Microsoft 365 Fundamentals practice questions

1. Question 1 of 25

   You need to determine the lifecycle of products and features in Microsoft 365. What should you use?

   • Asupport.microsoft.com
   • BMicrosoft Lifecycle Services
   • Cdocs.microsoft.com
   • DMicrosoft 365 Roadmap

   Show answer

   Correct answer: D

   How others answered

   • D50%
   • B34%
   • C16%

   Only 50% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Lifecycle means development, release and end of live. roadmap only shows which features will come, not when features or products are removed

   Adapted from community discussion by mikekrt · 2021-04-11 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. U

      utkarsh_wadiar

      2020-10-21

      34 upvotes

      https://docs.microsoft.com/en-us/lifecycle Option- C is the correct option.

   2. M

      mikekrt

      2021-04-11

      20 upvotes

      Lifecycle means development, release and end of live. roadmap only shows which features will come, not when features or products are removed

   3. 3

      365admin

      2021-05-15

      10 upvotes

      Unless you got 1000 how can you be sure you got this question right?

   4. C

      Cybersecgirl

      2021-04-20

      8 upvotes

      I am pretty sure its D. I took my exam yesterday and chose D and scored 952 on the exam.

2. Question 2 of 25

   Select 2

   You are the Microsoft 365 administrator for a company. You deploy Windows 10 to all devices by using Windows Autopilot. You need to ensure that employees can install Microsoft Office 365 ProPlus on their devices. What are two possible ways to achieve this goal? Each correct answer presents a part of a solution. NOTE: Each correct selection is worth one point.

   • AUse the self-install option on the Office 365 dashboard
   • BDownload and install the Office ProPlus Windows Installer (MSI) package
   • CEnable auto-deployment of Office 365 apps for all devices
   • DUpdate the Windows AutoPilot deployment profile to include the Office 365 apps

   Show answer

   Correct answer: A, C

   How others answered

   • AC82%
   • AD18%

   Explanation

   Each correct answer presents a part of a solution. I think it's C and D. Enable it then update the policy. The question also states to ensure they have it. The self install option isn't the best for that.

   Adapted from community discussion by MattyG · 2021-01-09 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. M

      MattyG

      2021-01-09

      15 upvotes

      Each correct answer presents a part of a solution. I think it's C and D. Enable it then update the policy. The question also states to ensure they have it. The self install option isn't the best for that.

   2. R

      Rstilekar

      2021-06-13

      6 upvotes

      Correct Answer: AC AC – https://docs.microsoft.com/en-us/deployoffice/plan-microsoft-365-apps Choose how you want to deploy: Deploy from a local source with Configuration Manager: Manage your deployment with Configuration Manager, and download and deploy Office from distribution points on your network. (Opt C) Deploy from the cloud with the Office Deployment Tool: Manage your deployment with the ODT, and install Office on client devices directly from the Office CDN. Deploy from a local source with the Office Deployment Tool: Manage your deployment with the ODT, and download and deploy Office from a local source on your network. Self-install from the cloud: Manage your deployment from the Office portal and have your users install Office on their client devices directly from the portal. (Opt A) Opt B is wrong - MSI install not supported in Office 365 (Its only exe) Opt D is wrong here - Autopilot is to install win10 in this context not O365 apps on existing Win10 devices.

   3. T

      TMW

      2021-09-18

      5 upvotes

      We know users can login to their dashboard, and choose to download/install the suite, which makes A an option. This question is tricky, but I think C is the other option: "Most organizations will use this command as part of a batch file, script, or other process that automates the deployment" https://docs.microsoft.com/en-us/deployoffice/deploy-microsoft-365-apps-local-source I think D is not the other option because the deployment profile only includes information about the devices that ProPlus will be deployed to. Basically, the profile is for identifying the devices, not the apps. Column A: Device Serial Number Column B: Windows Product ID Column C: Hardware Hash https://docs.microsoft.com/en-us/microsoft-365/business/add-autopilot-devices-and-rofile?view=o365-worldwide

   4. S

      syu31svc

      2021-12-14

      6 upvotes

      https://docs.microsoft.com/en-us/deployoffice/plan-microsoft-365-apps: "Self-install from the cloud: Manage your deployment from the Office portal and have your users install Office on their client devices directly from the portal." This supports A B is wrong for sure; MSI is not for 365 No mention of Windows AutoPilot deployment in the link so D is wrong C is the other answer

3. Question 3 of 25

   DRAG DROP - An automobile repair company uses Microsoft Bookings. Customers can schedule appointments for automobile services with technicians. Match each component to its description. Instructions: To answer, drag the appropriate component from the column on the left to its description on the right. Each component may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Source: Microsoft e-Learn Booking Calendar - Schedule vacation time for techs. & business closure hours Booking Page - place where staff and customers can schedule appointments Servicing Page - View a technicians working hours

   Adapted from community discussion by AceVander · 2024-09-15 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. M

      Mikmok

      2022-07-07

      5 upvotes

      Correct Answer: Schedule vacation= Booking calendar: https://docs.microsoft.com/en-us/microsoft-365/bookings/schedule-closures-time-off-vacation?view=o365-worldwide Schedule customer appointment=Booking calendar: https://docs.microsoft.com/en-us/microsoft-365/bookings/create-a-manual-booking?view=o365-worldwide Technicians working hours=Staff Page: https://docs.microsoft.com/en-us/microsoft-365/bookings/employee-hours?view=o365-worldwide

   2. A

      anc2304

      2022-08-22

      5 upvotes

      the given answer is right. The link provides access to the answer: https://docs.microsoft.com/en-us/microsoft-365/bookings/bookings-overview?view=o365-worldwide

   3. A

      AceVander

      2024-09-15

      2 upvotes

      Source: Microsoft e-Learn Booking Calendar - Schedule vacation time for techs. & business closure hours Booking Page - place where staff and customers can schedule appointments Servicing Page - View a technicians working hours

   4. E

      ElmarK

      2022-06-22

      2 upvotes

      correction ==> "Booking page" is for customizing the booking page.

4. Question 4 of 25

   A company is evaluating Microsoft 365 services. You need to determine which payment options are supported with a billing profile. Which three options are supported? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • Amoney order
   • Bdebit card
   • Ccheck
   • Dcash
   • Ecredit card

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   If your billing profile is backed by invoice payments, you can't change the payment method. You can use the Pay now button on your invoice to pay with a credit or debit card, or by check or EFT. Reference: https://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/commerce/billing-and-payments/pay-for-subscription-billing-profile.md

   Adapted from community discussion by ExamNiq · 2023-09-02 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. E

      ExamNiq

      2023-09-02

      11 upvotes

      https://learn.microsoft.com/en-us/microsoft-365/commerce/billing-and-payments/pay-for-subscription-billing-profile?view=o365-worldwide Important Starting on April 1, 2023, we will stop accepting checks as a payment method for subscriptions paid by invoice.

