Free MS-900 MCQ Questions and Answers — Questions and Answers
Question 1: Conditional Access is a characteristic of
- AAD Premium 1 (Correct answer)
- Cloud App security
- AD
- Privileged Identity Management
Correct answer: AAD Premium 1
Conditional Access is a powerful security feature within Azure Active Directory (AAD) that allows organizations to enforce policies based on specific conditions, such as user location, device compliance, or application sensitivity. This advanced capability for granular access control is exclusively available with Azure AD Premium P1 and P2 licenses. Therefore, AAD Premium 1 is the correct answer.
Question 2: Which of the following organizations provides support for the Microsoft 365 admin center's products?
- GA only (Correct answer)
- GA, Private Preview, and public preview
- GA and Private preview only
- Public preview and Private preview only
Correct answer: GA only
Microsoft provides full support for products and features that have reached General Availability (GA). Features in Private Preview or Public Preview are still in development or testing phases and are not typically covered by standard support agreements. These preview features are subject to change and may not be fully stable, so only GA products receive full support.
Question 3: Exchange Online and SharePoint Online are used by a company. <br> You must review the evaluation report for the company's Microsoft 365 cloud services. <br> You must submit the relevant documentation. <br> To get this information, which Microsoft site should you go to?
- Compliance Manager
- Office 365 Security and Compliance Center
- Service Trust Portal (Correct answer)
- Azure portal
Correct answer: Service Trust Portal
The Microsoft Service Trust Portal is the central repository for compliance reports, trust documents, and audit reports related to Microsoft's cloud services, including Microsoft 365. It provides comprehensive information on how Microsoft achieves and maintains compliance with various international and industry-specific standards and regulations. Therefore, it is the correct site to obtain evaluation reports and relevant documentation for cloud services.
Question 4: Which of the following options will provide information about non-compliance with the Microsoft Office 365 services' availability terms?
- Microsoft Cloud agreement
- Service Level agreement (Correct answer)
- Microsoft Products and Services agreement
- Microsoft Services agreement
Correct answer: Service Level agreement
A Service Level Agreement (SLA) is a contractual agreement between a service provider and a customer that defines the level of service expected from the provider. It explicitly outlines commitments regarding uptime, availability, performance, and the remedies or compensation for non-compliance with these terms. Therefore, any information about non-compliance with availability terms for Microsoft Office 365 services would be found in the SLA.
Question 5: Administrators can enable what option in Microsoft 365 Activity Reports to decrease the risk of personally identifiable information being exposed?
- Exfiltration
- Randomization
- Obfuscation
- Anonymization (Correct answer)
Correct answer: Anonymization
Anonymization is the process of removing or modifying personally identifiable information (PII) from data so that individuals cannot be identified. In Microsoft 365 Activity Reports, enabling anonymization helps protect user privacy by obscuring specific user identities while still allowing administrators to analyze activity patterns and trends. This reduces the risk of sensitive data exposure.
Question 6: Which interface is used to obtain Microsoft 365 Activity Reports?
- SharePoint Admin Centre
- Security & Compliance Centre
- Microsoft 365 Admin Centre (Correct answer)
- Report Center
Correct answer: Microsoft 365 Admin Centre
The Microsoft 365 Admin Center is the primary portal for managing Microsoft 365 services, users, licenses, and settings across an organization. It includes a dedicated 'Reports' section where administrators can access various activity reports, usage analytics, and insights across different Microsoft 365 services. This central interface provides the necessary tools for obtaining comprehensive activity reports.
Question 7: For your Azure solution, your organization uses Platform as a Service (PaaS). <br> Which of the following are components that your IT department is in charge of?
- Applications (Correct answer)
- Networks
- Servers
- Databases
Correct answer: Applications
In a Platform as a Service (PaaS) model, Microsoft manages the underlying infrastructure and platform components, including networks, servers, and databases. The customer's IT department is responsible for the applications they develop, deploy, and manage on that platform. This includes the application code, configuration, and data, making 'Applications' the correct component under their charge.
Question 8: Your business intends to switch to Microsoft Azure and Microsoft 365. <br> You must find a cloud service that permits you to host your website. <br> Which of the following models should you pick?
- Platform as a Service (PaaS) (Correct answer)
- Container as a Service (CaaS)
- Software as a Service (SaaS)
- Infrastructure as a Service (IaaS)
Correct answer: Platform as a Service (PaaS)
Platform as a Service (PaaS) is the most suitable cloud model for hosting websites because it provides a complete development and deployment environment. With PaaS, users can deploy their web applications without needing to manage the underlying operating systems, servers, or network infrastructure. This allows them to focus solely on their application code and functionality.
Question 9: Your business intends to switch to Microsoft Azure and Microsoft 365. <br> You must locate a cloud provider that supports the deployment of a Linux virtual machine. <br> Which of the following models should you pick?
- Platform as a Service (PaaS)
- Software as a Service (SaaS)
- Container as a Service (CaaS)
- Infrastructure as a Service (IaaS) (Correct answer)
Correct answer: Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) provides virtualized computing resources, including virtual machines, networks, and storage, over the internet. This model gives customers the most control over their operating systems and applications, making it the appropriate choice for deploying and managing a specific operating system like a Linux virtual machine. The customer is responsible for the OS and above.
