Free MS-900 Questions and Answers — Questions and Answers
Question 1: You work for a corporation as the Microsoft 365 administrator. <br> Your firm intends to establish a new office in the California. <br> You must give reports on penetration testing and security assessments (or the new office). Where can you find the necessary reports?
- The Services Trust portal's Compliance Manager page
- The Security and Compliance portal's Data Governance page.
- The Services Trust portal's Regional Compliance page (Correct answer)
- The Security and Compliance portal's Data Loss Prevention page
Correct answer: The Services Trust portal's Regional Compliance page
The Microsoft Service Trust Portal is the central resource for all Microsoft's compliance, security, and privacy information. To find reports on penetration testing and security assessments, especially those relevant to specific regions or services, you would navigate to the Service Trust Portal. Within this portal, sections like 'Regional Compliance' or 'Audit Reports' provide access to the necessary documentation and reports.
Question 2: Data is available to anonymous users when you authorize external access through the Microsoft 365 admin site. <br> Examine the italicized text. Select "No adjustment is required" if it corrects the statement. If the assertion is inaccurate, choose the option that corrects the statement.
- Everyone group is applied to all shares with full control
- you must configure Active Directory Federation Services (AD FS)
- users can send sharing invitations for specific content (Correct answer)
- No change needed.
Correct answer: users can send sharing invitations for specific content
Authorizing external access through the Microsoft 365 admin site does not automatically make data available to anonymous users. Instead, it enables your organization's users to send sharing invitations to external individuals. These external users can then access specific content that has been explicitly shared with them via these invitations, maintaining control over what data is exposed externally.
Question 3: Your business intends to get a Microsoft 365 membership. Intranet and team sites are required by the firm. <br> You must choose a Microsoft 365 subscription that includes the capabilities you require. <br> Which two subscriptions do you have access to? Each accurate response provides a comprehensive solution.
- Office 365 Business Premium (Correct answer)
- Office 365 Home
- Office 365 Business Essentials (Correct answer)
- Office 365 Business
Correct answer: Office 365 Business Premium
For a company requiring intranet and team sites, both Office 365 Business Premium (now Microsoft 365 Business Standard) and Office 365 Business Essentials (now Microsoft 365 Business Basic) are suitable Microsoft 365 subscriptions. Both plans include SharePoint Online, which is the core service for creating and managing intranet portals and team collaboration sites, fulfilling the company's requirements while offering different sets of additional features.
Question 4: You work for a corporation as the Microsoft 365 administrator. If users click on potentially dangerous links in emails, you must guarantee that they see a warning notice. <br> What are your options?
- Microsoft Office 365 Advanced Threat Protection should be enabled. (Correct answer)
- Install the newest antimalware engine updates with Windows PowerShell.
- Create a new antimalware policy in the Microsoft Exchange Admin Center.
- Configure a new spam-filter policy in the Microsoft Exchange Admin Center.
Correct answer: Microsoft Office 365 Advanced Threat Protection should be enabled.
To ensure users see a warning notice when clicking on potentially dangerous links in emails, Microsoft Office 365 Advanced Threat Protection (now Microsoft Defender for Office 365) should be enabled. This service includes Safe Links, which scans and rewrites URLs in emails. When a user clicks a Safe Link, it's checked in real-time, and if malicious, the user is redirected to a warning page, preventing access to harmful content.
Question 5: You work for a corporation as the Microsoft 365 administrator. <br> Your company wants to learn more about what occurs if Microsoft Office 365 service availability isn't reached. <br> What is the best place to look for this information?
- Microsoft Cloud agreement
- Microsoft Products and Services agreement
- Service Level agreement (Correct answer)
- Microsoft Services agreement
Correct answer: Service Level agreement
The Service Level Agreement (SLA) is the official document that outlines Microsoft's commitments regarding the uptime and performance of its Office 365 services. It specifies the guaranteed service availability and details the remedies or service credits that customers are entitled to if Microsoft fails to meet these agreed-upon service levels. Therefore, the SLA is the best place to find information about the consequences of not reaching service availability.
Question 6: A Microsoft 365 outage occurs at a corporation that impacts a whole area. You examine the Service Health Dashboard and see that the service is in good shape. <br> You'll need to look at the Service Health Dashboard for details about what happened during the outage. What type of material should you use?
- incident closure summary
- Message Center
- service request
- Post-Incident Review (PIR) (Correct answer)
Correct answer: Post-Incident Review (PIR)
When a major service outage occurs in Microsoft 365, and you need detailed information beyond the real-time status on the Service Health Dashboard, you should look for the Post-Incident Review (PIR). A PIR document provides a comprehensive, retrospective analysis of the incident, including its root cause, impact, mitigation steps taken, and preventative measures implemented to avoid future occurrences.
Question 7: A business intends to switch to Microsoft 365. <br> Using Microsoft Yammer, SharePoint Online, Staff Hub, and Teams, employees must be able to collaborate. Costs must be kept to a minimum. <br> You must purchase a Microsoft Office 365 subscription. Which form of subscription should you choose?
- ProPlus
- Personal
- F1
- E3 (Correct answer)
Correct answer: E3
For a company needing comprehensive collaboration tools like Yammer, SharePoint Online, Staff Hub (now integrated into Teams), and Microsoft Teams, while keeping costs to a minimum, the Microsoft 365 Enterprise E3 (or Office 365 E3) subscription is an excellent choice. E3 provides a robust suite of enterprise-grade services that includes all these collaboration platforms, offering a balanced solution for extensive organizational communication and teamwork.
Question 8: Your company intends to use Microsoft 365 in a hybrid environment. You must ensure that employees can authenticate using a smart card. What type of hybrid identity solution should you use?