   2. M

      MackD

      2024-06-20

      4 upvotes

      Currnet payment methods of Microsoft. https://learn.microsoft.com/en-us/microsoft-365/commerce/billing-and-payments/pay-for-your-subscription?view=o365-worldwide https://learn.microsoft.com/en-us/azure/cost-management-billing/manage/change-credit-card "Important Over the next several months, Microsoft is removing physical checks as an accepted payment method. As of April 1, 2023, payment by check is no longer be supported for new and previously non-check-paying customers. Existing check-paying customers have until September 30, 2023, to transition to paying by electronic funds transfer such as wire/ACH. This change doesn’t affect customers that currently pay via wire/ACH or credit card. See your invoice for EFT payment information."

   3. E

      ee1974

      2023-03-28

      2 upvotes

      debit-credit card and bank account. however, I dont see bank account among choices? When you buy business products or services from Microsoft, you can use an existing payment method, or add a new one. You can use a credit or debit card, or bank account to pay for the things you buy. Note The option to pay with a bank account is not available in some countries or regions. https://learn.microsoft.com/en-us/microsoft-365/commerce/billing-and-payments/manage-payment-methods?view=o365-worldwide

   4. D

      DavidMR

      2023-06-09

      1 upvote

      Correct: You can pay for your subscription with a credit or debit card, or a bank account and you can pay by check (only available in a few contries) https://learn.microsoft.com/es-es/microsoft-365/commerce/billing-and-payments/pay-for-your-subscription?view=o365-worldwide

5. Question 5 of 25

   DRAG DROP - Match each tool to its definition. Instructions: To answer, drag the appropriate tool from the column on the left to its definition on the right. Each tool may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

   Adapted from community discussion by B0bacer · 2023-09-05 · 21 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. B

      B0bacer

      2023-09-05

      21 upvotes

      Use artificial intelligence to detect anomalies and suspicious incidents ->Azure Active Directory Identity Protection https://docs.microsoft.com/en-us/azure/security/fundamentals/threat-detection Identify and detect malicious insider action to make it more difficult to compromise suer credentials ->Azure Advanced Threat Protection https://docs.microsoft.com/en-us/defender-for-identity/what-is Protect against spam and help prevent messaging policy violations ->Microsoft Exchange Online Protection https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide Scan emails and URLs to identify impersonation and malicious files ->Office 365 Threat Intelligence https://www.mimecast.com/content/office-365-threat-intelligence/

   2. S

      Sanna92

      2022-04-03

      7 upvotes

      Answers given are correct First is Identity protection Second is Advanced threat protection, read link: Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions

   3. S

      servijer

      2022-04-15

      5 upvotes

      No. https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

   4. E

      ee1974

      2023-10-19

      6 upvotes

      1-Azure Active Dir Iden Protection 2- Azure Advanced threat Protection 3- MS Exchange Online Protection 4- Office 365 Threat Intelligence

6. Question 6 of 25

   HOTSPOT - An organization plans to deploy Microsoft Intune. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Yes Yes No is correct https://docs.microsoft.com/en-us/mem/intune/apps/apps-selective-wipe: "But you might not want to remove personal data on the device, especially if the device is an employee-owned device"

   Adapted from community discussion by syu31svc · 2022-12-22 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. S

      syu31svc

      2022-12-22

      11 upvotes

      Yes Yes No is correct https://docs.microsoft.com/en-us/mem/intune/apps/apps-selective-wipe: "But you might not want to remove personal data on the device, especially if the device is an employee-owned device"

   2. A

      Alvaroll

      2022-04-28

      8 upvotes

      Correct. Register a device (MAM - Company Apps) is different than enroll a device (MDM - Company Device) The 3rd question ask about wipe a personal device, that it's registered (no enrolled). So only the data and apps of the company are deleted. https://docs.microsoft.com/en-us/azure/active-directory/user-help/user-help-register-device-on-network

   3. R

      Rooks

      2021-11-05

      8 upvotes

      I think they wanted to hear it No (meaning keeping personal data is intact, otherwise very unhappy user base). And Wipe can be used preserving user personal data .. more info: https://docs.microsoft.com/en-us/mem/intune/apps/apps-selective-wipe

   4. W

      wando5000

      2024-02-29

      4 upvotes

      The third answer should be YES as it will remove personal data (unless you tick the box) The Wipe action restores a device to its factory default settings. The user data is kept if you choose the Retain enrollment state and user account checkbox. Otherwise, all data, apps, and settings will be removed.

7. Question 7 of 25

   Select 2

   You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents. You need to implement document classification and protection by using Microsoft Azure Information Protection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AAdd an Azure subscription to your Microsoft 365 tenant
   • BInstall the Azure Information Protection client
   • CCreate a custom Azure Information Protection policy with the Confidential label
   • DEnable the default Azure Information Protection policy
   • EInstall the Rights Management Service client

   Show answer

   Correct answer: A, D

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/information-protection/requirements https://docs.microsoft.com/en-us/azure/information-protection/configure-policy-default

   Adapted from community discussion by Rooks · 2020-11-02 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. R

      Rooks

      2020-11-02

      12 upvotes

      Yes this is very co fusing how this O365 and Azure are implemented and used. With every O365 Subscription you get an Azure Active Directory Service for Authentication/ Authorization purposes but you don’t have full access to Azure services that has all these security and other features and for that you do need to subscribe for Azure subscription. Bottom line O365 and Azure services are two different services. Took me a while to understand all these.

   2. M

      misterkul

      2020-04-15

      11 upvotes

      Isn't Azure subscription already a part of a Office 365 tenant?

   3. J

      JayLearn2022

      2023-09-28

      3 upvotes

      I apologize for the confusion in my previous response. The correct answer according to the website mentioned is A and D. Explanation: To implement document classification and protection by using Microsoft Azure Information Protection, you need to perform the following actions: Step 1: Add an Azure subscription to your Microsoft 365 tenant If your Microsoft 365 tenant does not have an Azure subscription, you need to add one. Step 2: Enable the default Azure Information Protection policy By default, all documents that are labeled with a sensitivity label are protected by using the default Azure Information Protection policy.

