Free Practice Test

Free MS-900 Practice Test – 2025 Updated

Prepare smarter for your MS-900 exam with our free, accurate, and 2025-updated questions.

At Cert Empire, we are committed to providing the best and the latest exam questions to the aspiring students who are preparing for Microsoft MS-900 Exam. To help the students prepare better, we have made sections of our MS-900 exam preparation resources free for all. You can practice as much as you can with Free MS-900 Practice Test.

Question 1

A company is evaluating Microsoft 365. You need to determine the principles of Zero Trust. Which two principles should you identity? Each correct answer presents part of the solution.

Options
A:

A. Assume breach

B:

B. Implement change

C:

C. Identify potential charge

D:

D. Verify explicitly

Show Answer
Correct Answer:
A. Assume breach, D. Verify explicitly
Explanation
The Microsoft Zero Trust security model is built on three core principles: Verify explicitly, Use least privileged access, and Assume breach. "Verify explicitly" mandates that all access requests are authenticated and authorized based on every available data point, treating every request as if it originates from an untrusted network. "Assume breach" shifts the security mindset from preventing breaches to minimizing their impact. This involves segmenting access, verifying end-to-end encryption, and using analytics to detect threats, assuming that an attacker is already inside the network.
Why Incorrect Options are Wrong

B. Implement change: This describes a general IT operational process (change management), not a foundational principle of the Zero Trust security model.

C. Identify potential charge: This is related to cost management or billing and is entirely irrelevant to the principles of the Zero Trust security framework.

References

1. Microsoft Learn. (2023). Describe the Zero Trust model. MS-900: Microsoft 365 Fundamentals. "The three principles of Zero Trust are: Verify explicitly. Use least privileged access. Assume breach."

2. Microsoft Learn. (2023). What is Zero Trust?. "To address this new world of computing, Microsoft highly recommends the Zero Trust security model, which is based on these guiding principles: Verify explicitly... Use least-privileged access... Assume breach."

Question 2

HOTSPOT Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:

NO

YES

YES

Explanation

Data loss prevention (DLP) policies allow you to search for content... and export the content for review.

This statement is No. The primary purpose of Data Loss Prevention (DLP) policies is to identify, monitor, and automatically protect sensitive information across Microsoft 365 services. It prevents accidental sharing of sensitive data. The tool designed for searching, preserving, and exporting content for legal or investigative review is Microsoft Purview eDiscovery.


Sensitivity labels allow you to refine the results from a search for content in Microsoft Teams and SharePoint Online.

This statement is Yes. Sensitivity labels apply metadata to content. This metadata can be used as a search condition within Content Search and eDiscovery. By specifying a particular sensitivity label as a filter, you can refine your search query to return only the content that has been classified with that specific label.


Advanced eDiscovery allows you to manage the custodians that are relevant to a case.

This statement is Yes. A core feature of the Advanced eDiscovery solution is the ability to manage custodiansโ€”the people who have administrative control of data relevant to a case. The Advanced eDiscovery workflow allows you to add custodians to a case, place their data sources (like mailboxes and OneDrive accounts) on legal hold, and manage communications with them throughout the eDiscovery process.

References

Microsoft. (n.d.). Learn about data loss prevention. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp. (This document describes DLP's function as protection and monitoring, not search and export for review.)

Microsoft. (n.d.). Overview of eDiscovery (Premium). Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/ediscovery-premium-overview. (This document outlines that eDiscovery is the solution for identifying, preserving, collecting, and exporting content for legal cases.)

Microsoft. (n.d.). Keyword queries and search conditions for Content Search. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/keyword-queries-and-search-conditions#searchable-email-and-document-properties. (This documentation explicitly lists SensitivityLabel as a searchable property for refining content searches.)

Microsoft. (n.d.). Work with custodians in eDiscovery (Premium). Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/purview/ediscovery-premium-custodians. (This source details the entire process of adding, managing, and releasing custodians within an Advanced eDiscovery case.)

Question 3

HOTSPOT Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:
Explanation

Microsoft Defender for Identity alerts are generated directly by the Defender for Identity service based on signals from on-premises Active Directory domain controllers. While Microsoft Defender for Cloud Apps (formerly MCAS) integrates with and consumes signals from Defender for Identity to provide a more comprehensive view of threats, it does not generate the Defender for Identity alerts themselves.


Microsoft Defender for Cloud Apps contributes to the Microsoft Secure Score. It provides security recommendations for connected cloud applications, such as identifying risky OAuth applications or misconfigurations. These recommendations are factored into the overall Secure Score, helping organizations track and improve their security posture.


Microsoft Power BI is a data visualization and business intelligence tool used for creating reports and dashboards. It is not used for automating responses to alerts. Response automation for alerts from Defender for Cloud Apps is typically handled using Microsoft Power Automate (Flow) or Azure Logic Apps, which can be configured to take specific governance actions when an alert is triggered.

References

Microsoft Learn. (2023). Microsoft Defender for Identity integration with Microsoft Defender for Cloud Apps. "When you integrate Microsoft Defender for Identity with Defender for Cloud Apps, you enhance the protection of your cloud environment by receiving alerts from Defender for Identity..." This indicates Defender for Cloud Apps receives alerts, not generates them.

Microsoft Learn. (2024). Microsoft Secure Score. Under the "Included security products" section, "Microsoft Defender for Cloud Apps" is listed as a product that provides security recommendations to Secure Score.

Microsoft Learn. (2023). Govern discovered apps using Microsoft Power Automate. "You can use the Defender for Cloud Apps connector in Power Automate to create playbooks that automate your incident response and triage." This document explicitly names Power Automate, not Power BI, as the tool for automating governance actions.

Question 4

A company is evaluatingMicrosoft 365. You need lo identity the benefits of an Enterprise Agreement. What is a benefit of an Enterprise Agreement?
Options
A: All licenses are perpetual
B: Simplified per-device licensing model.
C: Simplified non-expiring licensing model
D: Locked-inpricing for the duration of the term.
Show Answer
Correct Answer:
Locked-inpricing for the duration of the term.
Explanation
An Enterprise Agreement (EA) is a volume licensing program for large organizations, typically with a three-year term. A key financial benefit of this agreement is price predictability. The per-unit price for the products and services selected at the beginning of the agreement is locked in for the entire three-year duration. This protects the organization from price increases on those licensed products during the term, which simplifies budgeting and provides financial stability.
Why Incorrect Options are Wrong

A. Microsoft 365 licenses acquired through an Enterprise Agreement are subscription-based and are not perpetual. They expire at the end of the agreement term if not renewed.

B. The Enterprise Agreement supports both per-user and per-device licensing models. Microsoft 365 is primarily licensed on a per-user basis, making this statement inaccurate as a general benefit.

C. Licenses under an Enterprise Agreement are not non-expiring. They are tied to the agreement's term (usually three years) and must be renewed to maintain access to services.

References

1. Microsoft Volume Licensing. (n.d.). Enterprise Agreement. Microsoft. Retrieved from https://www.microsoft.com/en-us/licensing/licensing-programs/enterprise.

Reference Point: Under the "Why the Enterprise Agreement?" section, the document states, "Get the best value, budget predictability, and low administrative overhead... Best pricing for cloud and on-premises... with locked-in pricing for the term of your agreement." This directly supports the concept of locked-in pricing.

2. Microsoft. (2022, July). Microsoft Enterprise Agreement Program Guide. Microsoft Licensing.

Reference Point: On page 4, under the section "Benefits of the Enterprise Agreement," the guide lists "Budget predictability through a single agreement with predictable payments." This confirms that price stability is a core benefit.

3. Microsoft. (n.d.). Licensing for the Modern Workplace. Microsoft Learn.

Reference Point: In the module discussing volume licensing, the Enterprise Agreement is described as providing "predictable annual payments" for a three-year term, which reinforces the benefit of locked-in pricing and budget predictability.

Question 5

DRAG DROP A company is migrating to Microsoft 365. The company is evaluating work management features in Microsoft 365. You need to recommend the appropriate Microsoft 365 services. Which services should you recommend? To answer, drag the appropriate services to the correct features. Each service may be used once, more than once, or not at all You may need to drag the split bar between panes or scroll to view content. PDF Exam dump

Show Answer
Correct Answer:

PROVIDES A SERVICE THAT ALLOWS YOU TO TRACK, MANAGE, AND ORGANIZE YOUR TEAM'S APPOINTMENTS AND CALENDARS. -> MICROSOFT BOOKINGS

PROVIDES A SERVICE THAT ALLOWS YOU TO ASSIGN AND MANAGE TASKS BY USING TASK CARDS. -> MICROSOFT PLANNER

PROVIDES A SERVICE THAT ALLOWS YOU TO PLAN, PRIORITIZE, AND MANAGE RESOURCES. -> MICROSOFT PROJECT


Explanation

Microsoft Bookings is a dedicated scheduling application within Microsoft 365. It's designed specifically to help businesses manage appointments and calendars with customers and staff, making it the correct choice for tracking and organizing appointments.


Microsoft Planner is a team-oriented task management tool that utilizes a Kanban board interface. Tasks are represented as "cards" that can be organized into columns (Buckets) and assigned to team members, perfectly matching the description of managing tasks with task cards.


Microsoft Project is the most advanced project management solution in the suite. It is built for complex projects, offering robust features for detailed planning, creating task dependencies, managing budgets, and, critically, allocating and managing resources across multiple projects.

References

Microsoft Bookings: According to the official Microsoft 365 documentation, "Microsoft Bookings is a scheduling app and is part of the Microsoft 365 family of products. Bookings makes scheduling appointments easy and efficient for you, your staff, and your customers."

Source: Microsoft Docs, "What is Microsoft Bookings?", Introduction.

Microsoft Planner: The official Microsoft Planner documentation for admins states, "Microsoft Planner is a Microsoft 365 service that lets you create boards and add your team's tasks and assignments. On a Planner board, you can sort your tasks into columns (or buckets)... You can move tasks around your board just by dragging and dropping them..." This describes the use of task cards on a board.

Source: Microsoft Docs, "Microsoft Planner for admins", Introduction.

Microsoft Project: The Microsoft Project service description highlights its advanced capabilities: "Microsoft Project offers a full range of project and portfolio management (PPM) services... Project helps organizations... prioritize project portfolio investments... Core capabilities include... Resource management, Schedule management..." This directly aligns with the requirement to plan, prioritize, and manage resources.

Source: Microsoft Docs, "Microsoft Project service description", Service plans section.

Question 6

You are an IT director that is evaluating the capabilities of Microsoft Endpoint Manager. You need to present the capabilities to key stakeholders. Which three capabilities should you present to the stakeholders? Each correct answer presents a complete solution.

Options
A:

A. Deploy on- premises desktop apps.

B:

B. Monitor on-premises servers.

C:

C. Manage cloud-based mobile devices.

D:

D. Report on cloud-based security event information.

E:

E. Set up and preconfigure new Windows devices.

Show Answer
Correct Answer:
A. Deploy on- premises desktop apps., C. Manage cloud-based mobile devices., E. Set up and preconfigure new Windows devices.
Explanation
Microsoft Endpoint Manager is a unified management platform that includes Microsoft Intune and Microsoft Configuration Manager. Its primary capabilities revolve around managing and securing user endpoints and applications. 1. Deploy on-premises desktop apps (A): Through its Configuration Manager component, Endpoint Manager provides robust capabilities for deploying and managing applications on on-premises Windows desktops. 2. Manage cloud-based mobile devices (C): This is a core function of Microsoft Intune, a key part of Endpoint Manager. It provides comprehensive Mobile Device Management (MDM) and Mobile Application Management (MAM) for iOS, Android, and Windows devices. 3. Set up and preconfigure new Windows devices (E): This is accomplished using Windows Autopilot, a suite of technologies integrated with Intune that automates the setup and configuration of new devices, making them ready for corporate use out of the box.
Why Incorrect Options are Wrong

B. Monitor on-premises servers.

This is not a primary capability of Endpoint Manager. Server monitoring is typically handled by specialized tools like Azure Monitor or System Center Operations Manager (SCOM).

D. Report on cloud-based security event information.

This is the primary function of a Security Information and Event Management (SIEM) tool like Microsoft Sentinel or an Extended Detection and Response (XDR) solution like Microsoft Defender for Endpoint.

References

1. Microsoft. (n.d.). What is Microsoft Intune? Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune. (This document outlines the core capabilities of Intune, part of Endpoint Manager, covering device management (C) and app management (A)).

2. Microsoft. (n.d.). Overview of Windows Autopilot. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/autopilot/windows-autopilot. (This official documentation details how Autopilot, a feature of Endpoint Manager, is used to set up and preconfigure new Windows devices (E)).

3. Microsoft. (n.d.). Introduction to application management in Configuration Manager. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/mem/configmgr/apps/understand/introduction-to-application-management. (This source confirms that deploying applications to devices, including on-premises desktops, is a fundamental capability of Configuration Manager, which is part of Endpoint Manager (A)).

4. Microsoft. (n.d.). Azure Monitor overview. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/azure/azure-monitor/overview. (This document clarifies that comprehensive monitoring of on-premises and cloud environments, including servers, is the role of Azure Monitor, not Endpoint Manager, making option B incorrect).

Question 7

DRAG DROP A company plans to deploy Microsoft 365. Match each collaboration solution to its description. To answer, drag the appropriate collaboration solution from the column on the left to its description on the right.Each collaboration solution may be used once, more than once, or not at all. MS-900 exam question

Show Answer
Correct Answer:

CREATE ONLINE SURVEYS AND POLLS AND TRACK THE RESPONSES IN REAL TIME: MICROSOFT FORMS

CREATE, ASSIGN, AND TRACK TASKS AND WORK ITEMS: MICROSOFT PLANNER


Explanation

Microsoft Forms is a dedicated application within Microsoft 365 designed for creating surveys, quizzes, and polls. Its primary function is to collect information from users and provide real-time analytics and results.


Microsoft Planner is a task management tool that enables teams to organize their work visually. It allows users to create plans, populate them with tasks, assign those tasks to team members, set deadlines, and track the overall progress of projects.


Azure AD Premium P2 is an identity and access management service, not a direct collaboration tool for content creation. Microsoft Delve is a content discovery tool that surfaces relevant documents and information to users, rather than being used for creating new items like tasks or surveys.

References

Microsoft Learn. (n.d.). Introduction to Microsoft Forms. Microsoft Docs. Retrieved September 9, 2025.

Reference Details: In the "What is Microsoft Forms?" section, the documentation states, "With Microsoft Forms you can create surveys, quizzes, and polls, and easily see results as they come in... invite others to respond to it using almost any web browser or mobile device."

Microsoft Support. (n.d.). Microsoft Planner help & learning. Microsoft. Retrieved September 9, 2025.

Reference Details: The "Planner Quick Start" guide explicitly states, "Microsoft Planner is a Microsoft 365 service that lets you create boards and add your team's tasks and assignments. On your Planner board, you can sort your tasks into columns (or buckets). Buckets can indicate stages of work, days of the week, sprints, and more."

Question 8

A company is evaluating Microsoft 365. You need to identify the collaboration features of OneDrive. What are two collaboration features of OneDrive? Each correct answer presents part of the solution.

Options
A:

A. Inviting external users to an online meeting.

B:

B. Chatting with multiple users.

C:

C. Coauthoring of supported documents.

D:

D. Sharing files with external users.

Show Answer
Correct Answer:
C. Coauthoring of supported documents., D. Sharing files with external users.
Explanation
OneDrive is a core component of Microsoft 365, providing cloud storage and collaboration capabilities. Its primary collaboration features include the ability to share files and folders with individuals both inside and outside the organization, with granular control over permissions. Furthermore, when Office documents are stored in OneDrive, it enables coauthoring (or real-time collaboration), allowing multiple users to edit a document simultaneously. Changes are synced and visible to all collaborators in real-time, streamlining the workflow and enhancing productivity.
Why Incorrect Options are Wrong

A. Inviting external users to an online meeting is a primary function of Microsoft Teams and Outlook, not a native feature of OneDrive.

B. Chatting with multiple users is a core capability of Microsoft Teams, which serves as the central hub for communication and teamwork.

References

1. Microsoft Learn. (2024). Describe collaboration solutions in Microsoft 365 - MS-900. Under the section "Explore OneDrive," it states, "Key features include... Sharing files and folders inside and outside the organization... Real-time coauthoring in Microsoft Office apps." This directly supports options C and D.

2. Microsoft Support. (n.d.). Collaborate in OneDrive. Retrieved from the official Microsoft Support site. The document states, "With your files in OneDrive, you can share them with others, control who can view or edit them, and work together on them at the same time." This confirms both sharing (D) and coauthoring (C).

3. Microsoft Learn. (2024). What is Microsoft Teams?. Under the "Overview" section, it describes Teams as the hub for teamwork that integrates "chat, meetings, calling, and files." This confirms that meetings (A) and chat (B) are features of Microsoft Teams.

Question 9

A company implements Microsoft 365. The company needs todeploy Microsoft 36S Apps tot enterprise to their client computers from the cloud. You need to identify the solution that meets the requirement. Which solution should you select?
Options
A: Microsoft Remote Connectivity Analyzer
B: Office Deployment Tool
C: Windows Update
D: Microsoft PastTrade
Show Answer
Correct Answer:
Office Deployment Tool
Explanation
The Office Deployment Tool (ODT) is a command-line utility that administrators use to download and deploy Microsoft 365 Apps to client computers. It provides precise control over the installation process through a configuration.xml file. This allows an enterprise to define which applications and languages to install, how they should be updated, and from where the installation files are sourced, such as directly from the Office Content Delivery Network (CDN) in the cloud. This tool is the standard method for customized enterprise deployments of Microsoft 365 Apps.
Why Incorrect Options are Wrong

A. Microsoft Remote Connectivity Analyzer is a web-based tool used for troubleshooting connectivity issues with Microsoft 365 services, not for deploying software.

C. Windows Update is primarily used for deploying updates to the Windows operating system and other Microsoft components, not for the initial deployment of the Microsoft 365 Apps suite.

D. Microsoft FastTrack is a customer success service that provides guidance and resources for onboarding to Microsoft 365; it is not a software deployment tool itself.

References

1. Microsoft Docs. (2023). Overview of the Office Deployment Tool. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/deployoffice/overview-office-deployment-tool. In the introduction, it states, "The Office Deployment Tool (ODT) is a command-line tool that you can use to download and deploy Microsoft 365 Apps to your client computers."

2. Microsoft Docs. (2023). Deploy Microsoft 365 Apps from the cloud. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/deployoffice/deploy-microsoft-365-apps-from-the-cloud. The article's first step under "Step 1: Create the configuration file" explicitly details using the Office Deployment Tool for this purpose.

3. Microsoft Learn. (2024). MS-900: Describe deployment and release models for Windows-as-a-Service and Microsoft 365 Apps. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/training/modules/describe-deployment-release-models-windows-as-service-microsoft-365-apps/3-describe-deployment-process-for-microsoft-365-apps. This module identifies the Office Deployment Tool as a key method for deploying Microsoft 365 Apps in an enterprise environment.

Question 10

You are an IT director that is evaluating the capabilities of Microsoft Viva Insights. You need to describe the capabilities to the key stakeholders. Which three capabilities describe VivaInsights? Each correct answer presents a complete solution.

Options
A:

A. Insights integrates directly with Microsoft Bookings.

B:

B. Microsoft Outlook includes an add-in for Viva Insights.

C:

C. A web-based dashboard is available for Viva Insights.

D:

D. You can add Viva insights as an app in Microsoft Teams.

E:

E. Viva Insights integrates directly with Microsoft Yammer.

Show Answer
Correct Answer:
B. Microsoft Outlook includes an add-in for Viva Insights., C. A web-based dashboard is available for Viva Insights., D. You can add Viva insights as an app in Microsoft Teams.
Explanation
Microsoft Viva Insights is designed to improve productivity and well-being by providing data-driven recommendations. It is accessible to users through multiple endpoints within the Microsoft 365 ecosystem. Key access points include the Viva Insights app, which can be pinned in Microsoft Teams for an integrated experience, an add-in for Microsoft Outlook that provides insights directly within the user's workflow, and a comprehensive web-based dashboard for a detailed view of personal, manager, or leader insights. These three interfaces (Teams, Outlook, and Web) represent the primary ways users interact with the service.
Why Incorrect Options are Wrong

A. Viva Insights helps users book focus time on their personal calendar, but it does not have a direct integration with the Microsoft Bookings app, which is designed for scheduling customer appointments.

E. While Viva Engage (built on Yammer) is part of the Microsoft Viva suite, Viva Insights does not directly integrate with or analyze Yammer data for its core productivity and well-being metrics.

References

1. Microsoft Learn. (2023). Personal insights in Microsoft Viva. This document explicitly states the different ways to access Viva Insights: "You can see personal insights through the Viva Insights app in Microsoft Teams and on the web...Briefing emails and Viva digest emails in Outlook, and the Viva Insights Outlook add-in." This single source confirms the correctness of options B, C, and D.

Reference: Introduction section, Paragraph 2.

2. Microsoft Learn. (2023). Data sources for Microsoft Viva Insights. This page details the data used for analysis, which includes Microsoft 365 email, calendar data, and Teams chat and call activity. It makes no mention of Yammer as a data source, confirming that option E is incorrect.

Reference: "Data sources" section.

3. Microsoft Learn. (2023). Focus plan for Viva Insights. This documentation describes how the focus plan feature automatically books time in a user's calendar. The functionality is self-contained and does not mention any integration with the separate Microsoft Bookings application, making option A incorrect.

Reference: "How it works" section, Paragraph 1.

Question 11

HOTSPOT A company is considering migrating to cloud based infrastructure andsolutions. instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:


Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_222_img_2.jpg

Statement 1 is TRUE. A private cloud is defined as cloud computing resources used exclusively by a single business or organization. When a company owns, operates, and maintains its own datacenter hardware to provide virtualized services to its internal users, it is operating an on-premises private cloud. The key characteristic is the dedicated, non-shared nature of the infrastructure.


Statement 2 is FALSE. This scenario describes a hybrid cloud. A hybrid cloud architecture combines a private cloud (the company's on-premises servers) with one or more public cloud services (Azure Backup). Since a public cloud service is being used to extend the capabilities of the private infrastructure, the entire solution is hybrid, not purely private.


Statement 3 is TRUE. A public cloud consists of services offered by a third-party provider over the public internet, making them available to anyone who wants to use or purchase them. Azure Virtual Desktop is a service delivered entirely on Microsoft's Azure infrastructure, which is a public cloud platform. Users consume this as a service without managing the underlying hardware.


References

National Institute of Standards and Technology (NIST). (2011). The NIST Definition of Cloud Computing (Special Publication 800-145). U.S. Department of Commerce.

Section: 2. Deployment Models: "Private cloud: The cloud infrastructure is provisioned for exclusive use by a single organization... It may be owned, managed, and operated by the organization... or a third party and it may exist on or off premises."

Section: 2. Deployment Models: "Public cloud: The cloud infrastructure is provisioned for open use by the general public... It is owned, managed, and operated by a business, academic, or government organization..."

Section: 2. Deployment Models: "Hybrid cloud: The cloud infrastructure is a composition of two or more distinct cloud infrastructures (private, community, or public) that remain unique entities but are bound together by standardized or proprietary technology..."

Microsoft Azure Documentation. What are public, private, and hybrid clouds? Microsoft.

This document explicitly defines a public cloud as owned by a cloud provider, a private cloud as resources used exclusively by one organization, and a hybrid cloud as an environment that combines public and private clouds.

Microsoft Azure Documentation. What is Azure Virtual Desktop? Microsoft.

This page describes Azure Virtual Desktop as a "desktop and app virtualization service that runs on the cloud," confirming its nature as a public cloud service provided through Azure.

Question 12

HOTSPOT Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:
Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_223_img_1.jpg

With cloud-only identities, Azure Active Directory (Azure AD) Connect synchronizes accounts from an on-premises Active Directory Domain Services (AD DS) domain to Microsoft 365.


This statement is No (False). Cloud-only identities are created and managed exclusively within Azure AD (now Microsoft Entra ID). They have no link to an on-premises Active Directory. The tool Azure AD Connect is specifically designed to synchronize identities from an on-premises AD DS to Azure AD, which creates hybrid identities, not cloud-only ones.


With hybrid identities, user accounts in Azure AD can have a password hash of the user account in an on-premises AD DS domain.


This statement is Yes (True). A primary feature of a hybrid identity model is Password Hash Synchronization (PHS), which is enabled via Azure AD Connect. This method synchronizes a hash of the user's on-premises AD password hash into Azure AD. This allows users to use the same password for both their on-premises and cloud resources, with authentication for cloud services handled by Azure AD.

References

Microsoft Entra Documentation. (2023). What is hybrid identity with Microsoft Entra ID? Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/entra/identity/hybrid/whatis-hybrid-identity

This document states: "A hybrid identity is a user identity that is created in an on-premises Active Directory, and then it is shared to the cloud... With password hash synchronization, the hash of the user's on-premises AD password is synchronized to Microsoft Entra ID." This directly supports the "Yes" answer for the second statement and clarifies that synchronization is for hybrid, not cloud-only, identities.

Microsoft Entra Documentation. (2023). What is password hash synchronization with Microsoft Entra ID? Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-phs

Under the section "How password hash synchronization works," the document explains: "Azure AD Connect synchronizes a hash, of the hash, of a user's password from an on-premises Active Directory instance to a cloud-based Microsoft Entra instance." This confirms the mechanism described in the second statement.

Microsoft Entra Documentation. (2024). Add or delete users. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/entra/fundamentals/add-users

This article details the process for creating cloud-only users directly in Microsoft Entra ID via the portal. The process does not involve any on-premises synchronization or the use of Azure AD Connect, which supports the "No" answer for the first statement.

Question 13

A company is evaluating the services provided in Microsoft 365. You need to ensure the servke meets the following requirements:

โ€ข Allows users to upload corporate videos to a centralizedlocation

โ€ข Allows users to watch trending and most popular corporate videos.

You need to recommend a Microsoft 365 service that meets the requirements. Which service should you use?

Options
A:

A. Microsoft Teams

B:

B. Microsoft Stream

C:

C. MicrosoftOneDrive

D:

D. SharePoint Online

Show Answer
Correct Answer:
B. Microsoft Stream
Explanation
Microsoft Stream is the enterprise video service within Microsoft 365, specifically designed to meet the requirements of the scenario. It provides a secure, centralized portal for users to upload, view, and share corporate videos. A key feature of the Stream service is its ability to help users discover relevant content through personalized homepages that showcase trending videos, popular channels, and other recommendations. This directly aligns with the need for users to watch trending and popular corporate videos from a central location.
Why Incorrect Options are Wrong

A. Microsoft Teams is a collaboration hub for chat, meetings, and file sharing, not a dedicated video portal with features for discovering trending videos across the organization.

C. Microsoft OneDrive is a personal cloud storage service for individual users' files and is not intended as a centralized repository for corporate-wide video content.

D. SharePoint Online is a platform for document management and team sites. While it serves as the storage foundation for Stream, it is not the specific video portal service that provides the user-facing features like "trending videos."

References

1. Microsoft Learn. (2023). What is Microsoft Stream (Classic)? "Microsoft Stream is an Enterprise Video service where people in your organization can upload, view, organize and share videos securely... Watch trending videos for your company."

2. Microsoft Learn. (2024). Describe the capabilities of Microsoft Stream - MS-900. "Stream is the intelligent video service in Microsoft 365... It's the service for uploading, sharing, and managing videos."

3. Microsoft 365. (2024). Microsoft Stream Service Description. Section: "Feature availability". The document outlines features such as "Company-wide video portal" and "Find and discover videos," which are central to the question's requirements.

Question 14

A company plansto send surveys and polls to their customers. The company needs to view responses and collect feedback from the surveys and polls You need to identify which product meets the requirements. Which product should you select?
Options
A: Microsoft Forms
B: MicrosoftTeams
C: SharePoint
D: Microsoft 365 Apps for enterprise
Show Answer
Correct Answer:
Microsoft Forms
Explanation
Microsoft Forms is the dedicated application within the Microsoft 365 ecosystem designed specifically for creating surveys, quizzes, and polls. It allows users to easily build forms, share them with anyone (including external customers), and view incoming responses in real-time. The service includes built-in analytics to visualize data and the option to export results to Microsoft Excel for more in-depth analysis. This directly fulfills the company's requirement to create, distribute, and analyze customer surveys and polls.
Why Incorrect Options are Wrong

B. Microsoft Teams: Microsoft Teams is a collaboration hub for chat, meetings, and file sharing. While it can integrate polls via the Forms app, it is not the primary tool for creating and managing comprehensive external surveys.

C. SharePoint: SharePoint is a platform for building intranets and managing content and documents. It is not designed as a primary tool for creating and distributing surveys to external customers.

D. Microsoft 365 Apps for enterprise: This is a suite of Office productivity applications (like Word, Excel, PowerPoint). It does not include a standalone application specifically for creating and analyzing surveys and polls.

References

1. Microsoft Learn. (2023). Introduction to Microsoft Forms. "With Microsoft Forms, you can create surveys, quizzes, and polls, and easily see results as they come in." Retrieved from https://learn.microsoft.com/en-us/forms-pro/introduction-microsoft-forms

2. Microsoft Learn. (2024). What is Microsoft Teams?. "Microsoft Teams is the hub for teamwork in Microsoft 365 that integrates the people, content, and tools your team needs to be more engaged and effective." Retrieved from https://learn.microsoft.com/en-us/microsoftteams/teams-overview

3. Microsoft Learn. (2024). Introduction to SharePoint in Microsoft 365. "SharePoint in Microsoft 365 is a cloud-based service... that helps organizations share and manage content, knowledge, and applications." Retrieved from https://learn.microsoft.com/en-us/sharepoint/introduction

4. Microsoft Learn. (2024). About Microsoft 365 Apps in the enterprise. "Microsoft 365 Apps is a version of Office that's available through many Microsoft 365... plans. It includes the applications that you're familiar with, including Access, Excel, OneDrive, OneNote, Outlook, PowerPoint, Publisher, Skype for Business, Teams, and Word." Retrieved from https://learn.microsoft.com/en-us/deployoffice/about-microsoft-365-apps

Question 15

DRAG DROP A furniture distribution company uses Microsoft 365. The company would like to optimize employee interaction In Microsoft Teams company wide You need to determine a solution. MS-900 exam question

Show Answer
Correct Answer:

REQUIREMENT 1: VIVA INSIGHTS


REQUIREMENT 2: SUPPLY CHAIN INSIGHTS

Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_224_img_2.jpg

Viva Insights is the correct solution for the first requirement because it is specifically designed to provide personal analytics about an individual's work patterns. It includes metrics on meeting habits, such as the percentage of meetings joined on time and the rate of multitasking (e.g., reading or sending emails) during meetings. This directly addresses the need to determine how individuals are engaging with their scheduled meetings.


Supply Chain insights, part of the Microsoft Dynamics 365 suite, is the appropriate choice for the second requirement. Its core function is to provide business leaders with data-driven visibility and analytics into supply chain operations. This empowers them to address critical operational questions and make informed decisions, which aligns perfectly with the stated requirement.

References

Microsoft Viva Insights Documentation:

According to the official Microsoft Learn documentation, Viva Insights helps people and businesses thrive with data-driven, privacy-protected insights. The Personal insights feature specifically provides information about an individual's meeting habits.

Source: Microsoft Learn, "Meeting habits in Viva Insights." The documentation details how Viva Insights tracks metrics like "Joined on time" and "During-meeting multitasking rate."

Microsoft Dynamics 365 Supply Chain Insights Documentation:

The official documentation states that Dynamics 365 Supply Chain Insights enables organizations to proactively predict and manage supply chain disruptions. It provides analytics to empower business leaders.

Source: Microsoft Learn, "Dynamics 365 Supply Chain Insights overview." This document explicitly outlines the solution's purpose as providing "visibility of the supply chain" and "supply chain analytics" for leaders.

Question 16

DRAG DROP A company is evaluating Microsoft Viva. You need to recommend the appropriate Microsoft Viva modules. Which module should you use? To answer, drag the appropriate modules to the correct features. Each module may be used once, more than once, of not at all. You may need to drag the split bar between panes or scroll to view content. MS-900 exam question

Show Answer
Correct Answer:
Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_225_img_2.jpg

Viva Insights helps improve productivity and well-being through data-driven, privacy-protected insights. It combines the capabilities of Microsoft Workplace Analytics, MyAnalytics, and Glint into a unified app within Microsoft Teams, providing insights for individuals, managers, and leaders.


Viva Topics applies AI to automatically organize content and expertise across your organization, creating a knowledge network. It surfaces this information as topic pages and cards within Microsoft 365 apps like Teams and SharePoint, making it easy for users to find information and experts.


Viva Connections serves as a curated, company-branded employee experience that centralizes relevant news, conversations, and resources. It acts as a customizable digital gateway within Microsoft Teams, fostering a sense of connection and community.

References

Microsoft Viva Insights Documentation: "Microsoft Viva Insights provides data-driven, privacy-protected insights and recommendations to improve productivity and wellbeing. It brings together the capabilities of Microsoft Workplace Analytics, MyAnalytics, and Glint."

Source: Microsoft Learn, "Viva Insights in Microsoft 365," Introduction.

Microsoft Viva Topics Documentation: "Viva Topics uses Microsoft AI technology, Microsoft 365, and Microsoft Graph to bring knowledge to your users in the Microsoft 365 apps they use every day... Viva Topics helps to address a key business issue: providing the right information to the right person at the right time."

Source: Microsoft Learn, "Microsoft Viva Topics overview," How Viva Topics displays information to users.

Microsoft Viva Connections Documentation: "Microsoft Viva Connections is your gateway to a modern employee experience. The experience is a customizable, company-branded app in Microsoft Teams that gives everyone a personalized destination to discover relevant news, conversations, and the tools they need to succeed."

Source: Microsoft Learn, "Overview of Viva Connections," What is Viva Connections.

Question 17

HOTSPOT Your company uses Microsoft 365 services. instructions: For each of the following statements, select Yes if the statement is true Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:
Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_226_img_1.jpg

You can read, like, and reply to Microsoft Yammer conversations from a Microsoft Outlook inbox.

This statement is true. Microsoft 365 supports interactive Yammer emails within Outlook. When you receive a notification for a Yammer conversation, you can view the entire thread, like posts, and reply directly from your Outlook inbox without having to switch to the Yammer application. This integration streamlines communication and keeps users engaged from their primary email client.


You can add a Microsoft Stream tab to a Microsoft Teams channel.

This statement is true. Microsoft Teams allows users to add tabs to channels to provide quick access to apps and services. You can add a tab that points to a specific Microsoft Stream (both Classic and on SharePoint) video, a playlist, or an entire channel, making it easy for team members to view and discuss video content directly within the Teams interface.


You can book meetings and reject conflicting meetings by using a Microsoft SharePoint site calendar.

This statement is false. A Microsoft SharePoint calendar is designed to display team events and deadlines. While you can add events to it, it does not have the robust scheduling capabilities of Microsoft Outlook, such as inviting attendees, checking their availability across the organization, and automatically detecting or rejecting conflicting meetings. These are core functionalities of Microsoft Exchange Online and the Outlook calendar, not a native SharePoint calendar.

References

Microsoft. (n.d.). Interact with Yammer conversations in your Outlook inbox. Microsoft Support. Retrieved from https://support.microsoft.com/en-us/office/interact-with-yammer-conversations-in-your-outlook-inbox-0394c8b8-4592-4217-b741-6153a4b673de. This document explicitly states, "Like and reply to Yammer conversations without leaving your Outlook inbox."

Microsoft. (n.d.). Add and use a Stream tab in Teams. Microsoft Learn. Retrieved from https://learn.microsoft.com/en-us/stream/embed-video-microsoft-teams. This documentation details the process: "Add a tab for a Stream channel or video to a Microsoft Teams channel... This allows you to easily collaborate with your team around videos."

Microsoft. (n.d.). Create and set up a list. Microsoft Support. (See section on Calendar list). A SharePoint calendar is a type of list with a special view. Its documentation focuses on adding events for team visibility, not on the complex scheduling and conflict-resolution features found in Outlook/Exchange. It lacks the "free/busy" lookup and automated rejection functionalities.

Question 18

A company is considering using Microsoft cloud services. You need to determine which mobility features Microsoft Intune supports Which Three features doesMicrosoft Intune support? Each correct answer presents a complete solution.

Options
A:

A. It provides mobile device management (MDM) capabilities.

B:

B. It upgrades operating systems on mobile phone devices.

C:

C. It deploysoperating systems to mobile phone devices.

D:

D. It deploys applications to mobile phone devices.

E:

E. It provides mobile application management (MAM) capabilities

Show Answer
Correct Answer:
A. It provides mobile device management (MDM) capabilities., D. It deploys applications to mobile phone devices., E. It provides mobile application management (MAM) capabilities
Explanation
Microsoft Intune is a cloud-based unified endpoint management (UEM) solution. Its core mobility features revolve around managing devices and applications. It provides Mobile Device Management (MDM) to enroll and manage the settings, security, and compliance of corporate and personal devices. A key function is deploying applications to these devices, including store apps, web apps, and line-of-business apps. Intune also offers Mobile Application Management (MAM), which protects organizational data at the application level, even on unmanaged personal devices. These three capabilitiesโ€”MDM, app deployment, and MAMโ€”are fundamental to Intune's role in securing and managing mobile endpoints.
Why Incorrect Options are Wrong

B. Intune manages OS update policies to control when updates are installed, but it does not perform the operating system upgrade itself.

C. Intune does not deploy base operating systems to mobile phones; this is handled by the device manufacturer or through other specialized tools not applicable to mobile phones.

References

1. Microsoft Learn. "What is Microsoft Intune?". Microsoft Docs. "Microsoft Intune is a cloud-based endpoint management solution. It manages user access to organizational resources and simplifies app and device management... You can manage devices using an MDM approach... You can manage apps using a MAM approach... Some key tasks of any MDM or MAM solution are deploying or assigning apps to users and devices."

2. Microsoft Learn. "App management overview". Microsoft Docs. "Microsoft Intune enables you to manage the client apps that your company's members use... One of the app management capabilities of Intune is to add and assign apps to devices and users."

3. Microsoft Learn. "Manage iOS/iPadOS software update policies in Intune". Microsoft Docs. "You can use Microsoft Intune to manage iOS/iPadOS software updates for devices enrolled as supervised devices... With policies for software updates, you can... Force devices to automatically install an update." (This confirms Intune manages policies for updates, not the OS deployment or upgrade process itself).

Question 19

A company is evaluating Microsoft 365. You need to determine me deployment methods for Microsoft 365 Apps Which two tools can you use? Each correct answer presents a complete solution.

Options
A:

A. Office Customization Tool

B:

B. Microsoft Deployment Toolkit

C:

C. Office Deployment Tool

D:

D. Microsoft Support and Recovery Assistant

Show Answer
Correct Answer:
B. Microsoft Deployment Toolkit, C. Office Deployment Tool
Explanation
The two primary tools provided by Microsoft for the managed deployment of Microsoft 365 Apps in an enterprise environment are the Office Deployment Tool (ODT) and the Microsoft Deployment Toolkit (MDT). The Office Deployment Tool (ODT) is a command-line utility specifically designed to download and deploy Microsoft 365 Apps. It uses a configuration XML file to control the installation, specifying which products, languages, and update channels to install. The Microsoft Deployment Toolkit (MDT) is a more comprehensive solution for automating the deployment of operating systems and applications. It can be configured to include Microsoft 365 Apps as part of a new computer imaging process or as a standalone application deployment to existing computers.
Why Incorrect Options are Wrong

A. Office Customization Tool: This is a web-based tool used to create the configuration.xml file for the Office Deployment Tool. It defines what to deploy, but does not perform the deployment itself.

D. Microsoft Support and Recovery Assistant: This is a diagnostic tool used to troubleshoot and fix installation or activation problems for individual users, not for performing initial, managed deployments across an organization.

References

1. Microsoft Documentation, "Overview of the Office Deployment Tool": States, "The Office Deployment Tool (ODT) is a command-line tool that you can use to download and deploy Microsoft 365 Apps to your client computers." This directly supports the selection of the Office Deployment Tool (C).

2. Microsoft Documentation, "Deploy Microsoft 365 Apps with the Microsoft Deployment Toolkit": Explains, "You can deploy Microsoft 365 Apps as part of an operating system deployment by using the Microsoft Deployment Toolkit (MDT)." This directly supports the selection of the Microsoft Deployment Toolkit (B).

3. Microsoft Documentation, "Overview of the Office Customization Tool": Clarifies the tool's purpose: "The Office Customization Tool creates the configuration files that are used to deploy Office... The configuration files that you create with the Office Customization Tool work with the Office Deployment Tool..." This confirms that the OCT is a configuration utility, not the deployment executor (A).

4. Microsoft Documentation, "About the Microsoft Support and Recovery Assistant": Describes the tool's function: "The Microsoft Support and Recovery Assistant works by running tests to figure out what's wrong and offers the best solution for the identified problem." This confirms its role as a troubleshooting tool, not a deployment tool (D).

Question 20

DRAG DROP A company is migrating to Microsoft 365. The company is evaluating collaboration integrations in Microsoft Teams. You need to recommend the Microsoft Power Platformintegration that provides the appropnate feature. Which integrations should you recommend? To answer, drag the appropriate integrations to the correct features. Each integration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. MS-900 exam question

Show Answer
Correct Answer:

USERS CAN CREATE CHATBOTS WITHOUT WRITING ANY CODE AND PUBLISH THE BOTS IN MICROSOFT TEAMS: POWER VIRTUAL AGENTS


USERS CAN CREATE AND REFERENCE APPS BY USING TABS IN MICROSOFT TEAMS: POWER APPS


USERS CAN CREATE FLOWS TO AUTOMATE TASKS THAT CAN BE TRIGGERED FROM MICROSOFT TEAMS: POWER AUTOMATE


Explanation

The correct integrations align with the core functions of each Power Platform component within the Microsoft Teams environment.


Power Virtual Agents is Microsoft's no-code/low-code platform for creating chatbots. These bots can be built and deployed directly within the Power Virtual Agents app in Teams for users to interact with.


Power Apps allows for the creation of custom business applications. These apps can be embedded as a tab in a Teams channel, making them easily accessible to team members.


Power Automate is used to create automated workflows, known as "flows." The Power Automate app in Teams allows users to build flows that are triggered by events in Teams, such as a new message being posted.

References

Microsoft Learn, Power Virtual Agents documentation: "You can create and manage bots in Microsoft Teams through the Power Virtual Agents app... Microsoft Power Virtual Agents empowers teams to easily create powerful bots by using a guided, no-code graphical interface..."

Source: Microsoft Docs, "Power Virtual Agents app in Microsoft Teams," Overview section.

Microsoft Learn, Power Apps documentation: "With the Power Apps app in Teams, you can build low-code apps... You can add your apps built in Teams to the channels in other teams... you add the app as a tab in a Teams channel."

Source: Microsoft Docs, "Embed canvas apps as tab apps in Teams," Prerequisites section.

Microsoft Learn, Power Automate documentation: "You can use the Power Automate app to create and manage flows from within Microsoft Teams. You can create flows from a template or from scratch. You can create flows that are triggered by events in Teams, such as when a new message is posted to a channel..."

Source: Microsoft Docs, "Create flows in Microsoft Teams," Introduction section.

Question 21

A company uses Microsoft 365. You need to identity new Microsoft 365 features that have released to General Availability in the last month Which tool should you choose?
Options
A: Azure portal
B: Microsoft 365 Roadmap
C: SharePoint Online landingpage
D: Security & Compliance Center
Show Answer
Correct Answer:
Microsoft 365 Roadmap
Explanation
The Microsoft 365 Roadmap is the official, authoritative source for tracking updates and new features for Microsoft 365 services. It provides detailed information on features that are in development, currently rolling out, and have been launched (reached General Availability). The roadmap can be filtered by status, product, and platform, allowing users to easily identify features that have been released within a specific timeframe, such as the last month. This makes it the precise tool for the task described.
Why Incorrect Options are Wrong

A. Azure portal: This portal is used for managing Azure services and resources. It is not the primary tool for tracking feature release information for the Microsoft 365 suite.

