Free MS-900 Fundamentals Questions and Answers — Questions and Answers
Question 1: A business employs Microsoft 365. To proactively look for threats across users' devices and applications, the organization needs security experts to use the Microsoft 365 Defender portal. Which remedy ought to be suggested?
- Hunting (Correct answer)
- Incidents and alerts
- Secure score
- Threat analytics
Correct answer: Hunting
In the Microsoft 365 Defender portal, "Hunting" refers to the proactive search for threats and vulnerabilities across an organization's environment. Security experts use hunting capabilities to investigate potential threats that automated systems might have missed, leveraging advanced queries and data to uncover sophisticated attacks. This allows for early detection and mitigation of emerging threats before they cause significant damage.
Question 2: Microsoft 365 is implemented by a business. The company's security team requires a solution that satisfies the following criteria so they can comprehend threat signals for the Microsoft 365 product and services: <br> ‥ Provide the first line of defense in the stack <br> ‥ Automated investigation and remediation of breaches <br> Provide capabilities for network protection <br> Which solution should you recommend?
- Microsoft Defender for Office 365
- Microsoft Defender for Endpoint (Correct answer)
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
Correct answer: Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help corporate networks prevent, detect, investigate, and respond to advanced threats. It provides capabilities like endpoint detection and response (EDR), automated investigation and remediation, and network protection, acting as a crucial first line of defense for devices. This solution directly addresses the need for comprehensive threat protection and automated response on endpoints.
Question 3: A business employs Microsoft 365. Multiple suspected attacks on staff accounts are reported by the business. The organization needs a solution that offers the following to stop future attacks: <br> ‥ Monitors the behavior of employees <br> ‥ Reduces surface attacks on employee accounts <br> ‥ Identifies and investigates suspicious attacks on employee accounts <br> You need to recommend a solution <br> Which Microsoft Defender service should you recommend?
- Microsoft Defender for Cloud Apps
- Microsoft Defender for End point
- Microsoft Defender for Identify (Correct answer)
- Microsoft Defender for Office 365
Correct answer: Microsoft Defender for Identify
Microsoft Defender for Identity (formerly Azure Advanced Threat Protection) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions. It monitors user behavior, detects suspicious activities like pass-the-hash or golden ticket attacks, and helps reduce the attack surface on identity infrastructure. This makes it ideal for protecting employee accounts from identity-based attacks.
Question 4: A business is putting Microsoft 365 Defender services into place. An auditor for security wants to look around the Microsoft 365 Defender website. The security auditor needs to be given a role according to the least privilege concept. Which position should you fill?
- Global Reader
- Security Reader (Correct answer)
- Global Administrator
- Security Administrator
Correct answer: Security Reader
The principle of least privilege dictates that users should only be granted the minimum permissions necessary to perform their job functions. A Security Reader role in Microsoft 365 Defender allows an auditor to view security-related information, alerts, and reports without having the ability to make changes or reconfigure settings. This role provides the required visibility for auditing while adhering to security best practices.
Question 5: Microsoft's virtualization services are being evaluated by the company. What distinguishes Windows 3365 specifically?
- Users can connect to a virtual machine by using the Microsoft Remote Desktop app
- Users can connect to a virtual machine by using a web site
- A virtual machine can authenticate users to active Directory Domain Services (AD DS)
- A virtual machine can be provisioned from a custom image
- A virtual machine is automatically provisioned after assigning a licensed to a user (Correct answer)
Correct answer: A virtual machine is automatically provisioned after assigning a licensed to a user
Windows 365 is a cloud PC service that provides a personalized, secure, and scalable Windows experience from the Microsoft cloud to any device. A key differentiator is its simplicity: once a user is assigned a Windows 365 license, a Cloud PC (virtual machine) is automatically provisioned for them. This eliminates the complex setup and management typically associated with traditional virtual desktop infrastructure (VDI), offering a streamlined user experience.
Question 6: A business intends to use Microsoft 365 to develop an insider risk solution. The business must put into practice a solution that satisfies the following criteria: <br> <br> ‥ Uses machine learning to identify email risks <br> ‥ Provides workflows to remediate email risks <br> ‥ Provides a dashboard to display email risks, actions, and trends. <br> You need to identify a solution that meets the requirements. Which solution should you select?
- Communication compliance policies (Correct answer)
- Core eDiscovery cases
- Advanced eDiscovery cases
- Sensitivity labels
Correct answer: Communication compliance policies
Microsoft 365 Communication compliance helps organizations detect, capture, and act on inappropriate messages in their organization. It uses machine learning to identify potential risks in communications, including email, Teams, and other platforms, based on defined policies. It provides dashboards for monitoring, and workflows for investigation and remediation, making it an ideal solution for managing insider risks related to email content.
Question 7: A business introduces Microsoft 365. The business intends to employ sensitivity labeling. You must determine the sensitivity labels' capabilities. What three features do sensitivity labels have? Each right response offers a piece of the answer.
- Sensitivity labels can be customized (Correct answer)
- Sensitivity labels can be ensure that a document is retained indefinitely
- Sensitivity labels can trigger disposition reviews
- Sensitivity labels can be used to encrypt documents (Correct answer)
- Sensitivity labels can automatically be applied to documents (Correct answer)
Correct answer: Sensitivity labels can be customized
Sensitivity labels in Microsoft 365 allow organizations to classify and protect sensitive data across their digital estate. They are highly customizable, enabling organizations to define labels that match their specific data classification schemes. These labels can enforce protective actions like encryption, access restrictions, and visual markings, and can also be configured for automatic application based on content or user actions, ensuring consistent data protection.
