Microsoft 365 Fundamentals (MS-900) Exam — Questions and Answers

Question 1: In Microsoft 365, what does 'zero-trust security' primarily assume about network traffic?

All internal traffic is safe by default
No user or device should be trusted by default, even inside the network (Correct answer)
Encrypted traffic is always trustworthy
Only external traffic requires verification

Correct answer: No user or device should be trusted by default, even inside the network

Zero-trust security operates on the principle of 'never trust, always verify,' requiring authentication and authorization for every request regardless of source.

Question 2: Which Microsoft 365 feature provides a centralized hub for monitoring your organization's security posture and recommending improvement actions?

Compliance Manager
Azure Security Center
Microsoft Secure Score (Correct answer)
Microsoft Defender for Endpoint

Correct answer: Microsoft Secure Score

Microsoft Secure Score is a measurement of an organization's security posture that provides recommended improvement actions to strengthen security.

Question 3: An administrator is looking for a way to measure the organization's security posture and get actionable recommendations for improvement. They want a centralized dashboard that provides a numerical score based on the implementation of security controls across identities, devices, and apps. Which feature within the Microsoft 365 Defender portal serves this function?

Threat Analytics
Service Trust Portal
Microsoft Secure Score (Correct answer)
Compliance Manager

Correct answer: Microsoft Secure Score

Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more recommended actions have been taken. It provides a centralized dashboard in the Microsoft 365 Defender portal to monitor and improve the security of Microsoft 365 identities, apps, and devices.

Question 4: What kind of support does Microsoft 365 offer to its users?

Support limited to weekends only
Self-help, forums, and 24/7 support options (Correct answer)
No support provided
One-time email response

Correct answer: Self-help, forums, and 24/7 support options

Microsoft 365 offers comprehensive support options to its users, ensuring assistance is available through various channels. This includes extensive self-help documentation and community forums for common issues, alongside professional 24/7 technical support for more critical problems, depending on the subscription level.

Question 5: Which feature helps protect Microsoft 365 users from phishing?

PowerPoint Animations
Outlook Themes
Microsoft Defender (Correct answer)
Excel Templates

Correct answer: Microsoft Defender

Microsoft Defender, particularly Microsoft Defender for Office 365, is a crucial feature that helps protect users from phishing attacks. It provides advanced threat protection capabilities, including safe attachments and safe links, which scan emails, links, and attachments for malicious content to prevent users from falling victim to phishing schemes.

Question 6: What is the primary purpose of Microsoft Intune in Microsoft 365?

Email filtering and anti-spam
Identity and access management
File storage and synchronization
Cloud-based endpoint management and mobile device management (Correct answer)

Correct answer: Cloud-based endpoint management and mobile device management

Microsoft Intune is a cloud-based service focused on mobile device management (MDM) and mobile application management (MAM) to help protect corporate data.

Question 7: An administrator of a Microsoft 365 Business Standard subscription needs to get help for a complex billing issue. Which of the following is the recommended primary method for an administrator to initiate a support request?

Calling the general Microsoft sales phone number.
Posting the question on the public community forums.
Creating a new service request through the Microsoft 365 admin center. (Correct answer)
Contacting a Microsoft retail store for assistance.

Correct answer: Creating a new service request through the Microsoft 365 admin center.

For administrators of business subscriptions, the designated method for requesting support is to create a service request via the 'Help & support' section within the Microsoft 365 admin center. This ensures the request is properly logged, tracked, and routed to the correct technical or billing support team. While community forums are a helpful resource, they are not the official channel for direct support, and other methods are less efficient.

Question 8: Newly minted college grads join the corporate world. To access Outlook and MS Teams, they are instructed to utilize their own phones. Which solution can aid in protecting the business data—which includes personal data—used in Office applications?

Microsoft Intune (Correct answer)
Microsoft Access
Microsoft Excel
Microsoft Power BI

Correct answer: Microsoft Intune

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). It allows organizations to manage and secure corporate resources and data on both company-owned and personal devices (BYOD). Intune can enforce policies to protect business data within Office applications on personal phones without fully controlling the entire device, making it ideal for this scenario.

