MS-900 Knowledge 2 — Questions and Answers
Question 1: Which Microsoft 365 feature allows IT admins to enforce multi-factor authentication (MFA) across the organization without writing any code?
- Conditional Access policies
- Azure AD Identity Protection
- Security defaults (Correct answer)
- Microsoft Authenticator app settings
Correct answer: Security defaults
Security defaults are pre-configured baseline security policies that enforce MFA and are enabled by default for new tenants.
Question 2: What does the Microsoft 365 Service Health Dashboard provide to administrators?
- Real-time billing and invoice details
- Current and historical status of Microsoft 365 services and incidents (Correct answer)
- License assignment reports for all users
- Threat intelligence reports from Microsoft Defender
Correct answer: Current and historical status of Microsoft 365 services and incidents
The Service Health Dashboard shows the current status of Microsoft 365 services, ongoing incidents, and historical uptime information.
Question 3: In Microsoft 365, what is the primary purpose of the Microsoft Secure Score?
- To measure the speed of Microsoft 365 services
- To rate employee productivity based on usage data
- To quantify an organization's security posture and suggest improvements (Correct answer)
- To score the quality of content stored in SharePoint
Correct answer: To quantify an organization's security posture and suggest improvements
Microsoft Secure Score is a measurement of an organization's security posture, with higher scores indicating more improvement actions taken.
Question 4: Which Microsoft 365 plan is specifically designed for frontline workers who need mobile-first access to tools like Shifts and Walkie Talkie?
- Microsoft 365 Business Basic
- Microsoft 365 F3 (Firstline) (Correct answer)
- Microsoft 365 E5
- Office 365 E1
Correct answer: Microsoft 365 F3 (Firstline)
Microsoft 365 F3 (formerly Firstline) is tailored for frontline workers with mobile-first features like Teams Shifts and Walkie Talkie.
Question 5: What is Microsoft Viva Connections primarily used for?
- Video conferencing with external clients
- Providing employees a personalized company intranet experience within Teams (Correct answer)
- Managing cloud storage quotas across the organization
- Running automated compliance audits
Correct answer: Providing employees a personalized company intranet experience within Teams
Viva Connections delivers a personalized employee experience, surfacing news, conversations, and resources from the company intranet directly in Microsoft Teams.
Question 6: Which capability does Azure AD Privileged Identity Management (PIM) provide?
- Permanent assignment of admin roles to all users
- Just-in-time, time-bound access to privileged roles with approval workflows (Correct answer)
- Automatic removal of all admin accounts after 30 days
- Assigning licenses based on group membership
Correct answer: Just-in-time, time-bound access to privileged roles with approval workflows
PIM enables just-in-time privileged access so users only have elevated permissions when needed, reducing the attack surface.
Question 7: In Microsoft 365, what is the role of the 'Global Administrator'?
- Managing only Exchange Online settings
- Having full access to all administrative features across all Microsoft 365 services (Correct answer)
- Handling only billing and subscription management
- Overseeing SharePoint Online storage exclusively
Correct answer: Having full access to all administrative features across all Microsoft 365 services
The Global Administrator has the highest level of access and can manage all aspects of the Microsoft 365 tenant across all services.
MS-900 Knowledge 2
Which Microsoft 365 feature allows IT admins to enforce multi-factor authentication (MFA) across the organization without writing any code?