Question 8: Which service in Microsoft 365 allows users to create, edit, and collaborate on documents, spreadsheets, and presentations in real-time?
- Microsoft Teams
- OneDrive for Business (Correct answer)
- SharePoint Online
- Microsoft Word
Correct answer: OneDrive for Business
OneDrive for Business is Microsoft's cloud storage service for individuals within an organization. It allows users to store, sync, and share their personal work files securely. A key feature is its integration with Office applications, enabling real-time co-authoring and collaboration on documents, spreadsheets, and presentations directly from the cloud.
Question 9: Which Microsoft 365 app provides a hub for teamwork, communication, and collaboration, offering features such as chat, meetings, and file sharing?
- Microsoft Outlook
- Microsoft Word
- Microsoft Excel
- Microsoft Teams (Correct answer)
Correct answer: Microsoft Teams
Microsoft Teams is a unified communication and collaboration platform that combines persistent workplace chat, video meetings, file storage, and application integration. It serves as a central hub for teamwork, allowing groups to communicate, share files, and collaborate on projects in real-time. Its comprehensive feature set makes it essential for modern team collaboration.
Question 10: Which Microsoft 365 subscription plan includes the full suite of Office applications (Word, Excel, PowerPoint, etc.) for both desktop and online use?
- Microsoft 265 Business Basic
- Microsoft 365 Business Standard (Correct answer)
- Microsoft 365 Apps for Business
- Microsoft 365 Business Premium
Correct answer: Microsoft 365 Business Standard
Microsoft 365 Business Standard is designed for small and medium-sized businesses and includes the full suite of desktop Office applications (Word, Excel, PowerPoint, Outlook, Publisher, Access) along with online versions. It also provides business services like Exchange, SharePoint, and Teams. This plan offers a comprehensive set of productivity tools for both installed and web-based use.
Question 11: What is the purpose of Azure Active Directory in Microsoft 365?
- It provides advanced analytics for Microsoft 365 services.
- It allows users to access their personal OneDrive storage.
- It manages user identities and access to resources across Microsoft 365 services. (Correct answer)
- It offers a platform for creating custom applications.
Correct answer: It manages user identities and access to resources across Microsoft 365 services.
Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service. It provides a central directory for managing user identities, groups, and devices, and controls access to Microsoft 365 services and other cloud applications. Azure AD is fundamental to authentication, authorization, and single sign-on capabilities across the entire Microsoft 365 ecosystem.
Question 12: Which Microsoft 365 security feature helps protect against phishing attacks by identifying and preventing suspicious links and attachments in emails?
- Microsoft Intune
- Advanced Threat Protection (ATP) (Correct answer)
- Data Loss Prevention (DLP)
- Azure Information Protection
Correct answer: Advanced Threat Protection (ATP)
Microsoft Defender for Office 365, formerly known as Advanced Threat Protection (ATP), is a cloud-based email filtering service that helps protect against advanced threats like phishing, spoofing, and business email compromise. It uses features like Safe Links to scan URLs and Safe Attachments to detonate suspicious files in a sandbox environment, preventing malicious content from reaching users. This proactive protection is crucial for safeguarding against email-borne threats.
Question 13: Which Microsoft 365 service allows users to create, manage, and share documents, as well as collaborate on them with others in real time?
- OneDrive for Business
- Microsoft Word
- SharePoint Online (Correct answer)
- Microsoft Teams
Correct answer: SharePoint Online
SharePoint Online is a cloud-based service that helps organizations share and manage content, knowledge, and applications. It provides a robust platform for creating team sites, intranets, and document libraries, enabling users to store, organize, and collaborate on documents and files. Its features facilitate real-time co-authoring and version control, making it central to collaborative document management.
Question 14: What is the primary purpose of Microsoft Intune in Microsoft 365?
- It provides advanced analytics for Office applications.
- It allows users to schedule meetings and manage calendars.
- It manages and secures devices used by employees. (Correct answer)
- It offers a platform for creating SharePoint sites.
Correct answer: It manages and secures devices used by employees.
Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Its primary purpose is to manage and secure the devices (laptops, smartphones, tablets) that employees use to access company data and applications. Intune helps enforce security policies, deploy applications, and protect corporate information across various device types.
Question 15: Which Microsoft 365 service provides a secure and encrypted platform for sending, receiving, and storing emails?
- Microsoft Exchange Online (Correct answer)
- Microsoft Outlook
- Microsoft Teams
- OneDrive for Business
Correct answer: Microsoft Exchange Online
Microsoft Exchange Online is the cloud-based version of Microsoft's Exchange Server, providing hosted email, calendar, and contacts services. It offers a secure and encrypted platform for sending, receiving, and storing emails, with built-in features for spam filtering, malware protection, and data loss prevention. It is the backbone of email communication within Microsoft 365.
Question 16: What is the purpose of Microsoft 365 compliance center?
- It offers a platform for managing and securing devices.
- It provides advanced analytics for Office applications.
- It allows organizations to create and manage SharePoint sites.
- It helps organizations manage compliance and data protection efforts. (Correct answer)
Correct answer: It helps organizations manage compliance and data protection efforts.
The Microsoft 365 compliance center (now part of the Microsoft Purview compliance portal) is a unified portal that helps organizations manage their compliance and data protection needs. It provides tools for data governance, eDiscovery, insider risk management, data loss prevention, and privacy management. Its purpose is to help organizations meet regulatory requirements and protect sensitive data effectively.
Free MS-900 Fundamentals Questions and Answers
A business employs Microsoft 365.
To proactively look for threats across users' devices and applications, the organization needs security experts to use the Microsoft 365 Defender portal.
Which remedy ought to be suggested?