Question 9: A small business with 25 employees is considering Microsoft 365. They want the flexibility to cancel subscriptions at any time without a long-term contract, even if it means a slightly higher price. Which licensing payment model best fits this requirement?

Enterprise Agreement
Cloud Solution Provider (CSP) annual commitment
Monthly commitment (Correct answer)
Pay-as-you-go

Correct answer: Monthly commitment

A monthly commitment term offers the greatest flexibility, allowing organizations to pay for their subscription on a month-to-month basis and cancel without penalty. This contrasts with an annual commitment, which typically offers a lower price but locks the customer in for a year. Enterprise Agreements are for larger organizations, and pay-as-you-go is more commonly associated with Azure consumption services rather than Microsoft 365 per-user licensing.

Question 10: Which stakeholder engagement strategy is MOST effective for MS-900 professionals?

Limit engagement to senior leadership
Inform stakeholders only after decisions are made
Engage only when approval is needed
Identify stakeholders early, understand their interests, and maintain regular communication (Correct answer)

Correct answer: Identify stakeholders early, understand their interests, and maintain regular communication

Early stakeholder identification with regular communication builds support and prevents surprises.

Question 11: What is the primary benefit of using Microsoft 365 from a security standpoint?

Advanced photo editing
Real-time language translation
Cloud-based threat protection and data security (Correct answer)
Video game development

Correct answer: Cloud-based threat protection and data security

Microsoft 365 offers robust, integrated cloud-based threat protection and data security features, including advanced anti-malware, anti-phishing, data loss prevention (DLP), and identity protection. These comprehensive security measures help organizations protect their data, devices, and users from evolving cyber threats in a dynamic cloud environment.

Question 12: What is the purpose of SharePoint in Microsoft 365?

Play games
Design graphics
Create personal blogs
Store and manage content across the organization (Correct answer)

Correct answer: Store and manage content across the organization

SharePoint in Microsoft 365 serves as a powerful platform for storing, organizing, sharing, and accessing information across an organization. It enables the creation of team sites, communication sites, and intranets, facilitating content management, document collaboration, and workflow automation. Its primary purpose is to be a central repository and collaboration hub for organizational content.

Question 13: Which Microsoft 365 app provides a platform for creating interactive web-based reports, presentations, and newsletters?

Sway (Correct answer)
OneNote
Excel Online
SharePoint Online

Correct answer: Sway

Microsoft Sway is a digital storytelling app in Microsoft 365 that helps users create and share interactive reports, presentations, newsletters, and personal stories. It offers a modern, responsive design that adapts to any screen size, making content engaging and easy to consume across devices.

Question 14: An external auditor has requested documentation proving that Microsoft's cloud services adhere to specific international standards, such as ISO 27001 and SOC 2. Where can a Microsoft 365 administrator find these official audit reports and compliance certifications?

Microsoft Entra admin center
Service Trust Portal (Correct answer)
Microsoft Purview compliance portal
Microsoft Learn documentation

Correct answer: Service Trust Portal

The Service Trust Portal is the central repository for Microsoft's compliance and trust-related documentation. It provides access to independent third-party audit reports, certifications, and information about how Microsoft's cloud services comply with various global standards and regulations.

Question 15: Which cloud model delivers software over the internet?

Platform as a Service (PaaS)
Network as a Service (NaaS)
Infrastructure as a Service (IaaS)
Software as a Service (SaaS) (Correct answer)

Correct answer: Software as a Service (SaaS)

Software as a Service (SaaS) is a cloud computing model where a third-party provider hosts applications and makes them available to customers over the internet. Users access the software via a web browser or client application, without needing to manage the underlying infrastructure, operating systems, or platform components.

Question 16: Which concept describes Microsoft's commitment to giving customers control over their own data stored in Microsoft cloud services?

