Microsoft MS-900 Online Practice Questions and Exam Preparation

Microsoft MS-900 Online Questions & Answers

• Question 311:

  HOTSPOT

  A company is evaluating Microsoft 365.

  You need to determine the Microsoft Viva analytics capabilities.

  Select the answer that correctly completes the sentence.

  

  

• Question 312:

  A company plans to deploy Microsoft 365 Apps to its employees.

  The deployment will include OneDrive.

  You need to describe the Copilot experience that the employees will be able to use when they work with OneDrive on the web.

  How should you describe the Copilot in OneDrive experience?

  A. encrypts files for security
  B. works offline
  C. edits and organizes files automatically
  D. provides file insights
  D. provides file insights

• Question 313:

  HOTSPOT

  A company is evaluating Microsoft 365.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: Yes

  You can integrate Microsoft Defender for Endpoint with Microsoft Defender for Cloud Apps.

  Defender for Cloud Apps uses the traffic information collected by Defender for Endpoint about the cloud apps and services being accessed from IT-managed devices specified.

  Box 2: Yes

  Plan your enterprise deployment of Microsoft 365 Apps

  Step 1 - Choose how to deploy First choose which deployment tool to use and whether to install from the cloud or from a local source on your network.

  Options include:

  * Deploy from a local source with the Office Deployment Tool: Manage your deployment with the ODT, and download and deploy from a local source on your network.

  * Deploy from a local source with Configuration Manager: Manage your deployment with Configuration Manager, and download and deploy from distribution points on your network.

  Box 3: Yes

  You can also use Configuration Manager to deploy from local Distribution points. This reduces the network load on your internet links.

  References:

  https://learn.microsoft.com/en-us/defender-cloud-apps/mde-integrationhttps://learn.microsoft.com/en-us/deployoffice/plan-microsoft-365-apps

• Question 314:

  A company has a Microsoft 365 subscription that includes Office apps.

  A user has identified a new issue while working with an app. When the user attempts to create a support request, the following message displays:

  

  You need to determine the cause of the error message.

  What is the cause?

  A. The user account is disabled.
  B. The user does not have a license assigned for the app.
  C. The user account is not a member of the global admin role.
  D. The company does not have Premier support.
  C. The user account is not a member of the global admin role.

• Question 315:

  DRAG DROP

  A company is evaluating Microsoft 365 solutions.

  Match each product to its Copilot capability. To answer, move the appropriate product from the column on the left to its Copilot capability on the right. You may use each product once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place:

  

  

• Question 316:

  HOTSPOT

  A company is evaluating the capabilities of Windows 365 and Azure Virtual Desktop.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Box 1: No

  Microsoft Intune is a cloud-based endpoint management solution. It manages user access and simplifies app and device management across your many devices, including mobile devices, desktop computers, and virtual endpoints. You can protect access and data on organization-owned and users personal devices.

  Box 2: Yes

  Set up Azure Virtual Desktop (formerly Windows Virtual Desktop) in minutes to enable secure remote work. Provide the familiarity and compatibility of Windows 11 with the new scalable multi-session experience for your end users and save costs by using existing eligible Windows licenses. Manage your end-to-end Azure Virtual Desktop deployment alongside other Azure services within the Azure portal.

  Box 3: Yes

  The Azure Virtual Desktop service recommends FSLogix profile containers as a user profile solution. FSLogix is designed to roam profiles in remote computing environments, such as Azure Virtual Desktop. It stores a complete user profile in a single container. At sign in, this container is dynamically attached to the computing environment using natively supported Virtual Hard Disk (VHD) and Hyper-V Virtual Hard disk (VHDX). The user profile is immediately available and appears in the system exactly like a native user profile.

  References:

  https://learn.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune

• Question 317:

  You are an IT director that is evaluating the capabilities of Microsoft Viva Insights.

  You need to describe the capabilities to the key stakeholders.

  Which three capacities describe Viva Insights? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Viva Insights integrates directly with Microsoft Yammer.
  B. You can add Viva Insights as an app in Microsoft Teams.
  C. Microsoft Outlook includes an add-in for Viva Insights.
  D. A web-based dashboard is available for Viva Insights.
  E. Insights integrates directly with Microsoft Bookings.
  B. You can add Viva Insights as an app in Microsoft Teams.
  C. Microsoft Outlook includes an add-in for Viva Insights.
  D. A web-based dashboard is available for Viva Insights.

• Question 318:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct match is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

• Question 319:

  A company uses Microsoft 365.

  The company requires that you implement solutions for explicit verification.

  You need to recommend solutions that meet the requirements.

  Which three solutions should you recommend? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Multifactor authentication (MFA)
  B. Just-in-time [JIT) access
  C. Passwordless authentication
  D. Block legacy authentication
  E. Privileged Access Workstations (PAW) devices
  A. Multifactor authentication (MFA)
  C. Passwordless authentication
  D. Block legacy authentication

  ---

  Explanation

  Option A: MFA requires users to provide two forms of verification, such as a user password plus a notification from the Microsoft Authenticator app or a phone call. MFA greatly reduces the risk that stolen credentials can be used to access your environment. Microsoft 365 uses the Azure AD Multi-Factor Authentication service for MFA-based sign-ins.

  Apart from using passwords, Azure AD Multifactor Authentication adds another layer of protection. You can force users to use SMS, calls, authenticator app, or even go passwordless. The various means to do this are displayed here with the level of safety for each.

  Option C: Passwordless authentication is by far the safest. Azure AD MFA can be deployed by creating conditional access(CA) policies. When these conditions are met, users would be required to authenticate using MFA.

  Option D: Block Legacy Authentication

  Legacy authentication protocols like POP3, IMAP4, EAS, Outlook Anywhere, EWA, and others pose a security risk. Hence these must be disabled in your tenant. Again you can create a CA policy to achieve this.

  Incorrect_Note E: Privileged Access Workstation (PAW) - This is the highest security configuration designed for extremely sensitive roles that would have a significant or material impact on the organization if their account was compromised. The PAW configuration includes security controls and policies that restrict local administrative access and productivity tools to minimize the attack surface to only what is absolutely required for performing sensitive job tasks. This makes the PAW device difficult for attackers to compromise because it blocks the most common vector for phishing attacks: email and web browsing. To provide productivity to these users, separate accounts and workstations must be provided for productivity applications and web browsing. While inconvenient, this is a necessary control to protect users whose account could inflict damage to most or all resources in the organization.

  References:

  https://petri.com/how-to-deploy-zero-trust-identity-security/https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/microsoft-365-policies-configurations

• Question 320:

  DRAG DROP

  CompanyB, and CompanyC use cloud resources as shown in the following table.

  

  Match each cloud model to the appropriate company. To answer, drag the appropriate cloud model from the column on the left to the company on the right. Each cloud model may be used once, more than once, or not at all.

  NOTE: Each correct match is worth one point.

  Select and Place: