B. Implement change: This describes a general IT operational process (change management), not a foundational principle of the Zero Trust security model.

C. Identify potential charge: This is related to cost management or billing and is entirely irrelevant to the principles of the Zero Trust security framework.

1. Microsoft Learn. (2023). Describe the Zero Trust model. MS-900: Microsoft 365 Fundamentals. "The three principles of Zero Trust are: Verify explicitly. Use least privileged access. Assume breach."

2. Microsoft Learn. (2023). What is Zero Trust?. "To address this new world of computing, Microsoft highly recommends the Zero Trust security model, which is based on these guiding principles: Verify explicitly... Use least-privileged access... Assume breach."

Data loss prevention (DLP) policies allow you to search for content... and export the content for review.

This statement is No. The primary purpose of Data Loss Prevention (DLP) policies is to identify, monitor, and automatically protect sensitive information across Microsoft 365 services. It prevents accidental sharing of sensitive data. The tool designed for searching, preserving, and exporting content for legal or investigative review is Microsoft Purview eDiscovery.

Sensitivity labels allow you to refine the results from a search for content in Microsoft Teams and SharePoint Online.

This statement is Yes. Sensitivity labels apply metadata to content. This metadata can be used as a search condition within Content Search and eDiscovery. By specifying a particular sensitivity label as a filter, you can refine your search query to return only the content that has been classified with that specific label.

Advanced eDiscovery allows you to manage the custodians that are relevant to a case.

This statement is Yes. A core feature of the Advanced eDiscovery solution is the ability to manage custodians—the people who have administrative control of data relevant to a case. The Advanced eDiscovery workflow allows you to add custodians to a case, place their data sources (like mailboxes and OneDrive accounts) on legal hold, and manage communications with them throughout the eDiscovery process.

Microsoft. (n.d.). Learn about data loss prevention. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp. (This document describes DLP's function as protection and monitoring, not search and export for review.)

Microsoft. (n.d.). Overview of eDiscovery (Premium). Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/ediscovery-premium-overview. (This document outlines that eDiscovery is the solution for identifying, preserving, collecting, and exporting content for legal cases.)

Microsoft. (n.d.). Keyword queries and search conditions for Content Search. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/keyword-queries-and-search-conditions#searchable-email-and-document-properties. (This documentation explicitly lists SensitivityLabel as a searchable property for refining content searches.)

Microsoft. (n.d.). Work with custodians in eDiscovery (Premium). Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/ediscovery-premium-custodians. (This source details the entire process of adding, managing, and releasing custodians within an Advanced eDiscovery case.)

Microsoft Defender for Identity alerts are generated directly by the Defender for Identity service based on signals from on-premises Active Directory domain controllers. While Microsoft Defender for Cloud Apps (formerly MCAS) integrates with and consumes signals from Defender for Identity to provide a more comprehensive view of threats, it does not generate the Defender for Identity alerts themselves.

Microsoft Defender for Cloud Apps contributes to the Microsoft Secure Score. It provides security recommendations for connected cloud applications, such as identifying risky OAuth applications or misconfigurations. These recommendations are factored into the overall Secure Score, helping organizations track and improve their security posture.

Microsoft Power BI is a data visualization and business intelligence tool used for creating reports and dashboards. It is not used for automating responses to alerts. Response automation for alerts from Defender for Cloud Apps is typically handled using Microsoft Power Automate (Flow) or Azure Logic Apps, which can be configured to take specific governance actions when an alert is triggered.

Microsoft Learn. (2023). Microsoft Defender for Identity integration with Microsoft Defender for Cloud Apps. "When you integrate Microsoft Defender for Identity with Defender for Cloud Apps, you enhance the protection of your cloud environment by receiving alerts from Defender for Identity..." This indicates Defender for Cloud Apps receives alerts, not generates them.

Microsoft Learn. (2024). Microsoft Secure Score. Under the "Included security products" section, "Microsoft Defender for Cloud Apps" is listed as a product that provides security recommendations to Secure Score.

Microsoft Learn. (2023). Govern discovered apps using Microsoft Power Automate. "You can use the Defender for Cloud Apps connector in Power Automate to create playbooks that automate your incident response and triage." This document explicitly names Power Automate, not Power BI, as the tool for automating governance actions.

A. Microsoft 365 licenses acquired through an Enterprise Agreement are subscription-based and are not perpetual. They expire at the end of the agreement term if not renewed.

B. The Enterprise Agreement supports both per-user and per-device licensing models. Microsoft 365 is primarily licensed on a per-user basis, making this statement inaccurate as a general benefit.