C. SharePoint Online landing page: This page is specific to the SharePoint Online service and would not provide a comprehensive view of new features across all of Microsoft 365.

D. Security & Compliance Center: This is a management portal (now the Microsoft 365 Defender and Microsoft Purview portals) for configuring security and compliance policies, not for tracking product feature releases.

References

1. Microsoft Learn. (2023). Describe the Microsoft 365 roadmap. MS-900: Describe service and support in Microsoft 365. "The Microsoft 365 Roadmap is the official site for Microsoft 365 updates. It lists updates that are in development, rolling out, and have been launched."

2. Microsoft. (2023). Microsoft 365 Roadmap. The official site allows filtering by status, including "Launched," which corresponds to General Availability. Retrieved from https://www.microsoft.com/en-us/microsoft-365/roadmap.

Question 22

HOTSPOT A company uses Microsoft 365. instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:
Explanation

https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/MS-900/page_228_img_2.jpg

The Microsoft 365 Roadmap is a public-facing portal designed to communicate upcoming features and updates.


Release Dates: The roadmap provides estimated release timelines for features, typically indicating the month and year for General Availability (GA). However, it does not provide tenant-specific release dates or specify the exact day. The actual rollout to a specific company's tenant can vary based on their release track (e.g., Targeted Release vs. Standard Release) and other factors. More targeted information is available in the Microsoft 365 admin center's Message Center.


Feedback Mechanism: The roadmap portal's primary function is to inform customers about what is in development and what is being launched. It is not a feedback collection tool. Microsoft gathers customer feedback through dedicated channels, primarily the Microsoft Feedback portal and in-product feedback options.

References

Microsoft. (n.d.). Microsoft 365 Roadmap. Microsoft. Retrieved from https://www.microsoft.com/en-us/microsoft-365/roadmap

Relevance: The official roadmap site demonstrates that release dates are provided by month and year (e.g., "September 2025") and are categorized by status such as "In development," "Rolling out," and "Launched." It does not show day-specific or tenant-specific information.

Microsoft Learn. (2023, September 15). How to give feedback on Microsoft 365.

Relevance: This document outlines the official channels for providing feedback, stating, "The Feedback portal is the official tool for Microsoft to listen to its customers." This confirms that the Roadmap portal is not the designated feedback mechanism.

Microsoft Learn. (2024, August 29). Set up the release option in the Microsoft 365 admin center.

Relevance: This documentation explains the difference between Standard and Targeted releases. It states, "With Targeted release, users...get the latest updates first. The rest of the organization gets the updates at a later date, in the Standard release." This supports the conclusion that the public roadmap cannot provide a single, specific date for an individual company's tenant, as the timing depends on these settings.

Question 23

HOTSPOT A company is evaluating threat protection in Microsoft 365. instructions: For each of the following statements, select Yes if the statement is true Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:
MICROSOFT DEFENDER FOR OFFICE 365 CAN PROTECT AGAINST MALICIOUS LINKS IN EMAIL AND OFFICE FILES: YES MICROSOFT DEFENDER FOR IDENTITY CAN IDENTIFY THREATS FROM ON-PREMISES ACTIVE DIRECTORY SIGNALS: YES MICROSOFT DEFENDER FOR ENDPOINT CAN ISOLATE AN INFECTED DEVICE FROM THE NETWORK: YES
Explanation
1. Microsoft Defender for Office 365: The Safe Links feature, a component of Defender for Office 365, provides time-of-click URL scanning and rewriting for inbound email messages and within Office documents. This protects users from accessing malicious websites. 2. Microsoft Defender for Identity: This solution is specifically designed to leverage signals from on-premises Active Directory Domain Services (AD DS). It uses sensors installed on domain controllers to monitor traffic and security events to detect advanced threats, compromised identities, and malicious insider actions. 3. Microsoft Defender for Endpoint: A core endpoint detection and response (EDR) capability of Defender for Endpoint is the ability to take response actions on devices. This includes isolating a device from the network to contain a threat and prevent lateral movement, while still allowing the device to communicate with the Defender for Endpoint service for investigation.
References

1. Microsoft Learn. (2024). Safe Links in Microsoft Defender for Office 365. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/safe-links-about. (Specifically, the "Safe Links settings for email messages" and "Safe Links settings for Microsoft Teams, and Office apps" sections).

2. Microsoft Learn. (2024). What is Microsoft Defender for Identity?. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/defender-for-identity/what-is. (Specifically, the introductory paragraph stating, "Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals...").

3. Microsoft Learn. (2024). Take response actions on a device in Microsoft Defender for Endpoint. Microsoft Docs. Retrieved from https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/respond-machine-alerts. (Specifically, the section titled "Isolate devices from the network").

Question 24

A company uses Microsoft 365. The company must identify which cloud apps and services are used in the company You need to identify which service can be used to find this information. Which service should you use?
Options
A: Azure Active Directory
B: Microsoft Cloud App Security
C: Azure Security Center
D: Microsoft Defender for Office 365
Show Answer
Correct Answer:
Microsoft Cloud App Security
Explanation
Microsoft Cloud App Security (now part of Microsoft Defender for Cloud Apps) is a Cloud Access Security Broker (CASB). A primary function of a CASB is to discover and provide visibility into cloud app usage across an organization, a process often referred to as "Shadow IT" discovery. It analyzes traffic logs from network devices like firewalls and proxies to identify which cloud applications and services employees are using, assess their risk levels, and enforce security policies. This directly addresses the company's need to identify all cloud apps in use.
Why Incorrect Options are Wrong

A. Azure Active Directory: This is an identity and access management service. It manages access to known and registered applications but does not discover unknown or unsanctioned cloud app usage.

C. Azure Security Center: Now Microsoft Defender for Cloud, this service focuses on securing cloud infrastructure workloads (like virtual machines and databases), not on discovering end-user SaaS application usage.

D. Microsoft Defender for Office 365: This service protects against threats within the Microsoft 365 ecosystem (e.g., email, SharePoint, Teams) but does not discover the usage of external, third-party cloud services.

References

1. Microsoft Docs, "What is Microsoft Defender for Cloud Apps?"

Reference: Under the "What is Defender for Cloud Apps?" section, the first bullet point states its function is to "Identify and control the use of Shadow IT: Identify the cloud apps, IaaS, and PaaS services used by your organization. Investigate usage patterns, assess the risk levels and business readiness of more than 31,000 SaaS apps against more than 80 risks." This directly confirms its role in discovering cloud app usage.

2. Microsoft Learn, "MS-900: Describe the capabilities of Microsoft security solutions"

Reference: In the module "Describe Microsoft 365 security and compliance capabilities," the unit on Microsoft Defender for Cloud Apps explains: "Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB)... It provides rich visibility, control over data travel, and sophisticated analytics to identify and combat cyberthreats across all your Microsoft and third-party cloud services." This highlights its function of providing visibility across all cloud services.

3. Microsoft Docs, "Discover and assess cloud apps (Shadow IT)"

Reference: The introductory paragraph states, "Cloud Discovery analyzes your traffic logs against the Microsoft Defender for Cloud Apps catalog of over 31,000 cloud apps. The apps are ranked and scored based on more than 90 risk factors to provide you with ongoing visibility into cloud use, Shadow IT, and the risk Shadow IT poses to your organization." This details the exact mechanism used to fulfill the requirement in the question.

Question 25

HOTSPOT A hospital is evaluating digital transformation solutions for their workforce. Select the answer that correctly completes the sentence. MS-900 exam question

Show Answer
Correct Answer:

FRONTLINE

Explanation

Microsoft defines Frontline Workers as employees whose primary role involves direct engagement with customers or the general public. These individuals are the face of an organization, providing services, support, or selling products. This category includes roles such as retail associates, hospital staff, field technicians, and manufacturing floor workers. Microsoft offers specific solutions, like Microsoft 365 F-series plans, tailored to their task-oriented and often mobile work styles. The other options are incorrect; backoffice refers to administrative roles without customer contact, hybrid describes a work location model, and Microsoft Teams is a software product.

References

Microsoft. "Microsoft 365 for frontline workers." Microsoft Learn, May 30, 2024. In the "What are frontline workers?" section, it states, "Frontline workers are employees whose primary function is to work directly with customers or the general public..."

Microsoft. "Empower frontline workers with Microsoft 365." Microsoft 365 Official Product Page. Accessed September 9, 2025. This page describes frontline workers as "...people worldwide who work in service- or task-oriented roles across industries such as retail, hospitality, manufacturing, and healthcare."

Question 26

A company isplanning to implement Microsoft 365. The company has not purchased licenses from Microsoft. You need to recommend a licensing solution. Which licensing solution should you recommend?
Options
A: Add-on user subscription licenses
B: Full user subscription licenses
C: From Software Assurance (SA) user subscription licenses
D: Step-up user subscription licenses
Show Answer
Correct Answer:
Full user subscription licenses
Explanation
Since the company has not purchased any licenses from Microsoft, it needs to acquire base licenses for its users. A "Full user subscription license" (USL) is the standard license required for a new customer or a user who does not have a pre-existing qualifying license. This license provides the complete set of rights for the chosen Microsoft 365 plan without any prerequisites. The other license types are meant for customers with existing agreements or subscriptions.
Why Incorrect Options are Wrong

A. Add-on user subscription licenses are used to add capabilities to an existing base subscription, which this new company does not have.

C. "From Software Assurance (SA)" licenses are for customers transitioning from on-premises software covered by an active SA agreement.

D. Step-up user subscription licenses allow a customer to upgrade from one existing subscription plan to a higher-tier plan (e.g., E3 to E5).

References

1. Microsoft Product Terms. (Accessed July 2024). In the "Universal License Terms" section, under "Subscription Licenses," the document defines the different types of User Subscription Licenses (USLs). It specifies that a "Full USL" is required when a user is not the primary user of a device with a Qualifying Operating System. It also defines "Add-on USL," "Step-up USL," and "From SA USL" as requiring pre-existing licenses or subscriptions.

2. Microsoft Learn. Describe licensing options available in Microsoft 365. MS-900: Microsoft 365 Fundamentals. This module explains that organizations purchase subscriptions based on their needs. For a new organization, this involves acquiring a full subscription for each user, which corresponds to a Full USL. The concepts of add-ons and step-ups are presented as modifications to existing subscriptions.

Question 27

DRAG DROP A company wants to analyze content by using Microsoft365 Apps. You need to describe the connected experiences the company can use. Which connected experiences should you describe? TO answer, drag the appropriate connected experiences to the correct descriptions. Each connected experience may be used once, more than once. or not at all. You may need to drag the split bar between panes or scroll to view content. MS-900 exam question

Show Answer
Correct Answer:

EDITOR

TAP

Explanation

Microsoft Editor is an AI-powered service that goes beyond basic spell checking to offer advanced grammar and style suggestions. It helps improve writing by analyzing text for clarity, conciseness, formality, and vocabulary, which directly matches the first description.


Tap was a feature in Microsoft Word and Outlook designed to help users find and reuse content from relevant documents, presentations, and spreadsheets within their organization. It surfaced frequently used files from the user and their coworkers, allowing for the quick repurposing of existing content without leaving the application. This functionality aligns perfectly with the second description.

References

Microsoft Support. (n.d.). Microsoft Editor checks grammar and more in documents, mail, and the web. Retrieved from Microsoft's official support website.

Details: This document describes Editor's capabilities, stating, "Editor is an AI-powered service that helps bring out your best writer in more than 20 languages... Editor points out issues and offers suggestions for spelling, grammar, and stylistic issues, such as making sentences more concise, choosing simpler words, or writing with more formality." This directly supports matching Editor with the first description.

Microsoft 365 Blog. (2016, November 15). Office 365 November newsโ€”advancing intelligence, mobile and security.

Details: In the section "Tap in Word and Outlook," the document explains, "Tap helps you find and use relevant content from within your organization without leaving the document or email youโ€™re editing... Tap surfaces documents, presentations and spreadsheets frequently used by you and your colleagues and makes them available for you to incorporate their components..." This confirms that Tap is the correct experience for the second description.

Question 28

DRAG DROP A company is migrating to Microsoft 365. The company is reviewing the billing account options in Microsoft 365. You need to recommend a billing accountoptions.Which billing account type should you recommend? MS-900 exam question

Show Answer
Correct Answer:

1: MICROSOFT ONLINE SERVICES PROGRAM

2: MICROSOFT PRODUCTS & SERVICES AGREEMENT (MPSA) PROGRAM

Explanation

The Microsoft Online Services program billing account is generated when a customer purchases a Microsoft 365 subscription directly from the Microsoft 365 website. This model is also known as self-service or web-direct and is typical for individuals or small to medium-sized businesses.


The Microsoft Products & Services Agreement (MPSA) is a specific type of volume licensing agreement for organizations, typically with 250 or more users. It simplifies the purchasing of both Microsoft online services (like Microsoft 365) and on-premises software under a single, non-expiring agreement. Therefore, it is the correct choice for a company signing a volume licensing agreement.

References

Microsoft Learn. "Manage your Microsoft 365 billing accounts." Microsoft Docs. This document explicitly defines the different billing account types.

Section: Billing account types. It states, "Microsoft Online Services Program: This billing account is created when you sign up for a Microsoft 365 subscription directly."

Section: Billing account types. It also states, "Microsoft Products & Services Agreement (MPSA): This billing account is created when your organization signs an MPSA to purchase software and online services."

Microsoft Volume Licensing. "Microsoft Products and Services Agreement." Microsoft. This page details the MPSA, describing it as a foundational agreement for volume licensing that allows organizations to purchase software and online services.

Overview Section. It describes the MPSA as a "single agreement" for making software and online services purchases, confirming its role as a primary volume licensing vehicle.

Question 29

HOTSPOT A company is evaluatingMicrosoft 365. You need to describe Microsoft 365 security principles. Select the answer that correctly completes the sentence. MS-900 exam question

Show Answer
Correct Answer:

ZERO TRUST

Explanation

The Zero Trust model operates on the principle of "never trust, always verify." It fundamentally assumes that the network perimeter is no longer a reliable boundary for security. Therefore, every request for access must be treated as if it originates from an uncontrolled and potentially hostile network. This model requires strict identity verification, device health validation, and least-privilege access for every user and device trying to access resources, regardless of their location. The other options are incorrect: Secure by default refers to pre-configuring systems with the highest security settings, Zero day is a type of vulnerability, and Secure score is a measurement tool for security posture.

References

Microsoft Corporation. (2023). What is Zero Trust? Microsoft Security Documentation. Retrieved from Microsoft's official documentation.

Reference: The "Guiding principles of Zero Trust" section states, "The core principle of Zero Trust is to maintain strict access control...This security model is rooted in the principle of 'never trust, always verify' and assumes that a breach is inevitable or has likely already occurred."

Rose, S., Borchert, O., Mitchell, S., & Connelly, S. (2020). Zero Trust Architecture (NIST Special Publication 800-207). National Institute of Standards and Technology.

DOI: https://doi.org/10.6028/NIST.SP.800-207

Reference: Section 2.1, "Tenets of Zero Trust," Tenet 3 states: "All communication is secured regardless of network location. Network location does not imply trust... Access requests from assets on the enterprise-owned network must meet the same security requirements as access requests and communication from any non-enterprise-owned network."

Buck, B. (2021). The 3 Principles of a Zero Trust Security Model. Microsoft Security Blog.

Reference: The article outlines three core principles, starting with "Verify explicitly," which emphasizes always authenticating and authorizing based on all available data points, reinforcing the concept of assuming breach from any network.

Question 30

A company isevaluating Microsoft 365. Vou need to determine how you can filter Microsoft 365 roadmap items. What are three methods to filter items? Each correct answer presents a complete solution.

Options
A:

A. Cloud instance

B:

B. Product

C:

C. Region

D:

D. Platform

E:

E. Licensing type

Show Answer
Correct Answer:
A. Cloud instance, B. Product, D. Platform
Explanation
The Microsoft 365 Roadmap is the official source for updates on services and features. To help users find relevant information, the roadmap provides several filtering capabilities. Users can filter the list of updates by the specific Product (e.g., Microsoft Teams, Exchange, SharePoint), the Platform on which the feature will be available (e.g., Web, Desktop, iOS, Android), and the Cloud instance (e.g., Worldwide, GCC, DoD). These filters enable administrators and stakeholders to track changes that are pertinent to their organization's specific deployment and user base.
Why Incorrect Options are Wrong

C. Region: The roadmap filters by 'Cloud instance,' which may correspond to specific regions or government clouds, but 'Region' itself is not a direct filter category.

E. Licensing type: The roadmap does not allow filtering by specific licensing plans such as E3 or E5, although feature availability may depend on the license.

---

References

1. Microsoft. (n.d.). Microsoft 365 Roadmap. Retrieved from https://www.microsoft.com/en-us/microsoft-365/roadmap. (This official tool directly shows the filter options for 'Product', 'Platform', and 'Cloud instance' on its main interface.)

2. Microsoft Learn. (2024). Describe the Microsoft 365 roadmap and the message center. In "MS-900: Describe Microsoft 365 apps and services". "You can filter the roadmap by product, platform, cloud instance, and release phase." Retrieved from https://learn.microsoft.com/en-us/training/modules/describe-microsoft-365-apps-services/5-describe-roadmap-message-center.

Question 31

HOTSPOT Acompany is evaluating solutions to improve their customer service capabilities. When customers call the company. they should be directly routed to the appropriate customer service person You need to recommend solutions for the companyโ€™s requirements. Which solutions should you recommend? TO answer, select the appropriate options in the answer area. MS-900 exam question

Show Answer
Correct Answer:

1: MICROSOFT TEAMS PHONE

2: MICROSOFT TEAMS PHONE

Explanation

Microsoft Teams Phone is the correct solution for both requirements.


Implement Direct Routing: Direct Routing is a feature of the Microsoft Teams Phone system. It allows an organization to connect its own telephony infrastructure, specifically a Session Border Controller (SBC), to the Microsoft Phone System. This enables users to make and receive external calls on the Public Switched Telephone Network (PSTN) directly from the Teams client.


Connect correct associate: Microsoft Teams Phone includes features like Call Queues and Auto Attendants. A Call Queue can distribute incoming calls to a group of agents (the customer service associates) based on routing methods like longest idle or round-robin. An Auto Attendant can provide callers with a menu to direct them to the appropriate queue or individual, ensuring they reach the correct associate.

References

Microsoft. (2024). Plan Direct Routing. Microsoft Learn. "Direct Routing allows you to connect a customer-provided Session Border Controller (SBC) to Microsoft Teams Phone."

Microsoft. (2024). Create a Call queue in Microsoft Teams. Microsoft Learn, Set up Call queues section. "A Call queue transfers callers to people in your organization who can help with a particular issue... You can specify how you want calls to be routed to the agents in the queue."

Microsoft. (2024). What are Cloud auto attendants? Microsoft Learn. "Cloud auto attendants let you set up menu options to route calls based on caller input. The menu options of an auto attendant let a caller get to a call queue, a person, or a voicemail."

Question 32

DRAG DROP -

An automobile repair company uses Microsoft Bookings.

Customers can schedule appointments for automobile services with technicians.

Match each component to its description.

Instructions: To answer, drag the appropriate component from the column on the left to its description on the right. Each component may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

Select and Place:

PDF Exam dump
Show Answer
Correct Answer:


Explanation

PDF Exam dumpBooking calendar: The calendar in Microsoft Bookings provides a comprehensive view of all scheduled appointments. Administrators use this interface to manually add appointments, schedule time off for individual staff members (technicians' vacations), and block out dates for business closures. These actions directly control the availability that is presented to customers.


Booking page: This is the customer-facing portal that you publish online. Customers visit this page to view available services and time slots, select a preferred technician, and schedule their own appointments without direct staff assistance.


Staff page: This section is used to manage personnel. For each technician, you can define their specific details, role, and most importantly, set their default weekly working hours. This is the primary area for configuring and viewing a staff member's regular availability.

References

Microsoft Learn, "Add staff to Microsoft Bookings": This document details the functions of the Staff page. It states, "Go to the Staff page, and select Add new staff... On the Staff details page, you can set the working hours for each staff member." This supports using the Staff page to define and view a technician's working hours.

Microsoft Learn, "Publish your business's booking page": This guide explains the role of the Booking page. It clarifies, "The booking page is where your customers can book appointments with your staff." This confirms that the Booking page is the component used to schedule customer appointments.

Microsoft Learn, "Enter your business information in Microsoft Bookings": Regarding time off and closures, while the general business hours are set elsewhere, specific scheduling events like vacations are managed on the calendar. The documentation on the calendar functionality shows how to add "Time off" for staff, which prevents bookings during that period. This aligns with using the Booking calendar for scheduling vacations and closures.

Question 33

HOTSPOT A company is evaluating ways to improve their productivity by using Microsoft 365. You need to determine the correct productivity feature. Select theanswer that correctly completes the sentence. MS-900 exam question

Show Answer
Correct Answer:

MANAGER INSIGHTS

Explanation

Manager insights within Microsoft Viva provides managers with data-driven, privacy-protected views into their team's work patterns. It uses aggregated and anonymized data from Microsoft 365 to highlight trends in areas such as regular after-hours work, meeting culture, and focus time. This helps managers identify potential burnout risks and foster healthier, more effective work habits for their team. In contrast, Personal insights are for individual employees, and Leader insights provide a broader, company-wide view for senior leadership.

References

Microsoft Learn. (2024). Manager insights in Microsoft Viva Insights. Microsoft. Retrieved from https://learn.microsoft.com/en-us/viva/insights/manager-insights/introduction. This document states, "As a manager, you can see aggregated data about work patterns for your team... For example, you can see how much time the team spends in meetings or working after hours each day."

Microsoft Learn. (2024). Introduction to Microsoft Viva Insights. Microsoft. Retrieved from https://learn.microsoft.com/en-us/training/modules/introduction-viva-insights/3-discover-insights. This module clarifies the different roles: "Viva Insights provides personal, manager, and leader insights... Manager insights give visibility into work patterns that might lead to burnout and stress, like regular after-hours work, meeting overload, or too little focus time."

Question 34

A company is evaluating Microsoft 365. You need to identify the features of MicrosoftStream. What are three features of Microsoft Stream? Each correct answer presents part of the solution.

Options
A:

A. Video files can be accessed from Yammer.

B:

B. Video files can be accessed from Microsoft Teams.

C:

C. Video files are stored in Yammer.

D:

D. Video files are stored in SharePoint Online.

E:

E. Video files are stored in Exchange Online.

Show Answer
Correct Answer:
A. Video files can be accessed from Yammer., B. Video files can be accessed from Microsoft Teams., D. Video files are stored in SharePoint Online.
Explanation
The current version of Microsoft Stream is built on the SharePoint platform, which fundamentally changes how video files are stored and accessed. Video files are treated like any other file type within Microsoft 365. They are stored directly in SharePoint Online and OneDrive for Business, not in a standalone service. This integration allows users to access and manage videos through various Microsoft 365 applications. Users can seamlessly access, share, and play video files from within collaboration hubs like Microsoft Teams and Yammer (now part of Microsoft Viva Engage), leveraging the underlying storage and security of SharePoint.
Why Incorrect Options are Wrong

C: Video files are not stored in Yammer. Yammer embeds and plays videos that are stored in the SharePoint site associated with the Yammer community.

E: Exchange Online is the Microsoft 365 service for email, calendaring, and contacts; it is not used for storing Microsoft Stream video files.

References

1. Microsoft Learn. (2023). Overview of Microsoft Stream (on SharePoint). "Video and audio files are stored on the SharePoint files platform within Microsoft 365 like all other file types." This statement directly supports option D.

2. Microsoft Learn. (2023). Features in Stream (on SharePoint). Under the "Video in Microsoft Teams" section, it states, "Teams meeting recordings are saved to OneDrive and SharePoint and can be shared and managed like any other video." This supports option B.

3. Microsoft Learn. (2023). Features in Stream (on SharePoint). Under the "Video in Microsoft Viva Engage" section, it states, "When a user uploads a video to a Viva Engage community it will be stored in the SharePoint site backing the community." This supports option A and directly refutes option C.

4. Microsoft Learn. (2023). Exchange Online service description. "Microsoft Exchange Online is a hosted messaging solution that delivers email, calendar, contacts, and tasks..." This confirms that Exchange Online's purpose is not video storage, refuting option E.

Question 35

HOTSPOT Instructions: For each of the following statements, select Yes if the statementis true, Otherwise, select No. MS-900 exam question

Show Answer
Correct Answer:

NO

YES

NO

Explanation

The SharePoint Newsfeed is a retired feature. Microsoft's modern enterprise social strategy for SharePoint revolves around integration with Yammer or using the collaborative features of Microsoft Teams. You do not use Teams and the legacy Newsfeed together; rather, you replace the Newsfeed with a modern tool.


SharePoint administrators have granular control over the services enabled within their tenant. They can enable or disable enterprise social features, such as the Yammer integration or the classic SharePoint Newsfeed, via the SharePoint admin center.


An organization must choose a single primary enterprise social collaboration service to be used across SharePoint. The tenant-wide setting allows an administrator to select either Yammer or the classic SharePoint Newsfeed, but not both simultaneously. This ensures a consistent user experience.

References

Microsoft Learn. (2023). Use Yammer with SharePoint Online. "In the SharePoint admin center, you can select whether to enable enterprise social collaboration by using Yammer or the SharePoint Newsfeed." This shows a choice must be made between services, not simultaneous use.

Microsoft Learn. (2023). SharePoint classic newsfeed retirement. "The SharePoint classic newsfeed is being retired... We recommend using Yammer for your enterprise social needs." This document confirms that the Newsfeed is a legacy feature being replaced, not used in conjunction with modern tools like Teams or Yammer.

Microsoft Learn. (2024). Manage settings in the SharePoint admin center. This documentation outlines the various settings administrators can control, including "Conversations and communities," which is where the choice of social platform (i.e., Yammer) is configured, implying the ability to manage and thereby disable such features.

Shopping Cart
Scroll to Top

FLASH OFFER

Days
Hours
Minutes
Seconds

avail $6 DISCOUNT on YOUR PURCHASE