Free MS-900 Questions and Answers Flashcards

You work for a corporation as the Microsoft 365 administrator. Your firm intends to establish a new office in the California. You must give reports on penetration testing and security assessments (or the new office). Where can you find the necessary reports?

Answer: The Services Trust portal's Regional Compliance page

The Microsoft Service Trust Portal is the central resource for all Microsoft's compliance, security, and privacy information. To find reports on penetration testing and security assessments, especially those relevant to specific regions or services, you would navigate to the Service Trust Portal. Within this portal, sections like 'Regional Compliance' or 'Audit Reports' provide access to the necessary documentation and reports.

Data is available to anonymous users when you authorize external access through the Microsoft 365 admin site. Examine the italicized text. Select "No adjustment is required" if it corrects the statement. If the assertion is inaccurate, choose the option that corrects the statement.

Answer: users can send sharing invitations for specific content

Authorizing external access through the Microsoft 365 admin site does not automatically make data available to anonymous users. Instead, it enables your organization's users to send sharing invitations to external individuals. These external users can then access specific content that has been explicitly shared with them via these invitations, maintaining control over what data is exposed externally.

Your business intends to get a Microsoft 365 membership. Intranet and team sites are required by the firm. You must choose a Microsoft 365 subscription that includes the capabilities you require. Which two subscriptions do you have access to? Each accurate response provides a comprehensive solution.

Answer: Office 365 Business Premium

For a company requiring intranet and team sites, both Office 365 Business Premium (now Microsoft 365 Business Standard) and Office 365 Business Essentials (now Microsoft 365 Business Basic) are suitable Microsoft 365 subscriptions. Both plans include SharePoint Online, which is the core service for creating and managing intranet portals and team collaboration sites, fulfilling the company's requirements while offering different sets of additional features.

You work for a corporation as the Microsoft 365 administrator. If users click on potentially dangerous links in emails, you must guarantee that they see a warning notice. What are your options?

Answer: Microsoft Office 365 Advanced Threat Protection should be enabled.

To ensure users see a warning notice when clicking on potentially dangerous links in emails, Microsoft Office 365 Advanced Threat Protection (now Microsoft Defender for Office 365) should be enabled. This service includes Safe Links, which scans and rewrites URLs in emails. When a user clicks a Safe Link, it's checked in real-time, and if malicious, the user is redirected to a warning page, preventing access to harmful content.

You work for a corporation as the Microsoft 365 administrator. Your company wants to learn more about what occurs if Microsoft Office 365 service availability isn't reached. What is the best place to look for this information?

Answer: Service Level agreement

The Service Level Agreement (SLA) is the official document that outlines Microsoft's commitments regarding the uptime and performance of its Office 365 services. It specifies the guaranteed service availability and details the remedies or service credits that customers are entitled to if Microsoft fails to meet these agreed-upon service levels. Therefore, the SLA is the best place to find information about the consequences of not reaching service availability.

A Microsoft 365 outage occurs at a corporation that impacts a whole area. You examine the Service Health Dashboard and see that the service is in good shape. You'll need to look at the Service Health Dashboard for details about what happened during the outage. What type of material should you use?

Answer: Post-Incident Review (PIR)

When a major service outage occurs in Microsoft 365, and you need detailed information beyond the real-time status on the Service Health Dashboard, you should look for the Post-Incident Review (PIR). A PIR document provides a comprehensive, retrospective analysis of the incident, including its root cause, impact, mitigation steps taken, and preventative measures implemented to avoid future occurrences.

A business intends to switch to Microsoft 365. Using Microsoft Yammer, SharePoint Online, Staff Hub, and Teams, employees must be able to collaborate. Costs must be kept to a minimum. You must purchase a Microsoft Office 365 subscription. Which form of subscription should you choose?

Answer: E3

For a company needing comprehensive collaboration tools like Yammer, SharePoint Online, Staff Hub (now integrated into Teams), and Microsoft Teams, while keeping costs to a minimum, the Microsoft 365 Enterprise E3 (or Office 365 E3) subscription is an excellent choice. E3 provides a robust suite of enterprise-grade services that includes all these collaboration platforms, offering a balanced solution for extensive organizational communication and teamwork.

Your company intends to use Microsoft 365 in a hybrid environment. You must ensure that employees can authenticate using a smart card. What type of hybrid identity solution should you use?

Answer: Active Directory federation Services (AD FS)

For a hybrid Microsoft 365 environment where employees need to authenticate using smart cards, Active Directory Federation Services (AD FS) is the required hybrid identity solution. AD FS enables advanced authentication methods by federating identities between on-premises Active Directory and Azure AD, allowing complex scenarios like smart card authentication to be used for accessing cloud services, which simpler synchronization methods do not support.

