong because Microsoft Defender for Cloud Apps is a CASB that provides visibility and control over cloud app usage, but it does not natively perform automatic classification and encryption of documents based on sensitive data types like credit card numbers; it can apply labels only after they are created by Purview.

Practice this question →

289

MCQmedium

An IT administrator needs to ensure that all company-issued Windows 11 devices are configured with the latest security policies and that applications are deployed automatically. Which Microsoft 365 service should they use?

A.Microsoft Intune

B.Microsoft Microsoft Entra ID

C.Microsoft Defender for Endpoint

D.Microsoft 365 Apps for enterprise

AnswerA

Microsoft Intune is the correct service—it is a cloud-based endpoint management solution that uses the Windows 10/11 MDM enrollment channel and configuration service providers (CSPs) to enforce device configuration policies, deploy applications via Intune Managed Apps or Company Portal, and assess compliance. This directly satisfies the requirement for consistent configuration of all company-issued Windows 11 devices.

Why this answer

Microsoft Intune is the correct choice because it is a cloud-based endpoint management solution that provides mobile device management (MDM) and mobile application management (MAM). It allows IT administrators to enforce security policies (e.g., BitLocker, Windows Defender Firewall, compliance rules) and automate application deployment to Windows 11 devices without requiring on-premises infrastructure. Intune integrates with Microsoft Entra ID for identity-based conditional access but is the primary service for device configuration and app deployment.

Exam trap

The trap here is that candidates often confuse Microsoft Entra ID (identity management) with device management, assuming it can enforce device policies, when in fact Entra ID only provides conditional access policies that rely on Intune compliance data.

How to eliminate wrong answers

Option B is wrong because Microsoft Entra ID is an identity and access management service that handles authentication, single sign-on, and conditional access policies, but it does not manage device configuration or deploy applications directly. Option C is wrong because Microsoft Defender for Endpoint is a security solution focused on endpoint detection and response (EDR), vulnerability management, and threat protection, not device policy enforcement or automated app deployment. Option D is wrong because Microsoft 365 Apps for enterprise is a suite of productivity applications (e.g., Word, Excel, Teams) and does not provide device management or policy configuration capabilities.

Practice this question →

290

Multi-Selectmedium

Which three options describe features or capabilities of Microsoft Viva? (Choose three.)

Select 3 answers

.Provides personalized learning and training resources through Viva Learning

.Integrates employee communications and company news in Viva Connections

.Offers insights into work patterns and well-being in Viva Insights

.Delivers advanced threat protection for email and documents

.Functions as a cloud-based customer relationship management (CRM) system

.Automates complex business workflows using Power Automate

Why this answer

Microsoft Viva is an employee experience platform (EXP) that brings together communications, knowledge, learning, resources, and insights. Viva Learning provides a centralized hub for learning and training resources from LinkedIn Learning, Microsoft Learn, and third-party content providers. Viva Connections delivers a personalized dashboard that integrates company news, conversations, and resources from SharePoint and Yammer.

Viva Insights uses Microsoft Graph data to provide analytics on work patterns, such as meeting time, focus hours, and well-being trends, helping individuals and managers improve productivity and work-life balance.

Exam trap

The trap here is that candidates confuse Microsoft Viva's employee experience features with other Microsoft 365 security, CRM, or automation services, mistakenly selecting options that describe Defender, Dynamics 365, or Power Automate instead of recognizing Viva's specific focus on employee engagement, learning, and insights.

Practice this question →

291

MCQhard

A multinational corporation uses Microsoft 365 E5. They need to enforce that all documents marked as 'Confidential' are encrypted and cannot be printed or forwarded. Which Microsoft Purview Information Protection capability should they configure?

A.Sensitivity labels with encryption

B.Data Loss Prevention (DLP) policies

C.Retention policies

D.Azure Information Protection (AIP) client

AnswerA

Sensitivity labels with encryption are the correct choice because they apply persistent protection directly to content, enforcing encryption, and usage restrictions such as 'Do Not Forward' or 'View Only' settings. These labels work natively across Microsoft 365 apps and services, ensuring that print, copy, and edit actions are blocked based on policies defined by the organization.