Customer data ownership and privacy (Correct answer)
Data classification
Shared responsibility model
Data residency

Correct answer: Customer data ownership and privacy

Microsoft's privacy commitment ensures customers own their data, Microsoft does not mine it for advertising, and customers control how it is used.

Question 17: What is the maximum number of users supported under Microsoft 365 Business plans?

300 (Correct answer)
200
500
100

Correct answer: 300

Microsoft 365 Business plans support a maximum of 300 users; organizations with more users must use Enterprise plans.

Question 18: A business introduces Microsoft 365. The business intends to employ sensitivity labeling. You must determine the sensitivity labels' capabilities. What three features do sensitivity labels have? Each right response offers a piece of the answer.

Sensitivity labels can be customized (Correct answer)
Sensitivity labels can be used to encrypt documents (Correct answer)
Sensitivity labels can trigger disposition reviews
Sensitivity labels can be ensure that a document is retained indefinitely
Sensitivity labels can automatically be applied to documents (Correct answer)

Correct answer: Sensitivity labels can be customized

Sensitivity labels in Microsoft 365 allow organizations to classify and protect sensitive data across their digital estate. They are highly customizable, enabling organizations to define labels that match their specific data classification schemes. These labels can enforce protective actions like encryption, access restrictions, and visual markings, and can also be configured for automatic application based on content or user actions, ensuring consistent data protection.

Question 19: How does the MS-900 body of knowledge relate to daily professional practice?

It is only for academic research
It is theoretical with limited application
It provides the foundational framework guiding decision-making and standard practices (Correct answer)
It only applies during exams

Correct answer: It provides the foundational framework guiding decision-making and standard practices

The body of knowledge provides the framework guiding daily decision-making and practices.

Question 20: What is the primary purpose of Microsoft 365?

Hardware management
Web hosting services
Productivity, collaboration, and cloud services (Correct answer)
Cryptocurrency trading

Correct answer: Productivity, collaboration, and cloud services

The primary purpose of Microsoft 365 is to provide a comprehensive suite of productivity, collaboration, and cloud services. It integrates familiar desktop applications like Word and Excel with cloud-based services such as OneDrive, Exchange Online, and Microsoft Teams, enabling seamless work, communication, and data storage across devices.

Question 21: What is Azure Active Directory used for in Microsoft 365?

Designing presentations
User identity and access management (Correct answer)
Creating documents
Project scheduling

Correct answer: User identity and access management

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. In Microsoft 365, it is fundamental for managing user identities, authenticating users, and controlling their access to various services and resources. This ensures that only authorized individuals can access specific applications and data within the Microsoft 365 ecosystem.

Question 22: How should a MS-900 professional manager address underperformance?

Provide timely, specific feedback with support and a clear improvement plan (Correct answer)
Immediately reassign the individual
Address publicly in team meetings
Ignore it until formal reviews

Correct answer: Provide timely, specific feedback with support and a clear improvement plan

Timely, specific feedback with support gives individuals a fair opportunity to improve.

Question 23: An organization wants to proactively protect its users from malicious URLs in emails and Microsoft Teams chats. When a user clicks a link, the service should check it in real-time against a list of known malicious sites and block access if a threat is detected. Which Microsoft 365 Defender feature provides this capability?

Anti-phishing policies
Microsoft Defender for Endpoint
Safe Attachments
Safe Links (Correct answer)

Correct answer: Safe Links

Microsoft Defender for Office 365 includes the Safe Links feature, which provides time-of-click verification of URLs in emails and Office documents. It proactively protects users from malicious links by dynamically blocking them while allowing access to safe links.

Question 24: Which Microsoft 365 plan is suitable for enterprise use with voice capabilities?

Microsoft 365 Basic
Microsoft 365 E5 (Correct answer)
Microsoft 365 Developer
Microsoft 365 Family

Correct answer: Microsoft 365 E5

Microsoft 365 E5 is the premium enterprise plan that integrates advanced voice capabilities, such as Phone System and Audio Conferencing, directly within Microsoft Teams. This makes it the ideal choice for large organizations seeking a comprehensive communication solution alongside their productivity and security needs.