   4. T

      TheVeQaZ

      2021-05-04

      4 upvotes

      I think with O365 you don't have Azure Information Protection integration. You need a AD P1 https://azure.microsoft.com/en-us/pricing/details/active-directory/

8. Question 8 of 25

   HOTSPOT - You are planning a Microsoft Azure AD solution for a company. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Azure AD: - Can't manage Azure AD joined machines using Group Policy - Does NOT support Secure LDAP - Does support ADAL No. NO. Yes

   Adapted from community discussion by Ariana_Monalisa · 2022-06-29 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. A

      Ariana_Monalisa

      2022-06-29

      17 upvotes

      Azure AD: - Can't manage Azure AD joined machines using Group Policy - Does NOT support Secure LDAP - Does support ADAL No. NO. Yes

   2. C

      Contactfornitish

      2022-09-23

      4 upvotes

      NO, NO, YES 1. Azure AD joined/registered machines DO NOT support group policies unless hybrid. If need to apply policy on Azure AD joined machine then you go Intune route, which provides loose translation of those policies. 2. Note the language, if you enable AD DS feature of Azure AD since you starting from Cloud not from OnPremise, only then LDAP comes in picture. Azure AD itself DOES NOT **REQUIRE** the same. 3. YES! ADAL support is scheduled to end on Dec 2022 at the moment but IT IS SUPPORTED currently

   3. A

      AIM17

      2021-11-21

      4 upvotes

      1) https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join 2) https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap 3) https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview#:~:text=Active%20Directory%20Authentication%20Library%20%28ADAL%29%20integrates%20with%20the,endpoint%20supports%20work%20accounts%2C%20but%20not%20personal%20accounts.

   4. V

      Vyls26

      2022-01-08

      3 upvotes

      Regarding documentation 1 : https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join It doesn't require group so for me the answer is NO 2 - https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap it's mentionned in the question Active Directory Domain (on premise) and not AZ -AD Domain so for me the answer is no for the 3rd it's confused but i would say no https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap

9. Question 9 of 25

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth pone point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/compliance-manager-overview#controls https://docs.microsoft.com/en-us/office365/securitycompliance/meet-data-protection-and-regulatory-reqs-using-microsoft-cloud https://docs.microsoft.com/en-us/office365/securitycompliance/get-started-with-service-trust-portal

   Adapted from community discussion by deisenhower · 2023-03-29 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Answer figure

   

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

   1. D

      deisenhower

      2023-03-29

      12 upvotes

      Yes, Compliance Manager evals both sets of controls Yes, you can assign controls to people with Compliance Manager https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-improvement-actions No, Compliance Manager is no longer within the Service Trust Portal https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager

   2. S

      Saravana12g

      2023-11-13

      4 upvotes

      3rd question = no Note that Compliance Manager (preview) is no longer accessible in the Service Trust Portal, and all links to it will redirect you to its new location in the Microsoft 365 compliance center. https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-faq?view=o365-worldwide

   3. X

      xoe123

      2023-04-05

      3 upvotes

      seems Yes Yes No reason being for NO for third option "https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager-faq?view=o365-worldwide"

   4. A

      AIM17

      2023-05-21

      2 upvotes

      3) No - https://docs.microsoft.com/en-us/microsoft-365/compliance/compliance-manager?view=o365-worldwide // "Compliance Manager is now generally available (GA) as an end-to-end compliance management solution inside the Microsoft 365 compliance center. With this release, Compliance Manager completes the transition from its previous location in the Microsoft Service Trust Portal. "

10. Question 10 of 25

    DRAG DROP - A company plans to migrate to a hybrid cloud infrastructure. You need to determine where to manage the environment after the migration is complete. Match each item to the location where it will be managed. To answer, drag the appropriate item from the column on the left to its location on the right. Each item may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Reference: https://docs.microsoft.com/en-us/office365/securitycompliance/go-to-the-securitycompliance-center https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/disclaimers-signatures-footers-or-headers https://www.itprotoday.com/email-and-calendaring/configure-email-disclaimer-exchange-server-2016 https://docs.microsoft.com/en-us/office365/troubleshoot/administration/switch-channel-for-office-365

    Adapted from community discussion by syu31svc · 2021-12-22 · 17 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Answer figure

    

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       syu31svc

       2021-12-22

       17 upvotes

       I disagree with this one Should be MFA for cloud services is for M365 since it's CLOUD Frequency of O365 updates is M365 email disclaimers and compliance features are for both definitely

    2. D

       d0n0treply

       2025-01-28

       5 upvotes

       Configure multi-factor authentication for cloud services → Microsoft 365 only Configure email disclaimers → Both Microsoft 365 and on-premises Configure compliance → Both Microsoft 365 and on-premises Set frequency of Microsoft Office 365 updates → Microsoft 365 only

    3. A

       alessandro2039

       2024-09-16

       1 upvote

       MFA is M365 management only, exchange server doesnt natively support it. It needs to be federated or connected to a third party - https://infrasos.com/implementing-mfa-in-microsoft-exchange-server/ Disclaimers is both - https://learn.microsoft.com/en-us/exchange/policy-and-compliance/mail-flow-rules/signatures?view=exchserver-2019 Compliance is technically both, exchange server does have compliance features, but managing it in a hybrid environment would require M365 management through the compliance portal to unlock all its features like eDiscovery - https://learn.microsoft.com/en-us/exchange/policy-and-compliance/policy-and-compliance?view=exchserver-2019 Frequency of updates is both, https://learn.microsoft.com/en-us/deployoffice/updates/overview-update-channels#configure-the-update-channel

    4. N

       NoursBear

       2024-09-14

       1 upvote

       For Office 365 Updates in a hybrid environment https://learn.microsoft.com/en-us/deployoffice/updates/choose-how-to-deliver-updates#update-solutions-for-hybrid-update-sources The choices are there, each have advtanges and disadvantages: Step 1: Choose your update source: Cloud, on-premises location, or hybrid The first step in deciding how the Microsoft 365 Apps should be updated, is to choose where updates should be delivered from: From the cloud, from on-premises locations or a mix of both (also known as "hybrid"). The following section lays out these sources and calls out the individual benefits and challenges. The second step is to review and choose a fitting solution for managing updates for the chosen update source. I will go for both in the exam

11. Question 11 of 25

    HOTSPOT - You are a Microsoft 365 administrator. You need to implement the appropriate features for each scenario. What should you implement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Reference: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

    Adapted from community discussion by syu31svc · 2021-12-21 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Answer figure

    

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       syu31svc

       2021-12-21

       7 upvotes

       https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android: "ensures that apps are protected with a PIN" "introduces advanced data protection mechanisms, enhanced PIN configuration, and APP Mobile Threat Defense" https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection Azure AD Identity Protection for securing members by risk https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure: "Organizations want to minimize the number of people who have access to secure information or resources" Azure AD Privileged Identity Management to secure administrative roles Answer is correct

    2. L

       Laura2022

       2022-07-28

       7 upvotes

       The correct answer for the option Secure Members of the Global Administrators group by using dynamic risk profiles, isn’t Microsoft Azure AD Privilege Identity Management? And the correct answer for the option Secure administrative roles by requiring approval, isn´t Microsoft Azure AD Identity Protection?