Question 10: Your business intends to switch to Microsoft Azure and Office 365. Finding a cloud provider that enables the deployment of a Linux virtual machine is necessary. Which of the following model should you pick?
- Software as a Service (SaaS)
- Platform as a Service (PaaS)
- Infrastructure as a Service (IaaS) (Correct answer)
- Container as a Service (CaaS)
Correct answer: Infrastructure as a Service (IaaS)
Infrastructure as a Service (IaaS) offers the flexibility to provision and manage virtual machines, including those running Linux. In an IaaS model, the cloud provider manages the underlying hardware and virtualization, but the customer retains control over the operating system, applications, and data. This makes IaaS ideal for deploying and managing specific virtual machine types like a Linux VM.
Question 11: To determine whether it is accurate, you must take into account the underlined portion. You should sign up for the Targeted release channel so that you can install any new Microsoft Word features as soon as they are released. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate.
- No adjustment required. (Correct answer)
- Standard release
- Semi-annual
- Annual
Correct answer: No adjustment required.
The Targeted release channel is specifically designed for organizations that want to receive new features and updates for Microsoft 365 apps and services before the broader public. This allows administrators to test new functionalities and prepare their users for changes ahead of the standard release. Therefore, signing up for the Targeted release channel is the correct way to get new features as soon as they are released.
Question 12: As a Microsoft 365 administrator, you are employed. MyAnalytics will be used by your business. You must distinguish between MyAnalytics' and Workspace Analytics' various functionalities. Which of the following describe MyAnalytics features? (Select each that applies.)
- It can only be acquired as an added reference-on license. (Correct answer)
- It provides team work and collaboration metrics.
- It is included in the Office 365 ProPlus license.
- It provides employee work and collaboration metrics
Correct answer: It can only be acquired as an added reference-on license.
MyAnalytics is a personal productivity tool that provides insights to individual users about their work patterns, focus time, and collaboration habits. While it is included with some Microsoft 365 subscriptions (like E5), it is often available as an add-on license for other plans. It focuses on individual employee metrics, distinguishing it from broader organizational analytics tools like Viva Insights (formerly Workplace Analytics).
Question 13: Your business has a subscription to Microsoft Office 365. You are instructing new users on which component to utilize for audio and visual conversations with coworkers as the administrator of this subscription. Which of the following should be used as the component?
- Microsoft Exchange Online
- Enterprise Mobility + Security (Correct answer)
- Microsoft Teams
- Microsoft SharePoint Online
Correct answer: Enterprise Mobility + Security
While Microsoft Teams is the direct application for audio and visual conversations, Enterprise Mobility + Security (EMS) provides the foundational security and identity management that *enables* secure communication across the organization. EMS components like Azure AD and Intune ensure that only authorized users and compliant devices can access communication tools, thereby securing the environment where these conversations take place.
Question 14: Your business plans to use Windows AutoPilot to distribute a number of Microsoft Surface computers running Windows 10. It is your responsibility to use the Microsoft 365 Device Management portal to import a CSV file to get the devices ready for the deployment. Which of the following blade combinations will help you accomplish your objective?
- The Dashboard and Device Configuration blades.
- The Device Enrollment and Devices blades. (Correct answer)
- The Device Enrollment and Devices Compliance blades.
- The Device Compliance and Device Configuration blades.
Correct answer: The Device Enrollment and Devices blades.
To prepare devices for Windows AutoPilot deployment by importing a CSV file, administrators utilize the Microsoft 365 Device Management portal, which integrates with Intune. The 'Device Enrollment' blade is where AutoPilot profiles are configured and devices are imported. The 'Devices' blade then allows for managing and monitoring these enrolled devices, making this combination essential for the task.
Question 15: Your business has a subscription to Microsoft Office 365. You have been entrusted with suggesting a solution that will let consumers utilize unsuitable software on their Windows 10 devices as the subscription administrator for this account. Which of the following options should I choose?
- Azure AD Connect.
- Configuration Manager.
- Windows AutoPilot.
- Windows Virtual Desktop. (Correct answer)
Correct answer: Windows Virtual Desktop.
Windows Virtual Desktop (now Azure Virtual Desktop) allows users to access virtualized desktops and applications from virtually anywhere, on any device. This is an ideal solution for running 'unsuitable' or legacy software, as the applications run in the cloud on a virtual machine. This isolates them from the user's local Windows 10 device, ensuring compatibility and security without installing them directly.
Question 16: Your business has a subscription to Microsoft Office 365. You have been tasked with suggesting a solution to make cloud-based applications utilize the same login credentials as on-premises applications as the administrator for this subscription. Which of the following options should I choose?
- Azure AD Connect. (Correct answer)
- Configuration Manager.
- Windows AutoPilot.
- Azure AD Application Proxy.
Correct answer: Azure AD Connect.
Azure AD Connect is a crucial tool for synchronizing identities between an on-premises Active Directory and Azure Active Directory. By implementing Azure AD Connect, organizations can achieve hybrid identity, allowing users to use a single set of credentials (their on-premises username and password) to access both on-premises and cloud-based applications. This enables seamless single sign-on across the environment.
Free MS-900 MCQ Questions and Answers
Conditional Access is a characteristic of