Question 25: What does the term 'cloud elasticity' refer to?

Scaling resources based on current demand (Correct answer)
Fixed resource allocation
Backup frequency
Manual configuration changes

Correct answer: Scaling resources based on current demand

Cloud elasticity refers to the ability of cloud computing systems to dynamically scale resources up or down based on current demand. This means that computing power, storage, and network capacity can automatically expand during peak usage and contract during low usage. This flexibility ensures optimal performance and cost efficiency by only consuming resources when needed.

Question 26: What is multi-factor authentication (MFA)?

Single password login
Access using a username only
Disable login protection
Multiple verification steps for secure access (Correct answer)

Correct answer: Multiple verification steps for secure access

Multi-factor authentication (MFA) is a security measure that requires users to provide two or more verification factors to gain access to an account or system. Instead of just a password, it might also require a code from a mobile app, a fingerprint, or a physical token. This significantly enhances security by making it much harder for unauthorized users to access accounts, even if they know a password.

Question 27: Which tool allows collaboration in real-time within Microsoft 365?

Notepad
Teams (Correct answer)
Access
Paint

Correct answer: Teams

Microsoft Teams is specifically designed as a hub for teamwork, enabling real-time collaboration through chat, video conferencing, and shared file editing. Its integrated features allow multiple users to work on documents simultaneously, communicate instantly, and conduct virtual meetings. This makes it the primary tool for dynamic, real-time interaction within Microsoft 365.

Question 28: What is a key benefit of cloud computing?

Limited resource availability
Increased physical infrastructure
Scalability and flexibility with lower upfront costs (Correct answer)
Fixed hardware requirements

Correct answer: Scalability and flexibility with lower upfront costs

A key benefit of cloud computing is its inherent scalability and flexibility, allowing users to easily adjust computing resources up or down as demand changes. This model also significantly lowers upfront costs by eliminating the need for large initial investments in hardware and infrastructure, as resources are consumed on a pay-as-you-go basis.

Question 29: Your business intends to switch to Microsoft Azure and Microsoft 365. <br> You must locate a cloud provider that supports the deployment of a Linux virtual machine. <br> Which of the following models should you pick?

Infrastructure as a Service (IaaS) (Correct answer)
Container as a Service (CaaS)
Platform as a Service (PaaS)
Software as a Service (SaaS)

Correct answer: Infrastructure as a Service (IaaS)

Infrastructure as a Service (IaaS) provides virtualized computing resources, including virtual machines, networks, and storage, over the internet. This model gives customers the most control over their operating systems and applications, making it the appropriate choice for deploying and managing a specific operating system like a Linux virtual machine. The customer is responsible for the OS and above.

Question 30: Which Microsoft 365 app enables organizations to create and share video content internally, similar to a private YouTube?

Microsoft Viva
Microsoft Sway
Microsoft Stream (Correct answer)
Microsoft Forms

Correct answer: Microsoft Stream

Microsoft Stream is the enterprise video service in Microsoft 365 for uploading, sharing, and managing internal video content.

Question 31: For your Azure solution, your organization uses Platform as a Service (PaaS). <br> Which of the following are components that your IT department is in charge of?

Servers
Databases
Applications (Correct answer)
Networks

Correct answer: Applications

In a Platform as a Service (PaaS) model, Microsoft manages the underlying infrastructure and platform components, including networks, servers, and databases. The customer's IT department is responsible for the applications they develop, deploy, and manage on that platform. This includes the application code, configuration, and data, making 'Applications' the correct component under their charge.

Question 32: Which of the following is a benefit of Microsoft 365 subscription model?