    3. Y

       yeban

       2021-12-18

       4 upvotes

       iOS and android devices use PINs when a user is presented with a lock screen; the desktop or web version of outlook will ask for a user's password.

    4. J

       jim85

       2023-07-31

       3 upvotes

       2nd is CA https://learn.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies and https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-risk

12. Question 12 of 25

    Your company makes use of Microsoft 365 in their environment. You have been tasked with making sure that admin roles are protected. The feature you use should achieve this by requiring approvals. Which of the following is a feature you should use?

    • AMobile application protection policy.
    • BMicrosoft Azure AD Identity Protection.
    • CMicrosoft Azure AD Privilege Identity Protection.
    • DMicrosoft Azure AD Conditional Access.

    Show answer

    Correct answer: C

    How others answered

    • C89%

    Explanation

    Answer is C. You cant configure or protect Admin accounts without Privileged Identity Management. Azure AD Identity Protection is for monitoring and protecting USER accounts not ADMIN accounts.

    Adapted from community discussion by rabadonqz · 2022-01-20 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. R

       rabadonqz

       2022-01-20

       Selected C27 upvotes

       Answer is C. You cant configure or protect Admin accounts without Privileged Identity Management. Azure AD Identity Protection is for monitoring and protecting USER accounts not ADMIN accounts.

    2. P

       PizzaPasta

       2021-12-10

       22 upvotes

       its either a typo here in the question or a catch question, there is no Microsoft Azure AD privilege identity protection, be aware of features and namings...

    3. L

       L33D

       2021-12-27

       Selected C4 upvotes

       https://youtu.be/f-0K7mRUPpQ Reasons to use Organizations want to minimize the number of people who have access to secure information or resources, because that reduces the chance of a malicious actor getting access an authorized user inadvertently impacting a sensitive resource However, users still need to carry out privileged operations in Azure AD, Azure, Microsoft 365, or SaaS apps. Organizations can give users just-in-time privileged access to Azure and Azure AD resources and can oversee what those users are doing with their privileged access.

    4. B

       bigdaddyzaddy

       2024-12-20

       Selected C2 upvotes

       Guys some of the questions need to be updated as Microsoft has not only changed names but added new features. The answer is C. But the name is now Microsoft Entra Privileged Identity Manager (PIM) (PIM) is the feature that can protect high-privilege accounts like Global Administrators by utilizing dynamic risk profiles. It is part of the Entra ID security suite and helps manage, control, and monitor access to privileged roles within your environment. Key Features of PIM: Just-in-Time (JIT) Access: Allows Global Administrators to request elevated privileges when needed, with approval workflows in place. Dynamic Risk Profiles: PIM can evaluate risk factors dynamically based on user activity and conditions (e.g., geographic location or unusual sign-ins). If suspicious activity is detected, PIM can enforce additional security measures, such as multi-factor authentication (MFA) or just-in-time activation for global administrators.

13. Question 13 of 25

    Your company makes use of Microsoft 365 in their environment. You have been tasked with making sure that members of the Global Administrators group are protected. The feature you use should achieve this by making use of dynamic risk profiles. Which of the following is a feature you should use?

    • AMobile application protection policy.
    • BDevice configuration policy.
    • CMicrosoft Azure AD Privilege Identity Protection.
    • DMicrosoft Azure AD Conditional Access.

    Show answer

    Correct answer: C

    How others answered

    • C52%
    • D48%

    Only 52% agreed on this answer — treat it as contested rather than settled.

    Explanation

    According to me the Ans is D - We will enable Conditional Access policy and then select the user sign in risk or login risk settings ( i wish we had AD identity Protection here as an Option)

    Adapted from community discussion by prabhjot · 2021-07-22 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. A

       anushree861

       2021-09-27

       22 upvotes

       I think answer is D. Reference : https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies

    2. P

       prabhjot

       2021-07-22

       14 upvotes

       According to me the Ans is D - We will enable Conditional Access policy and then select the user sign in risk or login risk settings ( i wish we had AD identity Protection here as an Option)

    3. J

       JayLearn2022

       2023-03-30

       4 upvotes

       The correct answer is D. The feature you should use to protect members of the Global Administrators group by making use of dynamic risk profiles is Microsoft Azure AD Conditional Access. Option D, Microsoft Azure AD Conditional Access, allows you to create policies that use dynamic risk profiles to determine the level of access a user should have. With this feature, you can create policies that protect members of the Global Administrators group by requiring additional authentication factors or blocking access if the risk level is too high. Therefore, it is the correct answer. Option C, Microsoft Azure AD Privileged Identity Protection, is a feature used to protect privileged accounts in Azure AD, but it does not make use of dynamic risk profiles, which is a requirement in the question. Therefore, it is not the correct answer.

    4. L

       lunchmode

       2025-03-16

       Selected C2 upvotes

       Answer is C To protect members of the Global Administrators group and ensure their accounts are secured using dynamic risk profiles, Microsoft Azure AD Privileged Identity Management (PIM) is the appropriate feature. PIM helps manage, control, and monitor access to privileged roles, including Global Administrators, by enforcing Just-In-Time (JIT) access, requiring approvals, and enabling multi-factor authentication (MFA). It also provides risk-based conditional access to ensure that privileged accounts are protected based on dynamic risk profiles. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Why not D? D. Microsoft Azure AD Conditional Access: While Conditional Access can enforce policies like MFA or block access based on risk signals, it does not specifically manage privileged roles or provide the same level of dynamic risk-based protection as PIM.