Why this answer

Sensitivity labels with encryption are the correct choice because they allow you to classify and protect documents at the file level, applying encryption that restricts actions such as printing and forwarding. This is a core capability of Microsoft Purview Information Protection, enabling persistent protection that travels with the document regardless of where it is stored or shared.

Exam trap

The trap here is that candidates often confuse DLP policies with sensitivity labels, thinking DLP can enforce encryption and restrict actions like printing, but DLP only monitors and alerts on content in transit or at rest, while sensitivity labels provide persistent, user-enforced protection at the file level.

How to eliminate wrong answers

Option B is wrong because Data Loss Prevention (DLP) policies are designed to detect and prevent accidental sharing of sensitive information based on rules, but they do not enforce persistent encryption or restrict printing/forwarding at the file level. Option C is wrong because retention policies are used to retain or delete content for compliance or legal reasons, not to apply encryption or restrict user actions like printing or forwarding. Option D is wrong because the Azure Information Protection (AIP) client is a legacy tool that has been deprecated in favor of built-in sensitivity labels in Microsoft 365 Apps; the modern approach uses sensitivity labels with encryption directly in Purview, not the AIP client.

Practice this question →

292

MCQeasy

A user accidentally deletes a critical file from their OneDrive for Business. The IT admin needs to restore the file. What is the maximum number of days that OneDrive for Business retains deleted files by default for users without a retention policy?

A.30 days

B.60 days

C.183 days

D.93 days

AnswerD

OneDrive for Business retains deleted files for 93 days by default, encompassing both the user's recycle bin and the site collection recycle bin. The 93-day period is a continuous countdown from the original deletion date, not a reset when an item moves between the two stages. Administrators can adjust this default to any value between 30 and 365 days via SharePoint Online PowerShell, but 93 days remains the standard out-of-the-box setting.

Why this answer

By default, OneDrive for Business retains deleted files in the recycle bin for 93 days. This includes both the first-stage recycle bin (30 days) and the second-stage recycle bin (an additional 63 days), totaling 93 days before permanent deletion. This default retention applies when no specific retention policy or legal hold is configured.

Exam trap

The trap here is that candidates often confuse the 30-day first-stage recycle bin retention with the total retention period, or mistakenly apply Exchange Online's 183-day deleted item retention to OneDrive for Business.

How to eliminate wrong answers

Option A is wrong because 30 days is only the retention period for the first-stage recycle bin, not the total retention for deleted files. Option B is wrong because 60 days is not a standard default retention period for OneDrive for Business; it may be confused with SharePoint Online's default retention for deleted items in some contexts. Option C is wrong because 183 days (approximately 6 months) is the default retention period for deleted items in the Microsoft 365 Exchange Online mailbox, not for OneDrive for Business.

Practice this question →

293

MCQmedium

A department asks for the Microsoft 365 service best suited for department document libraries with version history. Which service should they use? The design must avoid adding custom operational scripts.

A.Microsoft Purview Compliance Manager

B.SharePoint Online

C.Microsoft Entra Privileged Identity Management

D.Microsoft Defender for Endpoint

AnswerB

SharePoint Online is the correct choice because it provides structured team sites and document libraries with granular permission management, version history, metadata columns, and co-authoring in the browser. A department can organize its day-to-day work into a shared space, with files secured by SharePoint permission inheritance and integrated with OneDrive and Microsoft Teams. This makes SharePoint Online the Microsoft 365 service best suited for the department’s collaboration and content management requirement.

Why this answer

SharePoint Online is the correct choice because it provides document libraries with built-in version history, allowing users to track, restore, and manage previous versions of documents without any custom scripting. This service is designed for collaborative document management and meets the requirement of avoiding custom operational scripts.

Exam trap

The trap here is that candidates may confuse Microsoft Purview Compliance Manager with document management features due to its 'compliance' name, but it lacks document library and versioning capabilities.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Compliance Manager is a compliance management solution for assessing and managing regulatory risks, not a document library service with version history. Option C is wrong because Microsoft Entra Privileged Identity Management is an identity governance tool for managing, controlling, and monitoring access to privileged roles, not for document storage or versioning. Option D is wrong because Microsoft Defender for Endpoint is a security solution for endpoint protection, detection, and response, not a document management service with version history.