Hardware upgrades
Manual updates required
One-time purchase
Automatic updates and feature enhancements (Correct answer)

Correct answer: Automatic updates and feature enhancements

A key benefit of the Microsoft 365 subscription model is that it includes automatic updates and continuous feature enhancements. Subscribers always have access to the latest versions of applications and services without needing to purchase new software or manually install updates. This ensures users benefit from the newest security features, bug fixes, and productivity tools as soon as they are released.

Question 33: What is the primary function of Microsoft Purview Audit (formerly Office 365 Audit Log)?

Blocking spam messages
Recording user and admin activities across Microsoft 365 services (Correct answer)
Encrypting sensitive emails
Managing device compliance policies

Correct answer: Recording user and admin activities across Microsoft 365 services

Microsoft Purview Audit captures a detailed log of user and administrator activities across Microsoft 365 services for forensic and compliance investigations.

Question 34: Which compliance standard does Microsoft 365 help customers align with?

CSS
GDPR and ISO 27001 (Correct answer)
HTML5
Flash

Correct answer: GDPR and ISO 27001

Microsoft 365 is designed with robust compliance capabilities to help customers align with various global and industry-specific regulatory standards. Notably, it supports compliance with regulations like the General Data Protection Regulation (GDPR) and international standards such as ISO 27001. Microsoft provides tools and certifications to assist organizations in meeting these stringent requirements.

Question 35: What is the function of Microsoft Planner in Microsoft 365?

Scheduling video calls
Managing email inboxes
Visual task and project management using Kanban-style boards (Correct answer)
Monitoring device compliance

Correct answer: Visual task and project management using Kanban-style boards

Microsoft Planner provides visual, Kanban-style task and project management boards integrated into Microsoft 365 and Teams.

Question 36: What tool in the Microsoft 365 admin center provides insights into how employees use Microsoft 365 services?

Microsoft Secure Score
Microsoft 365 Usage Reports (Correct answer)
Microsoft Compliance Manager
Azure Monitor

Correct answer: Microsoft 365 Usage Reports

Microsoft 365 Usage Reports in the admin center give administrators data on how employees are adopting and using Microsoft 365 services.

Question 37: Which Microsoft 365 app is used for document creation?

Word (Correct answer)
Yammer
Teams
Power BI

Correct answer: Word

Microsoft Word is the industry-standard application within Microsoft 365 specifically designed for creating, editing, and formatting text-based documents. It offers a comprehensive suite of tools for writing reports, letters, resumes, and other professional or personal documents. While other apps have different primary functions, Word is dedicated to document creation.

Question 38: What is the BEST strategy for resource allocation in Microsoft 365 Fundamentals Certification management?

Focus resources only on largest tasks
Match resources to priorities based on needs, risks, and strategic goals (Correct answer)
Keep significant reserves without deployment
Allocate all resources equally

Correct answer: Match resources to priorities based on needs, risks, and strategic goals

Effective resource allocation matches resources to priorities based on assessment of needs.

Question 39: What does the term 'data residency' mean in the context of Microsoft 365?

The geographic location where customer data is stored (Correct answer)
The retention period for deleted items
The process of encrypting data at rest
The backup frequency for tenant data

Correct answer: The geographic location where customer data is stored

Data residency refers to specifying and controlling the geographic region where Microsoft stores your organization's data at rest.

Question 40: What is Power Virtual Agents used for?

Monitoring network performance
Running automated IT scripts on servers
Building AI-powered chatbots without writing code (Correct answer)
Creating virtual desktop environments

Correct answer: Building AI-powered chatbots without writing code

Power Virtual Agents allows organizations to build intelligent chatbots using a guided, no-code graphical interface, without needing data scientists or developers.

Microsoft 365 Fundamentals (MS-900) Exam

The MS-900 exam certifies foundational knowledge of cloud services and the Microsoft 365 cloud model, including core Microsoft 365 components and services.

Questions

45 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learn.microsoft.com — Exam format, eligibility, time limit, renewal, score validity, retake policy, passing score, score release, exam information · verified Nov 2026
home.pearsonvue.com — Test delivery · verified Oct 2026