14. Question 14 of 25

    Select 2

    You are a Microsoft 365 administrator for a company. You need to ensure that company documents are marked as confidential. You must prevent employees from sharing documents with people outside the company. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • AValidate outbound emails by using DomainKeys Identified Mail (DKIM)
    • BCreate sensitive information types
    • CConfigure Secure/Multipurpose Internet Mail Extensions (S/MIME) settings for Outlook
    • DCreate a data-loss prevention policy
    • EApply sensitivity labels to documents

    Show answer

    Correct answer: D, E

    How others answered

    • DE100%

    Explanation

    I asked the expert for the answer and this is his comment: A sensitive information type is just a way for Microsoft 365 to identify documents and messages containing instances of sensitive information. It won’t do anything to stop people sharing that information unless you use the SIT in a DLP policy. Go to Link: https://practical365.com/custom-sensitive-information-types/#comment-237004 You need to create a DLP, so the answer is D and E

    Adapted from community discussion by Saravana12g · 2021-11-05 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       Saravana12g

       2021-11-05

       16 upvotes

       I asked the expert for the answer and this is his comment: A sensitive information type is just a way for Microsoft 365 to identify documents and messages containing instances of sensitive information. It won’t do anything to stop people sharing that information unless you use the SIT in a DLP policy. Go to Link: https://practical365.com/custom-sensitive-information-types/#comment-237004 You need to create a DLP, so the answer is D and E

    2. N

       neozed

       2023-02-24

       Selected D, E3 upvotes

       D. Create a data-loss prevention policy: You can create a data-loss prevention (DLP) policy in Microsoft 365 that will automatically classify and protect sensitive information, such as confidential documents. The policy can also block users from sharing such information with people outside the company, ensuring that company data remains secure. E. Apply sensitivity labels to documents: You can apply sensitivity labels to documents to indicate the level of confidentiality or sensitivity of the information contained in the document. Sensitivity labels can be configured to restrict access to certain individuals or groups, preventing employees from sharing sensitive information with people outside the company. Therefore, the correct answers are D and E.

    3. D

       Dan_Cyber

       2021-02-10

       3 upvotes

       D & E: Restrict access to content by using sensitivity labels to apply encryption Microsoft 365 licensing guidance for security & compliance. When you create a sensitivity label, you can restrict access to content that the label will be applied to. For example, with the encryption settings for a sensitivity label, you can protect content so that: • Only users within your organization can open a confidential document or email. • Only users in the marketing department can edit and print the promotion announcement document or email, while all other users in your organization can only read it. • Users cannot forward an email or copy information from it that contains news about an internal reorganization. • The current price list that is sent to business partners cannot be opened after a specified date. Ref: https://docs.microsoft.com/en-us/microsoft-365/compliance/encryption-sensitivity-labels?view=o365-worldwide

    4. D

       Dont_Stop

       2021-07-13

       4 upvotes

       It`s B and D. You need to create sensitive information types first if you want to create sensitivity labels or data-loss prevention policies. If you apply a sensitivity label to a document it can be encrypted and remain encrypted during the transit in an email for example and to view the content of that document you have to have special rights or an app, but it doesn`t prevent the document from sharing, sensitivity labels just marks and encrypts documents, to prevent documents from sharing you have to use data-loss prevention policy.

15. Question 15 of 25

    Select 3

    An organization uses Microsoft 365 Business to secure their data. Many users install the organization's data on their personal tablets and phones. You need to protect the organization's data stored on users' devices. Which three features support device security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • ARemotely wiping company data
    • BEnabling Advanced Threat Protection for users
    • CDisabling the device remotely
    • DAutomatically deleting files after 90 days of inactivity
    • ERequiring users to have a PIN on their device

    Show answer

    Correct answer: A, B, E

    How others answered

    • ABE57%
    • ADE43%

    Only 57% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I think this one is correct. you can remotely wipe the data, you can request users have a PIN Answers A and E "Advanced Threat Protection is a security solution that defends against complex malware or hacking attacks that target sensitive data within an organization" - Ans B is out https://docs.microsoft.com/en-us/defender-for-identity/what-is "These settings include deleting files from an inactive device after a set period, encrypting work files, requiring that users set a PIN, and so on" https://docs.microsoft.com/en-us/microsoft-365/business/security-features?view=o365-worldwide A,D, and E

    Adapted from community discussion by TMW · 2021-09-19 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. J

       JayLearn2022

       2023-09-28

       3 upvotes

       My Mistake, The answer ADE is correct because these three features support device security in Microsoft 365 Business: For Employee owned devices Disabling a device would not be valid A. Remotely wiping company data - this feature allows administrators to remotely wipe company data from a device in case the device is lost, stolen, or if an employee leaves the organization. D. Automatically deleting files after 90 days of inactivity - this feature allows administrators to set a policy for automatically deleting files after a specified period of inactivity. This ensures that sensitive company data is not left on an unattended device for extended periods. E. Requiring users to have a PIN on their device - this feature enforces a security policy that requires users to set a PIN or password on their devices. This adds an extra layer of security to the device, making it more difficult for unauthorized users to access company data.

    2. M

       Mikmok

       2022-07-07

       6 upvotes

       My friend, the question is about Personal Devices. This is key in the question you cannot wipe personal devices that are not registered in INtune.

    3. T

       TMW

       2021-09-19

       4 upvotes

       I think this one is correct. you can remotely wipe the data, you can request users have a PIN Answers A and E "Advanced Threat Protection is a security solution that defends against complex malware or hacking attacks that target sensitive data within an organization" - Ans B is out https://docs.microsoft.com/en-us/defender-for-identity/what-is "These settings include deleting files from an inactive device after a set period, encrypting work files, requiring that users set a PIN, and so on" https://docs.microsoft.com/en-us/microsoft-365/business/security-features?view=o365-worldwide A,D, and E

    4. Y

       youngjanpawel

       2023-10-15

       Selected A, B, E3 upvotes

       A. Remotely wiping company data: This feature allows administrators to remotely wipe company data from a device that is lost or stolen to prevent unauthorized access. E. Requiring users to have a PIN on their device: This feature ensures that the device is protected by a password or PIN, making it harder for unauthorized users to access data on the device. B. Enabling Advanced Threat Protection for users: This feature provides an additional layer of security against advanced threats such as phishing attacks, malware, and ransomware.

16. Question 16 of 25

    You are the Microsoft 365 administrator for a company. You need to track scheduled maintenance events in Microsoft 365 admin center. Where can you track these events?