Practice this question →

294

MCQeasy

A sales team wants to use an AI-powered assistant that can draft email replies directly in Outlook using customer data from Dynamics 365. Which Microsoft 365 capability should the admin enable?

A.Microsoft 365 Copilot

B.Microsoft Viva Insights

C.Microsoft Editor

D.Microsoft Power Automate

AnswerA

Microsoft 365 Copilot is an AI-powered assistant embedded across M365 apps, including Outlook. It leverages the Microsoft Graph and user context, and can pull Customer Insights or Dynamics 365 sales data directly into email drafts, generating personalized, grammatically correct email content without manual template creation. It is specifically designed to augment user productivity with generative AI, not just correct or automate existing content.

Why this answer

Microsoft 365 Copilot is the correct answer because it integrates AI-powered assistance directly into Outlook, using data from Dynamics 365 to draft email replies. This capability leverages large language models and the Microsoft Graph to access customer context, enabling personalized and context-aware email composition without leaving the Outlook interface.

Exam trap

The trap here is that candidates may confuse Microsoft Editor's grammar and style suggestions with AI-powered content generation, or assume Power Automate can handle the drafting task, but neither provides the integrated, context-aware email drafting from Dynamics 365 data that Copilot uniquely offers.

How to eliminate wrong answers

Option B is wrong because Microsoft Viva Insights focuses on workplace analytics and productivity insights, such as focus time and wellbeing, not on drafting emails with customer data. Option C is wrong because Microsoft Editor provides grammar, spelling, and style suggestions in documents and emails, but it does not use AI to generate replies based on external data sources like Dynamics 365. Option D is wrong because Microsoft Power Automate is a workflow automation tool that can trigger actions based on events, but it does not natively provide an AI-powered assistant for drafting email replies within Outlook.

Practice this question →

295

MCQhard

A global organization uses Microsoft 365 E5 and needs to securely share sensitive documents with external partners. The compliance officer requires that external users can view but not edit, print, or forward the documents, and access must expire after 30 days. Which combination of services should the admin use?

A.SharePoint Online External Sharing and Microsoft Entra B2B

B.Microsoft Purview Information Protection with sensitivity labels and SharePoint Online

C.Microsoft Entra B2B collaboration with Conditional Access

D.Microsoft Teams with guest access and sharing permissions

AnswerB

Microsoft Purview Information Protection with sensitivity labels provides the actual protection layer: labels can be configured to apply encryption, set permissions such as View-only, disable printing and copying, and attach expiration dates to the document itself. SharePoint Online then hosts the protected file and enforces these label-based restrictions when the document is opened through Office apps or the web, including for external guests. This combination directly satisfies the requirement to allow viewing only, prevent downloads/prints/forwards, and enforce an automatic access expiration, making it the correct solution.

Why this answer

Microsoft Purview Information Protection with sensitivity labels can enforce 'View Only' permissions that prevent editing, printing, and forwarding, while SharePoint Online allows setting an expiration date for external access via sharing links. Together, they meet the compliance officer's requirements for granular document-level restrictions and time-bound access.

Exam trap

The trap here is that candidates confuse external sharing controls (like B2B or guest access) with document-level protection, assuming that any external sharing mechanism can enforce granular usage restrictions, but only sensitivity labels with Azure RMS can apply 'View Only' and expiration at the file level.

How to eliminate wrong answers

Option A is wrong because SharePoint Online External Sharing and Microsoft Entra B2B control access at the site or folder level, not at the document level, and cannot enforce 'View Only' restrictions that block printing or forwarding. Option C is wrong because Microsoft Entra B2B collaboration with Conditional Access controls authentication and device compliance but does not apply document-level usage restrictions like preventing print or forward. Option D is wrong because Microsoft Teams with guest access and sharing permissions provides only coarse-grained controls (e.g., read/write) and lacks the ability to set document-level 'View Only' permissions or an expiration date on individual files.

Practice this question →

296

MCQmedium

An administrator is reviewing a request from users who need to create a team site with document libraries, version history, permissions, and news pages. Microsoft 365 app or service is the best fit?

A.SharePoint Online

B.Microsoft Forms

C.Microsoft Planner

D.Microsoft Purview Audit

AnswerA

SharePoint Online is the correct Microsoft 365 service for creating a team site because it provides team sites as first-class containers with document libraries, lists, pages, news, and permission management. A modern SharePoint team site is typically connected to a Microsoft 365 group, enabling shared calendar, mailbox, and memberships, while site features like version history, co-authoring, and granular sharing controls support day-to-day collaboration. No other option in the list provisions a site infrastructure with these capabilities.

Why this answer

SharePoint Online is the correct choice because it provides team sites with document libraries, version history, granular permissions, and news pages as core features. These capabilities are built into SharePoint's site architecture, allowing administrators to create collaboration spaces with full control over content management and access.

Exam trap

The trap here is that candidates may confuse Microsoft Planner's task boards with a team site's document management features, or assume Microsoft Forms can create news pages, when in fact only SharePoint Online provides the full suite of document libraries, versioning, permissions, and news pages required for this scenario.

How to eliminate wrong answers

Option B is wrong because Microsoft Forms is a survey and quiz tool that collects responses via forms, not a platform for creating team sites with document libraries, version history, permissions, or news pages. Option C is wrong because Microsoft Planner is a task management application for organizing work with boards and buckets, lacking document libraries, version history, and news page capabilities. Option D is wrong because Microsoft Purview Audit is a compliance and auditing solution for tracking user and admin activities across Microsoft 365, not a service for building collaborative team sites or managing content.

Practice this question →

297

Multi-Selecteasy

Which TWO Microsoft 365 apps include AI-powered features that can summarize email threads and documents? (Select two.)

Select 2 answers

A.Microsoft Outlook

B.Microsoft Excel

C.Microsoft OneNote

D.Microsoft PowerPoint

E.Microsoft Word

AnswersA, E

Outlook Copilot uses natural language processing to summarize email threads, condensing lengthy conversations into key points, action items, and pending decisions directly within the app. This native AI-powered summarization of existing textual content is exactly what the question asks for, making Outlook a correct choice.

Why this answer

Microsoft Outlook (A) is correct because its AI-powered features, such as Microsoft Copilot in Outlook, can summarize long email threads and generate concise recaps directly within the mailbox. Microsoft Word (E) is correct because Copilot in Word can summarize lengthy documents, producing key points and overviews of the file's content. Excel (B) focuses on data analysis, formulas, and spreadsheet insights rather than email or document summarization, so it does not fit.

OneNote (C) is a note-taking app and does not provide the specified email-thread and document summarization features. PowerPoint (D) is designed for creating and summarizing presentations, not email threads or general documents, so it is not one of the two correct answers.

Exam trap

The MS-900 exam often tests the misconception that all Office apps have the same AI capabilities, leading candidates to select Excel or PowerPoint because they assume 'AI' means any smart feature, but the question specifically requires summarization of email threads and documents.

Practice this question →

298

MCQmedium

A hospital uses Microsoft 365 E5 and needs to ensure that patient health information (PHI) is not accidentally shared externally. They want to block sharing of emails containing credit card numbers or medical record numbers. Which Microsoft Purview feature should they configure?

A.Microsoft Purview Privileged Access Management

B.Microsoft Purview Data Loss Prevention (DLP)

C.Microsoft Purview Sensitivity Labels

D.Microsoft Purview Information Barriers

AnswerB

Microsoft Purview Data Loss Prevention (DLP) uses configurable policies to scan messages and files for sensitive information types such as HIPAA-specific identifiers, medical record numbers, and diagnosis codes, and then automatically blocks or restricts the sharing of those items. In a healthcare tenant, a DLP policy can be applied to Exchange, SharePoint, OneDrive, Teams, and endpoints so that any attempt to email or upload PHI to an unapproved external domain triggers a block action, encryption, or a policy tip to the user. This provides the proactive, content-based control needed to prevent patient data from leaving the hospital.

Why this answer

Microsoft Purview Data Loss Prevention (DLP) is the correct feature because it is specifically designed to detect and block the accidental sharing of sensitive data, such as credit card numbers and medical record numbers, via email. DLP uses deep content analysis with built-in sensitive information types (e.g., Credit Card Number, U.S. Medical Record Number) to scan emails and enforce policies that prevent external sharing.

This directly addresses the hospital's requirement to protect PHI from being leaked externally.