- Active Directory federation Services (AD FS) (Correct answer)
- password hash synchronization with single sign on
- pass-through authentication and single sign-on
- Ping federate and federation integration
Correct answer: Active Directory federation Services (AD FS)
For a hybrid Microsoft 365 environment where employees need to authenticate using smart cards, Active Directory Federation Services (AD FS) is the required hybrid identity solution. AD FS enables advanced authentication methods by federating identities between on-premises Active Directory and Azure AD, allowing complex scenarios like smart card authentication to be used for accessing cloud services, which simpler synchronization methods do not support.
Question 9: Microsoft Azure Active Directory is used by a company. Multi-factor authentication is enabled. <br> You must notify consumers about the various multi-factor authentication options available to them. <br> In Microsoft 365, which of the following ways is not an acceptable multi-factor authentication method?
- When prompted, insert a small card into a desktop computer and enter a PIN code. (Correct answer)
- On your desk phone, you'll get an automated call with a verification code.
- You will receive an SMS text message with a verification code.
- When prompted, select the pound sign (#) when receiving a call on a mobile phone.
Correct answer: When prompted, insert a small card into a desktop computer and enter a PIN code.
Microsoft 365's native multi-factor authentication (MFA) options typically include phone calls (to mobile or desk phones), SMS text messages with verification codes, and push notifications or verification codes via the Microsoft Authenticator app. While smart cards are a strong authentication method, they are not a built-in MFA option directly managed by Azure AD's default MFA settings; they usually require a federated identity solution like ADFS for implementation.
Question 10: To determine whether it is accurate, you must take into account the underlined portion. After the migration to Microsoft Azure, every application will continue to run in a hybrid environment. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate.
- No adjustment required.
- Applications that manage sensitive information (Correct answer)
- Applications where access requires a USB-token device
- All legacy applications
Correct answer: Applications that manage sensitive information
The statement that 'every application will continue to run in a hybrid environment' after migrating to Microsoft Azure is incorrect. Many applications can be fully moved to the cloud. However, organizations often choose to keep specific applications, particularly those that manage sensitive information, have stringent regulatory compliance requirements, or are tightly integrated with on-premises infrastructure, running in a hybrid environment to maintain control or meet specific security and compliance needs.
Question 11: The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: The platform as a service (PaaS) model is suggested by you. Is the aim being met by the solution?
- Yes
- No (Correct answer)
Correct answer: No
The Platform as a Service (PaaS) model provides a platform for developing, running, and managing applications, reducing the need to manage underlying infrastructure like servers. However, it does not typically offer a complete, ready-to-use email *application* out-of-the-box. The goal of modernizing the email environment with less *application* maintenance is not fully met, as the customer would still be responsible for building and maintaining their email application on the PaaS platform.
Question 12: The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: The Infrastructure as a Service (IaaS) model is one you suggest. Is the aim being met by the solution?
- Yes
- No (Correct answer)
Correct answer: No
Infrastructure as a Service (IaaS) provides virtualized computing resources, such as virtual machines, networks, and storage, giving the customer significant control over the operating system and applications. While it moves the server environment to the cloud, the customer remains responsible for managing the operating system, middleware, runtime, and the email application itself. This model does not reduce *application maintenance* or provide a modernized email solution directly, as the customer still needs to build and maintain the email server application.
Question 13: The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: You advocate using the SaaS (software as a service) paradigm. Is the aim being met by the solution?
- Yes (Correct answer)
- No
Correct answer: Yes
Software as a Service (SaaS) delivers a complete, ready-to-use application over the internet, with the provider managing all underlying infrastructure, platform, and application components. For email, this translates to a service like Microsoft 365 (Exchange Online), which is a modern, cloud-based email solution. SaaS directly addresses the goals of modernizing the email environment and significantly reducing both server and application maintenance for the customer.
Question 14: Platform as a Service (PaaS) is what your business uses for its Azure solution. Which of the aforementioned items fall under the purview of your IT staff?
- Networks
- Databases
- Applications (Correct answer)
- Servers
Correct answer: Applications
In a Platform as a Service (PaaS) model, Microsoft (the cloud provider) manages the underlying infrastructure, including networks, servers, operating systems, and often databases. The customer's IT staff is primarily responsible for the applications they develop, deploy, and manage on that platform. This includes the application code, configuration, and data, making 'Applications' the correct item under their purview.
Question 15: Platform as a Service (PaaS) is what your business uses for its Azure solution. Which of the following items is under the purview of Microsoft? Please select all that apply.
- Storage (Correct answer)
- Databases (Correct answer)
- Applications
- Operating system (Correct answer)
Correct answer: Storage
With Platform as a Service (PaaS), Microsoft is responsible for managing the entire underlying infrastructure and platform components. This shared responsibility model means Microsoft handles the physical hardware, networking, storage, virtualization, operating systems, and often integrated services like databases. The customer's responsibility typically begins at the application code and data layer.
Question 16: Your business intends to switch to Microsoft Azure and Office 365. You must locate a cloud service that supports hosting websites. Which of the following model should you pick?
- Software as a Service (SaaS)
- Platform as a Service (PaaS) (Correct answer)
- Infrastructure as a Service (IaaS)
- Container as a Service (CaaS)
Correct answer: Platform as a Service (PaaS)
Platform as a Service (PaaS) is the most suitable cloud model for hosting websites because it provides a complete environment for developing, running, and managing web applications. Services like Azure App Service, which fall under PaaS, allow users to deploy their code directly without needing to manage the underlying operating systems, servers, or network infrastructure. This enables a focus on application development rather than infrastructure management.
Free MS-900 Questions and Answers
You work for a corporation as the Microsoft 365 administrator.
Your firm intends to establish a new office in the California.
You must give reports on penetration testing and security assessments (or the new office).
Where can you find the necessary reports?