    • AReports
    • BSupport
    • CService Health
    • DMessage Center

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    This is correct. Service Health vs. Message center Service health: Shows the current status of the service and details about service disruptions and outages. Planned maintenance: Information is available on the Message Center. https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/service-health-and-continuity

    Adapted from community discussion by TMW · 2021-09-24 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. T

       TMW

       2021-09-24

       16 upvotes

       This is correct. Service Health vs. Message center Service health: Shows the current status of the service and details about service disruptions and outages. Planned maintenance: Information is available on the Message Center. https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/service-health-and-continuity

    2. D

       dedzera

       2020-08-14

       7 upvotes

       D Message Center https://docs.microsoft.com/en-us/office365/admin/manage/message-center?view=o365-worldwide

    3. F

       Faulu

       2020-07-17

       4 upvotes

       D is correct Planned maintenance events aren't shown in service health. You can track planned maintenance events by staying up to date with the Message center

    4. J

       JayLearn2022

       2023-09-30

       2 upvotes

       Answer: D Message Center The Web page has the Tip as follows: https://learn.microsoft.com/en-us/microsoft-365/enterprise/view-service-health?view=o365-worldwide Tip Planned maintenance events aren't shown in service health. You can track planned maintenance events by staying up to date with the Message center. Filter to messages categorized as Plan for change to find out when the change is going to happen, its effect, and how to prepare for it. See Message center in Microsoft 365 for more details.

17. Question 17 of 25

    Select 3

    You are the Office 365 administrator for a company. You encounter a problem in your tenant. You launch the Microsoft 365 admin center and select Create a new service request. You need to get help resolving your problem through the admin center. Which three actions can you perform from the admin center? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • AReceive a Microsoft technical support phone number to speak with a Microsoft support technician.
    • BRequest a Microsoft service technician to contact you by using email.
    • CUse the query text box to type information about your problem and receive links to help documentation.
    • DSchedule a time for a Microsoft service technician to call you.
    • EChat with a live Microsoft service engineer.

    Show answer

    Correct answer: B, C, D

    How others answered

    • BCD77%
    • ACD23%

    Explanation

    I logged in the admin center in my company. There is no MS tech number to call, but you can have the support to email or give you a call. So the answer should be BCD

    Adapted from community discussion by Zoom2020 · 2020-11-01 · 10 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. Z

       Zoom2020

       2020-11-01

       10 upvotes

       I logged in the admin center in my company. There is no MS tech number to call, but you can have the support to email or give you a call. So the answer should be BCD

    2. C

       Contactfornitish

       2022-09-24

       Selected B, C, D4 upvotes

       C is self service option in case if its known issue with a known solution. Sometimes it even gives script to fix B & D would appear once you are ready to submit the request in preferences that you want to be called or emailed by support. Premier support used to have toll free years back but not anymore. Suprising Microsoft doesn't has a chat with support option so far.

    3. A

       AkshayR

       2020-11-25

       4 upvotes

       BCD is correct. However I did not see the provision to schedule the time of the call. It just confirms your phone number. No place to provide time.

    4. A

       amymay101

       2021-05-07

       3 upvotes

       ABC, you cannot schedule a time for an engineer to call and there is no chat service

18. Question 18 of 25

    Select 2

    You have been tasked with configuring a data governance strategy that allows for data classification. It should also allow for these classifications to be enforced. Which of the following should form part of your strategy? (Choose two.)

    • AApply Microsoft SharePoint permissions.
    • BPublish labels.
    • CConfigure Microsoft Outlook Mail Tips.
    • DApply supervision policies.
    • EApply retention policies.
    • FApply preservation policies.

    Show answer

    Correct answer: B, E

    How others answered

    • BE52%
    • BD45%

    Only 52% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Im pretty sure one answer is 'publish labels' (the 2 label types are sensitivity and retention) Not sure about the second one but there is such a thing as 'retention policy' which is the amount of time to wait before an email may be deleted. I cant see anything about 'supervision' or 'preservation' policies so will rule those out A label policy consists of: A set of labels. The users and groups that will be assigned the policy with labels. The scope of the policy and policy settings for that scope (such as default label for files and emails). https://docs.microsoft.com/en-us/microsoft-365/compliance/sensitivity-labels?view=o365-worldwide#what-label-policies-can-do https://docs.microsoft.com/en-us/microsoft-365/compliance/apply-sensitivity-label-automatically?view=o365-worldwide

    Adapted from community discussion by wando5000 · 2021-12-10 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. B

       B0bacer

       2022-09-02

       Selected B, E14 upvotes

       I think anser is B. Publish labels. E. Apply retention policies.

    2. M

       mamash

       2024-08-04

       Selected B, E5 upvotes

       Publish labels: Labels allow you to classify and protect data across your organization. You can apply labels to content manually or automatically based on certain conditions. Apply retention policies: Retention policies help ensure that information is kept for a required period or deleted after a certain period, aligning with your organization's data governance strategy and compliance requirements. Therefore, the correct answers are: B. Publish labels E. Apply retention policies

    3. N

       neozed

       2023-03-14

       Selected B, E3 upvotes

       B. Publish labels: This involves creating and publishing data classification labels that can be applied to content in Microsoft 365 services such as SharePoint, OneDrive, and Exchange Online. These labels can be used to indicate the level of sensitivity of the content, and they can be used to trigger certain actions, such as applying encryption or preventing the content from being shared outside the organization. E. Apply retention policies: This involves creating and applying retention policies to content in Microsoft 365 services such as SharePoint, OneDrive, and Exchange Online. Retention policies can be used to specify how long content should be retained, and they can also be used to trigger certain actions, such as moving content to an archive or deleting content that is no longer needed. Therefore, options B and E should form part of the data governance strategy for data classification and enforcement.

    4. B

       bigdaddyzaddy

       2024-12-20

       Selected B, E3 upvotes

       Supervision policies deals with monitoring and reviewing COMMUNICATIONS within an organization to ensure compliance with legal, regulatory, or internal standards. They are applied to specific communication types (e.g., email, Teams chat, etc.) to flag content for review. They’re mostly used for monitoring content for inappropriate behavior, such as harassment, or to ensure employees follow certain communication rules. It has nothing to do with the enforcement of data classification! Enforcing data classification in 365 involves using a combination of labels, retention policies, and other compliance features to ensure that data is properly classified, protected, and managed according to the organization's governance needs. Publishing labels and applying retention policies are key components that allow classification to be applied and then managed according to regulatory requirements. B and E is the answer

19. Question 19 of 25

    HOTSPOT - A company is evaluating the capabilities of Windows 365 and Azure Virtual Desktop. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Sorry typo on my end the correct answers are NO for M365 and intune licenses NO for windows 365 using multi-session YES for fslogic and AVD

    Adapted from community discussion by Murtuza · 2023-05-19 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn

    Answer figure

    

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. M

       Murtuza

       2023-05-19

       14 upvotes

       Sorry typo on my end the correct answers are NO for M365 and intune licenses NO for windows 365 using multi-session YES for fslogic and AVD

    2. 4

       4435044

       2024-06-27

       2 upvotes

       Users must have a Microsoft Intune license to use Windows 365. No While Intune can be used to manage Windows 365 devices, it is not a mandatory requirement. Windows 365 can be managed through other methods as well. Windows 365 uses a multi-session Windows operating system. No Windows 365 is designed for single-session use, providing each user with a dedicated Windows instance. Multi-session capabilities are a feature of Azure Virtual Desktop. Azure Virtual Desktop uses a FSLogix container to store user profile data. Yes Azure Virtual Desktop utilizes FSLogix technology to manage and store user profiles in containers, allowing for faster logins and a consistent user experience across sessions.