C. Licenses under an Enterprise Agreement are not non-expiring. They are tied to the agreement's term (usually three years) and must be renewed to maintain access to services.

1. Microsoft Volume Licensing. (n.d.). Enterprise Agreement. Microsoft. Retrieved from https://www.microsoft.com/en-us/licensing/licensing-programs/enterprise.

Reference Point: Under the "Why the Enterprise Agreement?" section, the document states, "Get the best value, budget predictability, and low administrative overhead... Best pricing for cloud and on-premises... with locked-in pricing for the term of your agreement." This directly supports the concept of locked-in pricing.

2. Microsoft. (2022, July). Microsoft Enterprise Agreement Program Guide. Microsoft Licensing.

Reference Point: On page 4, under the section "Benefits of the Enterprise Agreement," the guide lists "Budget predictability through a single agreement with predictable payments." This confirms that price stability is a core benefit.

3. Microsoft. (n.d.). Licensing for the Modern Workplace. Microsoft Learn.

Reference Point: In the module discussing volume licensing, the Enterprise Agreement is described as providing "predictable annual payments" for a three-year term, which reinforces the benefit of locked-in pricing and budget predictability.

Microsoft Bookings is a dedicated scheduling application within Microsoft 365. It's designed specifically to help businesses manage appointments and calendars with customers and staff, making it the correct choice for tracking and organizing appointments.

Microsoft Planner is a team-oriented task management tool that utilizes a Kanban board interface. Tasks are represented as "cards" that can be organized into columns (Buckets) and assigned to team members, perfectly matching the description of managing tasks with task cards.

Microsoft Project is the most advanced project management solution in the suite. It is built for complex projects, offering robust features for detailed planning, creating task dependencies, managing budgets, and, critically, allocating and managing resources across multiple projects.

Microsoft Bookings: According to the official Microsoft 365 documentation, "Microsoft Bookings is a scheduling app and is part of the Microsoft 365 family of products. Bookings makes scheduling appointments easy and efficient for you, your staff, and your customers."

Source: Microsoft Docs, "What is Microsoft Bookings?", Introduction.

Microsoft Planner: The official Microsoft Planner documentation for admins states, "Microsoft Planner is a Microsoft 365 service that lets you create boards and add your team's tasks and assignments. On a Planner board, you can sort your tasks into columns (or buckets)... You can move tasks around your board just by dragging and dropping them..." This describes the use of task cards on a board.

Source: Microsoft Docs, "Microsoft Planner for admins", Introduction.

Microsoft Project: The Microsoft Project service description highlights its advanced capabilities: "Microsoft Project offers a full range of project and portfolio management (PPM) services... Project helps organizations... prioritize project portfolio investments... Core capabilities include... Resource management, Schedule management..." This directly aligns with the requirement to plan, prioritize, and manage resources.

Source: Microsoft Docs, "Microsoft Project service description", Service plans section.

B. Monitor on-premises servers.

This is not a primary capability of Endpoint Manager. Server monitoring is typically handled by specialized tools like Azure Monitor or System Center Operations Manager (SCOM).

D. Report on cloud-based security event information.

This is the primary function of a Security Information and Event Management (SIEM) tool like Microsoft Sentinel or an Extended Detection and Response (XDR) solution like Microsoft Defender for Endpoint.

1. Microsoft. (n.d.). What is Microsoft Intune? Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune. (This document outlines the core capabilities of Intune, part of Endpoint Manager, covering device management (C) and app management (A)).

2. Microsoft. (n.d.). Overview of Windows Autopilot. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot. (This official documentation details how Autopilot, a feature of Endpoint Manager, is used to set up and preconfigure new Windows devices (E)).

3. Microsoft. (n.d.). Introduction to application management in Configuration Manager. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/configmgr/apps/understand/introduction-to-application-management. (This source confirms that deploying applications to devices, including on-premises desktops, is a fundamental capability of Configuration Manager, which is part of Endpoint Manager (A)).

4. Microsoft. (n.d.). Azure Monitor overview. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/azure-monitor/overview. (This document clarifies that comprehensive monitoring of on-premises and cloud environments, including servers, is the role of Azure Monitor, not Endpoint Manager, making option B incorrect).

Microsoft Forms is a dedicated application within Microsoft 365 designed for creating surveys, quizzes, and polls. Its primary function is to collect information from users and provide real-time analytics and results.

Microsoft Planner is a task management tool that enables teams to organize their work visually. It allows users to create plans, populate them with tasks, assign those tasks to team members, set deadlines, and track the overall progress of projects.

Azure AD Premium P2 is an identity and access management service, not a direct collaboration tool for content creation. Microsoft Delve is a content discovery tool that surfaces relevant documents and information to users, rather than being used for creating new items like tasks or surveys.

Microsoft Learn. (n.d.). Introduction to Microsoft Forms. Microsoft Docs. Retrieved September 9, 2025.

Reference Details: In the "What is Microsoft Forms?" section, the documentation states, "With Microsoft Forms you can create surveys, quizzes, and polls, and easily see results as they come in... invite others to respond to it using almost any web browser or mobile device."

Microsoft Support. (n.d.). Microsoft Planner help & learning. Microsoft. Retrieved September 9, 2025.

Reference Details: The "Planner Quick Start" guide explicitly states, "Microsoft Planner is a Microsoft 365 service that lets you create boards and add your team's tasks and assignments. On your Planner board, you can sort your tasks into columns (or buckets). Buckets can indicate stages of work, days of the week, sprints, and more."

A. Inviting external users to an online meeting is a primary function of Microsoft Teams and Outlook, not a native feature of OneDrive.

B. Chatting with multiple users is a core capability of Microsoft Teams, which serves as the central hub for communication and teamwork.

1. Microsoft Learn. (2024). Describe collaboration solutions in Microsoft 365 - MS-900. Under the section "Explore OneDrive," it states, "Key features include... Sharing files and folders inside and outside the organization... Real-time coauthoring in Microsoft Office apps." This directly supports options C and D.

2. Microsoft Support. (n.d.). Collaborate in OneDrive. Retrieved from the official Microsoft Support site. The document states, "With your files in OneDrive, you can share them with others, control who can view or edit them, and work together on them at the same time." This confirms both sharing (D) and coauthoring (C).

3. Microsoft Learn. (2024). What is Microsoft Teams?. Under the "Overview" section, it describes Teams as the hub for teamwork that integrates "chat, meetings, calling, and files." This confirms that meetings (A) and chat (B) are features of Microsoft Teams.

A. Microsoft Remote Connectivity Analyzer is a web-based tool used for troubleshooting connectivity issues with Microsoft 365 services, not for deploying software.

C. Windows Update is primarily used for deploying updates to the Windows operating system and other Microsoft components, not for the initial deployment of the Microsoft 365 Apps suite.

D. Microsoft FastTrack is a customer success service that provides guidance and resources for onboarding to Microsoft 365; it is not a software deployment tool itself.

1. Microsoft Docs. (2023). Overview of the Office Deployment Tool. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/deployoffice/overview-office-deployment-tool. In the introduction, it states, "The Office Deployment Tool (ODT) is a command-line tool that you can use to download and deploy Microsoft 365 Apps to your client computers."

2. Microsoft Docs. (2023). Deploy Microsoft 365 Apps from the cloud. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/deployoffice/deploy-microsoft-365-apps-from-the-cloud. The article's first step under "Step 1: Create the configuration file" explicitly details using the Office Deployment Tool for this purpose.

3. Microsoft Learn. (2024). MS-900: Describe deployment and release models for Windows-as-a-Service and Microsoft 365 Apps. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/training/modules/describe-deployment-release-models-windows-as-service-microsoft-365-apps/3-describe-deployment-process-for-microsoft-365-apps. This module identifies the Office Deployment Tool as a key method for deploying Microsoft 365 Apps in an enterprise environment.

A. Viva Insights helps users book focus time on their personal calendar, but it does not have a direct integration with the Microsoft Bookings app, which is designed for scheduling customer appointments.

E. While Viva Engage (built on Yammer) is part of the Microsoft Viva suite, Viva Insights does not directly integrate with or analyze Yammer data for its core productivity and well-being metrics.

1. Microsoft Learn. (2023). Personal insights in Microsoft Viva. This document explicitly states the different ways to access Viva Insights: "You can see personal insights through the Viva Insights app in Microsoft Teams and on the web...Briefing emails and Viva digest emails in Outlook, and the Viva Insights Outlook add-in." This single source confirms the correctness of options B, C, and D.

Reference: Introduction section, Paragraph 2.

2. Microsoft Learn. (2023). Data sources for Microsoft Viva Insights. This page details the data used for analysis, which includes Microsoft 365 email, calendar data, and Teams chat and call activity. It makes no mention of Yammer as a data source, confirming that option E is incorrect.

Reference: "Data sources" section.

3. Microsoft Learn. (2023). Focus plan for Viva Insights. This documentation describes how the focus plan feature automatically books time in a user's calendar. The functionality is self-contained and does not mention any integration with the separate Microsoft Bookings application, making option A incorrect.

Reference: "How it works" section, Paragraph 1.