Microsoft MS-900 Online Practice Questions and Exam Preparation

Microsoft MS-900 Online Questions & Answers

• Question 411:

  Your company has a Microsoft Office 365 subscription.

  As an administrator for this subscription, you are required to configure the use of a cloud security feature that allows for emails and documents to be classified and labeled.

  Which of the following is the feature you should use?

  A. Microsoft Azure Information Protection.
  B. Microsoft Azure AD Identity Protection.
  C. Microsoft Azure AD Privilege Identity Protection.
  D. Intune App Protection.
  A. Microsoft Azure Information Protection.

  ---

  Explanation

  References:

  https://www.microsoft.com/en-us/itshowcase/using-azure-information-protection-to-classify-and-label-corporate-data

• Question 412:

  DRAG DROP

  An organization is considering migrating resources to the cloud. The company does not plan to deploy Microsoft Azure ExpressRoute or site-to-site VPNs.

  You need to identify which workloads you can migrate to the cloud.

  Which workloads you can migrate to the cloud? To answer, drag the appropriate actions to the correct workloads. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

• Question 413:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

• Question 414:

  A company uses Microsoft 365 services. The company is evaluating multi-factor authentication (MFA) methods.

  You need to determine which MFA methods are supported in Microsoft 365.

  Which three methods are supported? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. verification code sent in a phone call
  B. custom security question
  C. verification code sent in a text message
  D. Microsoft Authenticator smart phone app
  E. biometric retinal scanner
  A. verification code sent in a phone call
  C. verification code sent in a text message
  D. Microsoft Authenticator smart phone app

  ---

  Explanation

  What authentication and verification methods are available in Azure Active Directory?

  Authentication method strength and security.

  When you deploy features like Azure AD Multi-Factor Authentication in your organization, review the available authentication methods. Choose the methods that meet or exceed your requirements in terms of security, usability, and availability.

  Where possible, use authentication methods with the highest level of security.

  The following table outlines the security considerations for the available authentication methods. Availability is an indication of the user being able to use the authentication method, not of the service availability in Azure AD.

  References:

  https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

• Question 415:

  HOTSPOT

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection

• Question 416:

  A company is evaluating Microsoft Azure Conditional Access policies.

  You need to determine which scenarios Conditional Access policies support.

  Which three scenarios should you select? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Multi-factor authentication
  B. Self-service password reset capabilities
  C. Hybrid Azure Active Directory joined device
  D. Block access to Microsoft 365 services for unverified users
  E. BitLocker deployment
  A. Multi-factor authentication
  C. Hybrid Azure Active Directory joined device
  D. Block access to Microsoft 365 services for unverified users

  ---

  Explanation

  Azure Conditional Access evaluates signals (user, device, location, risk) and enforces access controls through policy decisions.

  Access controls include:

  Block access (most restrictive)

  Grant access with one or more conditions, such as: Require multi-factor authentication Require device to be marked as compliant Require Hybrid Azure AD joined device Require approved client app Require app protection policy

  Conditional Access can also integrate with Microsoft Entra ID Protection to evaluate user risk and sign-in risk. Based on this risk, policies can block access or require additional controls (for example, MFA).

  Therefore:

  A is correct because Conditional Access can require multi-factor authentication.

  C is correct because Conditional Access can require a Hybrid Azure AD joined device.

  D is correct because Conditional Access can block access to Microsoft 365 services based on conditions such as user risk or compliance status.

• Question 417:

  DRAG DROP

  You are a Microsoft 365 administrator for a company.

  You need to recommend an appropriate Microsoft Office 365 plan for a customer that minimizes costs.

  Which subscription plans should you recommend? To answer, drag the appropriate plans to the correct features. Each plan may be used once, more than once, or not at all.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  

  ---

  References:

  https://products.office.com/en-us/business/compare-more-office-365-for-business-plans

• Question 418:

  A company has offices in multiple regions. The company has a Microsoft 365 subscription.

  The company is developing a line-of-business (LOB) app. The app must meet the following requirements.

  1. Ensure availability regardless of an employee's location.

  2. Track the devices on which the app is installed by using Microsoft cloud services.

  3. Minimize costs.

  What should you do?

  A. Copy the app to Microsoft OneDrive. Allow employees to download and install the app from One Drive.
  B. Deploy the app to all devices by using Microsoft Intune.
  C. Copy the app to local servers. Allow employees to download and install the app from the servers.
  D. Deploy the app to all devices by using group policy.
  B. Deploy the app to all devices by using Microsoft Intune.

  ---

  Explanation

  References:

  https://docs.microsoft.com/en-us/mem/intune/apps/apps-windows-10-app-deployhttps://docs.microsoft.com/en-us/mem/intune/apps/apps-monitor

• Question 419:

  HOTSPOT

  A company uses Microsoft 365.

  The company requires the sales team to record all live demonstrations for training purposes.

  You need to select the Microsoft tool that the sales team should use for each requirement.

  Which tool should you select for each requirement? To answer, select the appropriate tools in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  References:

  https://docs.microsoft.com/en-us/microsoftteams/teams-live-events/set-up-for-teams-live-eventshttps://docs.microsoft.com/en-us/stream/portal-add-subtitles-captions

• Question 420:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  You have been tasked with deploying Microsoft Office to company using a subscription-based licensing model.

  The version of Office you deploy should allow for Office application settings to be enforced via group policy.

  Solution: You deploy Office Professional Plus 2016.

  Does the solution meet the goal?

  A. Yes
  B. No
  B. No

  ---

  Explanation

  References:

  https://products.office.com/en-za/business/compare-more-office-365-for-business-plans