    3. M

       MvdH81Rijswijk

       2023-01-18

       3 upvotes

       YYY 1. https://learn.microsoft.com/en-us/windows-365/enterprise/requirements?tabs=enterprise%2Cent 2. https://getnerdio.com/academy/windows-365-vs-azure-virtual-desktop-avd-comparing-two-daas-products/ 3. https://learn.microsoft.com/en-us/azure/virtual-desktop/fslogix-containers-azure-files

    4. P

       pgonza

       2023-01-20

       3 upvotes

       Its No, No, Yes. The link you provided for 2 states that "Business cloud PCs do not require an Intune license and are managed entirely by the user, similar to a standalone physical PC".

20. Question 20 of 25

    A company is moving to Microsoft Azure. Some applications cannot be moved. You need to identify which applications will remain in a hybrid environment after the migration. Which applications will remain in a hybrid environment?

    • Aapplications that manage sensitive information
    • Bapplications that use a USB-token device to control access
    • Clegacy applications that use a message-based interface
    • Da new server that runs several line-of-business applications

    Show answer

    Correct answer: C

    How others answered

    • C55%
    • B32%

    Only 55% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I think B is the only correct answer. A) sensitive info can be handled => certifications b) It is not possible to connect a USB device to autenticate to a specific application when moved to Azure -> Wvd c) Message bus functionality is part of Azure. Azure service bus d) LOB apps can be transfered

    Adapted from community discussion by ArnoArno · 2020-05-16 · 30 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. B

       bentthai

       2019-09-12

       37 upvotes

       Should be C not A. Azure can handle sensitive information and is certified.

    2. A

       ArnoArno

       2020-05-16

       30 upvotes

       I think B is the only correct answer. A) sensitive info can be handled => certifications b) It is not possible to connect a USB device to autenticate to a specific application when moved to Azure -> Wvd c) Message bus functionality is part of Azure. Azure service bus d) LOB apps can be transfered

    3. P

       PastyConnoisseur

       2023-01-04

       10 upvotes

       This answer contradicts Q12 where the answer was "applications that manage sensitive information" would remain in a hybrid environment after a migration.

    4. R

       RPSMO

       2020-10-27

       7 upvotes

       Not entirely true (not currently anyway).... You can configure the WVD to redirect your device's usb ports to your VM.

21. Question 21 of 25

    Select 3

    You need to deploy an application to Microsoft Infrastructure as a Service (IaaS). Which three features are part of IaaS? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

    • Abusiness analytics
    • Breal-time monitoring
    • Coperating system
    • Dservers and storage
    • Efirewall and network security

    Show answer

    Correct answer: B, D, E

    How others answered

    • BDE57%
    • CDE43%

    Only 57% agreed on this answer — treat it as contested rather than settled.

    Explanation

    A. business analytics - PAAS B. real-time monitoring - IAAS C. operating system - PAAS D. servers and storage - IAAS E. firewall and network security - IAAS As per this diagram - https://azure.microsoft.com/en-us/overview/what-is-iaas/#overview IAAS - Servers and Storage, Networking Firewalls Security, Datacenter and Physical Building. PAAS - Operating Systems, Business Analytics

    Adapted from community discussion by Saravana12g · 2021-10-21 · 43 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • azure.microsoft.com documentation
    • azure.microsoft.com documentation
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       Saravana12g

       2021-10-21

       43 upvotes

       A. business analytics - PAAS B. real-time monitoring - IAAS C. operating system - PAAS D. servers and storage - IAAS E. firewall and network security - IAAS As per this diagram - https://azure.microsoft.com/en-us/overview/what-is-iaas/#overview IAAS - Servers and Storage, Networking Firewalls Security, Datacenter and Physical Building. PAAS - Operating Systems, Business Analytics

    2. G

       GoldenFox

       2021-02-04

       17 upvotes

       Look at the link from wangbing0115 https://azure.microsoft.com/en-us/overview/what-is-iaas/ Operating System falls under PaaS. IaaS is Server, Storage, Networking, Firewalls, Physical building.

    3. M

       minasungit

       2022-12-30

       6 upvotes

       OS is part of PaaS https://azure.microsoft.com/en-us/resources/cloud-computing-dictionary/what-is-iaas/?WT.mc_id=AZ-MVP-5003556

    4. R

       Rockm0uld

       2022-04-13

       Selected B, D, E5 upvotes

       https://azure.microsoft.com/en-us/overview/what-is-iaas/#overview

22. Question 22 of 25

    DRAG DROP - You need to identify the software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS) services provided by Microsoft 365. What type of cloud service model does each cloud service represent? To answer, drag the appropriate cloud service models to the correct cloud services. Each cloud service model may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    No, PaaS, SaaS, and IaaS as it is shown are correct. The first line of the provided link: "Power Apps is a suite of apps, services, connectors and data platform that provides a rapid application development environment to build custom apps for your business needs." https://docs.microsoft.com/en-us/powerapps/powerapps-overview

    Adapted from community discussion by maaten · 2021-04-05 · 27 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation

    Answer figure

    

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. M

       maaten

       2021-04-05

       27 upvotes

       No, PaaS, SaaS, and IaaS as it is shown are correct. The first line of the provided link: "Power Apps is a suite of apps, services, connectors and data platform that provides a rapid application development environment to build custom apps for your business needs." https://docs.microsoft.com/en-us/powerapps/powerapps-overview

    2. G

       GPerez73

       2023-01-14

       13 upvotes

       Power apps is SaaS. Just check the link: https://learn.microsoft.com/en-us/power-apps/maker/canvas-apps/transform-infopath#key-advantages-of-power-apps-over-infopath

    3. P

       pinja

       2021-09-12

       6 upvotes

       "Power Apps provides a low-code approach to rapidly build apps for any device, while seamlessly working with your Azure-based services through a rich professional developer extensibility model." https://azure.microsoft.com/en-us/products/powerapps/#customer-stories

    4. J

       jim85

       2023-02-08

       4 upvotes

       PowerApps >> SaaS https://learn.microsoft.com/en-us/power-apps/maker/canvas-apps/transform-infopath#key-advantages-of-power-apps-over-infopath Power Apps enable a powerful future Power Apps is a Software as a Service (SaaS) platform that's designed to let you quickly build high-functioning apps that you can deploy to the web, SharePoint, Dynamics 365, Teams, Power BI, or a mobile device without any extra work. Because you can deploy them by just giving someone the URL to your published app, they're also just as easy to update.