Microsoft Azure Active Directory is used by a company. Multi-factor authentication is enabled. You must notify consumers about the various multi-factor authentication options available to them. In Microsoft 365, which of the following ways is not an acceptable multi-factor authentication method?

Answer: When prompted, insert a small card into a desktop computer and enter a PIN code.

Microsoft 365's native multi-factor authentication (MFA) options typically include phone calls (to mobile or desk phones), SMS text messages with verification codes, and push notifications or verification codes via the Microsoft Authenticator app. While smart cards are a strong authentication method, they are not a built-in MFA option directly managed by Azure AD's default MFA settings; they usually require a federated identity solution like ADFS for implementation.

To determine whether it is accurate, you must take into account the underlined portion. After the migration to Microsoft Azure, every application will continue to run in a hybrid environment. In the event that the underlined part is accurate, choose "No adjustment necessary." Choose the accurate answer if the underlined portion is accurate.

Answer: Applications that manage sensitive information

The statement that 'every application will continue to run in a hybrid environment' after migrating to Microsoft Azure is incorrect. Many applications can be fully moved to the cloud. However, organizations often choose to keep specific applications, particularly those that manage sensitive information, have stringent regulatory compliance requirements, or are tightly integrated with on-premises infrastructure, running in a hybrid environment to maintain control or meet specific security and compliance needs.

The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: The platform as a service (PaaS) model is suggested by you. Is the aim being met by the solution?

Answer: No

The Platform as a Service (PaaS) model provides a platform for developing, running, and managing applications, reducing the need to manage underlying infrastructure like servers. However, it does not typically offer a complete, ready-to-use email *application* out-of-the-box. The goal of modernizing the email environment with less *application* maintenance is not fully met, as the customer would still be responsible for building and maintaining their email application on the PaaS platform.

The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: The Infrastructure as a Service (IaaS) model is one you suggest. Is the aim being met by the solution?

Answer: No

Infrastructure as a Service (IaaS) provides virtualized computing resources, such as virtual machines, networks, and storage, giving the customer significant control over the operating system and applications. While it moves the server environment to the cloud, the customer remains responsible for managing the operating system, middleware, runtime, and the email application itself. This model does not reduce *application maintenance* or provide a modernized email solution directly, as the customer still needs to build and maintain the email server application.

The scenario is depicted in a number of questions that incorporate the question. Every query, though, yields a unique answer. Determine whether the proposed solution satisfies the demands. The server environment at your business will be moved to the cloud. The current email environment needs to be modernized, and you've been entrusted with finding a cloud model that accomplishes both of these goals while also requiring less server and application maintenance. You must ensure that the conditions are satisfied. Solution: You advocate using the SaaS (software as a service) paradigm. Is the aim being met by the solution?

Answer: Yes

Software as a Service (SaaS) delivers a complete, ready-to-use application over the internet, with the provider managing all underlying infrastructure, platform, and application components. For email, this translates to a service like Microsoft 365 (Exchange Online), which is a modern, cloud-based email solution. SaaS directly addresses the goals of modernizing the email environment and significantly reducing both server and application maintenance for the customer.

Platform as a Service (PaaS) is what your business uses for its Azure solution. Which of the aforementioned items fall under the purview of your IT staff?

Answer: Applications

In a Platform as a Service (PaaS) model, Microsoft (the cloud provider) manages the underlying infrastructure, including networks, servers, operating systems, and often databases. The customer's IT staff is primarily responsible for the applications they develop, deploy, and manage on that platform. This includes the application code, configuration, and data, making 'Applications' the correct item under their purview.

Platform as a Service (PaaS) is what your business uses for its Azure solution. Which of the following items is under the purview of Microsoft? Please select all that apply.

Answer: Storage

With Platform as a Service (PaaS), Microsoft is responsible for managing the entire underlying infrastructure and platform components. This shared responsibility model means Microsoft handles the physical hardware, networking, storage, virtualization, operating systems, and often integrated services like databases. The customer's responsibility typically begins at the application code and data layer.

Your business intends to switch to Microsoft Azure and Office 365. You must locate a cloud service that supports hosting websites. Which of the following model should you pick?

Answer: Platform as a Service (PaaS)

Platform as a Service (PaaS) is the most suitable cloud model for hosting websites because it provides a complete environment for developing, running, and managing web applications. Services like Azure App Service, which fall under PaaS, allow users to deploy their code directly without needing to manage the underlying operating systems, servers, or network infrastructure. This enables a focus on application development rather than infrastructure management.