Exam trap

The trap here is that candidates often confuse Sensitivity Labels with DLP, not realizing that labels are for classification and protection (e.g., encryption), while DLP is the enforcement engine that scans content and blocks sharing based on those labels or built-in sensitive data types.

How to eliminate wrong answers

Option A is wrong because Microsoft Purview Privileged Access Management (PAM) provides just-in-time access control for elevated administrative tasks, not content inspection or blocking of sensitive data in emails. Option C is wrong because Sensitivity Labels are used to classify and protect data with encryption and visual markings, but they do not automatically scan and block sharing of specific data patterns like credit card numbers or medical record numbers without a DLP policy to enforce actions. Option D is wrong because Information Barriers are designed to restrict communication and collaboration between specific groups (e.g., to prevent conflicts of interest), not to scan email content for sensitive data patterns or block external sharing.

Practice this question →

299

MCQeasy

A marketing team needs to collaboratively create and edit documents in real time, share files securely, and track version history. Which Microsoft 365 service should they primarily use?

A.Microsoft Teams

B.OneDrive for Business

C.SharePoint Online

D.Microsoft Viva Engage

AnswerC

SharePoint Online is the correct choice because it provides team sites with document libraries designed for collaborative content creation and editing at scale. Its capabilities include real-time co-authoring, version history, check-in/check-out, and fine-grained permission management, all of which are essential for a marketing team working on shared assets. SharePoint serves as the central file repository for Microsoft 365, powering file collaboration across Teams and other apps.

Why this answer

SharePoint Online is the correct choice because it is designed for team collaboration with real-time co-authoring, granular permission-based file sharing, and built-in version history that tracks every change. Unlike OneDrive, which is optimized for individual file storage and sharing, SharePoint provides a centralized team site where multiple users can simultaneously edit documents and manage versions at the site or library level.

Exam trap

The trap here is that candidates often confuse OneDrive for Business with SharePoint Online because both offer real-time co-authoring and version history, but the question specifies a team needing collaborative creation and secure sharing, which is the defining use case for SharePoint's team sites rather than OneDrive's personal storage.

How to eliminate wrong answers

Option A is wrong because Microsoft Teams is a chat-based collaboration hub that integrates with SharePoint for file storage, but its primary function is communication and meetings, not native document co-authoring and version history management. Option B is wrong because OneDrive for Business is a personal cloud storage service that supports real-time co-authoring and version history for individual files, but it lacks the team-centric site structure, metadata, and permission inheritance needed for a marketing team to collaboratively manage documents as a group. Option D is wrong because Microsoft Viva Engage (formerly Yammer) is an enterprise social networking tool focused on community discussions and knowledge sharing, not document creation, real-time editing, or version control.

Practice this question →

300

MCQmedium

A marketing team needs to create a shared workspace to manage projects, store documents, and track tasks. Which Microsoft 365 service should the administrator recommend?

A.SharePoint Online

B.Microsoft Sway

C.Microsoft Bookings

D.Microsoft Stream

AnswerA

SharePoint Online is the correct choice because it provides a true shared workspace via team sites that include document libraries, versioning, and co-authoring for files, as well as integrated Lists and Planner for task tracking. Team site permissions allow granular control over member access, and the site can serve as a central hub for project assets, communications, and status reporting. This makes SharePoint Online purpose-built for collaborative project management, unlike the other listed services.

Why this answer

SharePoint Online is the correct recommendation because it provides a centralized platform for creating team sites that serve as shared workspaces. It includes document libraries for storing and co-authoring files, lists for tracking tasks, and integration with Microsoft Teams and Planner for project management, directly meeting all the stated requirements.

Exam trap

The trap here is that candidates may confuse SharePoint Online with other Microsoft 365 apps like Teams or Planner, but the question specifically asks for a service that combines document storage, task tracking, and a shared workspace, which is the core function of SharePoint Online.

How to eliminate wrong answers

Option B is wrong because Microsoft Sway is a presentation and storytelling app for creating interactive reports and newsletters, not a shared workspace for project management or task tracking. Option C is wrong because Microsoft Bookings is a scheduling tool for managing customer appointments, lacking document storage and task management capabilities. Option D is wrong because Microsoft Stream is a video hosting and sharing service for enterprise video content, not designed for project collaboration or task tracking.

Practice this question →