23. Question 23 of 25

    HOTSPOT - A company plans to deploy Microsoft Intune. Which types of apps can be managed by Intune? For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    The tricky thing about the first question is, that you have to deploy the app from intune in order to manage it. Of course, you can deploy apps from 3rd party stores with Intune, but if a user installed it from the app store directly, it's not a managed app for Intune...

    Adapted from community discussion by hansw89 · 2021-09-24 · 37 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Answer figure

    

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. H

       hansw89

       2021-09-24

       37 upvotes

       The tricky thing about the first question is, that you have to deploy the app from intune in order to manage it. Of course, you can deploy apps from 3rd party stores with Intune, but if a user installed it from the app store directly, it's not a managed app for Intune...

    2. W

       wando5000

       2023-01-25

       7 upvotes

       I disagree When you browse to the MS endpoint manager admin centre\App\allApps\select App type\ store App some of the options are; android store app iOS store app Windows phone 8.1 store app managed google play app

    3. M

       Mikehjf

       2022-12-04

       4 upvotes

       Direct quote from MS: "Mobile app management policies should not be used with third-party mobile app management or secure container solutions" https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy

    4. W

       wando5000

       2023-01-19

       3 upvotes

       I agree. The link below lists many third party apps ("Partner productivity apps") including Acronis Access and Cisco Jabber for Intune " The following apps support the core Intune App Protection Policy settings. Apps are also capable of supporting advanced App Protection Policy and App Configuration Policy settings. For more information, contact the app vendor." https://docs.microsoft.com/en-us/mem/intune/apps/apps-supported-intune-apps

24. Question 24 of 25

    DRAG DROP - You are the Microsoft 365 administrator for a company. You need to identify the different features of MyAnalytics and Workspace Analytics. What are the different features? To answer, drag the appropriate applications to the correct features. Each application may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer

    Explanation

    Reference: https://products.office.com/en-za/business/compare-more-office-365-for-business-plans https://techcommunity.microsoft.com/t5/MyAnalytics/Microsoft-Workplace-Analytics/td-p/84884 https://docs.microsoft.com/en-us/office365/servicedescriptions/workplace-analytics-service-description https://docs.microsoft.com/en-us/workplace-analytics/setup/upload-organizational-data

    Adapted from community discussion by syu31svc · 2021-06-21 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Answer figure

    

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       syu31svc

       2021-06-21

       14 upvotes

       Included in E5 -> MyAnalytics (https://docs.microsoft.com/en-us/workplace-analytics/myanalytics/overview/plans-environments) Purchase as add-on -> Workspace (https://docs.microsoft.com/en-us/workplace-analytics/setup/environment-requirements) employee work and collaboration ->MyAnalytics (https://docs.microsoft.com/en-us/workplace-analytics/myanalytics/use/collaboration) organisation and team -> Workspace (https://docs.microsoft.com/en-us/office365/servicedescriptions/workplace-analytics-service-description)

    2. N

       notbandyo1

       2021-04-23

       4 upvotes

       nope only insights of myanalitics is included. https://docs.microsoft.com/es-es/workplace-analytics/myanalytics/overview/plans-environments

    3. C

       ca3a59d

       2024-07-13

       3 upvotes

       There is literally a question a page back saying the exact opposite and labelling MyAnalytics as add on only....

    4. N

       NoursBear

       2024-03-21

       2 upvotes

       the thing is both features are included in Viva Insight hope this question will not turn up

25. Question 25 of 25

    You are a Microsoft 365 administrator for a company. You use products that are in private preview, public preview, or general availability (GA). You need to determine at which phases you can receive support from the Microsoft 365 admin center. For which product phase or phases can you receive support?

    • AGA, private preview, and public preview
    • BGA and private preview only
    • CGA only
    • DGA and public preview only
    • Epublic preview and private preview only

    Show answer

    Correct answer: C

    How others answered

    • C53%
    • D47%

    Only 53% agreed on this answer — treat it as contested rather than settled.

    Explanation

    GA is correct. This question explicitly mentions 'Microsoft 365 admin center', Public preview support is only available through Microsoft Customer Support Services.

    Adapted from community discussion by Snowman1 · 2020-04-30 · 38 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • azure.microsoft.com documentation
    • Microsoft Learn

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by MS-900 or CertExamHQ.

    1. S

       Snowman1

       2020-04-30

       38 upvotes

       GA is correct. This question explicitly mentions 'Microsoft 365 admin center', Public preview support is only available through Microsoft Customer Support Services.

    2. S

       Silvia

       2020-04-10

       21 upvotes

       I think it is GA only , as we need support from admin center. "You use the admin center to set up your organization in the cloud, manage users, manage subscriptions, etc" , it is not about a technical support that Ms offers for both GA and public, see one similar question, next one Q3 as well.

    3. R

       Rickz

       2022-08-16

       13 upvotes

       Check this out from Microsoft a Sample Question for MS-900 | https://docs.microsoft.com/en-us/certifications/resources/ms-900-sample-questions?azure-portal=true Question # 18 (Multiple Choice) Your company purchased a Microsoft 365 subscription and a Microsoft Azure support plan. As part of your governance and risk framework, your company only implements Azure services that have Azure support available. Which two services from Microsoft lifecycle can you implement? A. Private preview B. Public preview C. General Availability (GA) D. End of Support Answer: B, C Answer is D

    4. M

       MarisaSantin

       2021-07-26

       4 upvotes

       D is correct. Private preview – During this phase we invite a few customers to take part in early access to new concepts and features. This phase does not include formal support. Public preview – During this phase we allow any customer with the proper Azure Communication Services license to evaluate the new feature. Microsoft will supply support services during this phase, but normal service level agreements do not apply. Public preview features are identified through information banners in documentation at docs.microsoft.com, or through "beta" or "pre-release" labels on the application programming interfaces and software development kits. Generally available (GA) – After the public preview is completed, the feature is open for any licensed customer to use and is supported via all Microsoft support channels. Be aware when a new feature impacts existing functionality, it might change the way you or your users use the functionality. https://azure.microsoft.com/en-us/support/legal/preview-supplemental-terms/

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

MS-900 practice, question 1 of 25