MS-900

You need to identify which Microsoft platforms provide hybrid capabilities for migrating from an on-premises deployment. Which two platforms provide hybrid capabilities for migration? Each correct answer provides a complete solution. (Choose two.)

A. Microsoft Skype for Business

B. Microsoft Yammer

C. Microsoft Exchange

D. Microsoft Teams

A company is moving to Microsoft Azure. Some applications cannot be moved. You need to identify which applications will remain in a hybrid environment after the migration. Which applications will remain in a hybrid environment?

A. applications that manage sensitive information 

B. applications that use a USB-token device to control access 

C. legacy applications that use a message-based interface

D. a new server that runs several line-of-business applications

You are the Microsoft 365 administrator for a company. The company runs SharePoint Server and Exchange Server in an on-premises datacenter. The site collection for the finance department is currently encrypted using third-party software. You need to move as many services to Microsoft 365 as possible. What should you do?

A. Migrate all SharePoint data and Exchange mailboxes to Microsoft 365.

B. Leave SharePoint data for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365.

C. Leave mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365.

D. Leave SharePoint data and mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365

A company has an Exchange Server environment. The company plans to migrate to the cloud. You need to recommend a cloud model that meets the following requirements: Upgrade the existing email environment Minimize server and application maintenance Which model should you recommend? 

A. Platform as a service (PaaS)

B. Windows as a service (WaaS)

C. Software as a service (SaaS)

D. Infrastructure as a service (IaaS)

Microsoft 365 is a Platform as a service (PaaS). Review the underlined text. If it makes the statement correct, select “No change is needed.” If the statement is incorrect, select the answer choice that makes the statement correct.

A. Infrastructure as a service (IaaS)

B. Windows as a service (WaaS)

C. Software as a service (Saas)

D. No change is needed

You need to deploy an application to Microsoft Infrastructure as a Service (IaaS).

Which three features are part of IaaS? Each correct answer presents a complete solution.

A. business analytics

B. real-time monitoring

C. operating system

D. servers and storage

E. firewall and network security

A company plans to migrate to Microsoft 365. Corporate devices run Windows 7 or Windows 10. You must upgrade all devices to use Office 365 ProPlus and minimize costs. You need to standardize corporate device deployments. Which three actions should you perform? Each correct answer presents part of the solution.

A. Implement Windows AutoPilot

B. Deploy policies by using Configuration Manager

C. Upgrade all devices to Windows 10

D. Deploy policies by using Microsoft Intune

E. Instruct users to download and install a Windows Installer package for Office 365 ProPlus 

A company assigns a Microsoft 365 license to each employee. You need to install Microsoft Office 365 ProPlus on each employee device. Which three methods can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from a local distribution source.

B. Use System Center Configuration Manager (SCCM) to deploy Office 365 ProPlus from an Office Windows Installer (MSI) package.

C. Download the Office 365 ProPlus Windows Installer (MSI) package. Install Office 365 ProPlus from a local distribution source.

D. Use the Office Deployment Tool (ODT) to download installation files to a local distribution source. Install Office 365 ProPlus by using the downloaded files.

E. Enable users to download and install Office 365 ProPlus from the Office 365 portal.

This question requires that you evaluate the underlined text to determine if it is correct. When you enable external access by using the Microsoft 365 admin portal, data is available to anonymous users. Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change needed.

B. the Everyone group is applied to all shares with full control

C. you must configure Active Directory Federation Services (AD FS)

D. users can send sharing invitations for specific content

You are the Microsoft 365 administrator for a company. You deploy Windows 10 to all devices by using Windows Autopilot. You need to ensure that employees can install Microsoft Office 365 ProPlus on their BYOD devices. What are two possible ways to achieve this goal? Each correct answer presents a part of a solution. NOTE: Each correct selection is worth one point.

A. Use the self-install option on the Office 365 dashboard

B. Download and install the Office ProPlus Windows Installer (MSI) package

C. Enable auto-deployment of Office 365 apps for all devices

D. Update the Windows AutoPilot deployment profile to include the Office 365 apps

You are the Microsoft 365 administrator for a company. You need to customize a usage report for Microsoft Yammer. Which two tools can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Microsoft SQL Server Analysis Services

B. Microsoft SQL Server Reporting Services

C. Microsoft Power BI in a browser

D. Microsoft Power BI Desktop

E. Microsoft Visual Studio

You are the Microsoft 365 administrator for an organization. A group of employees and users outside the company must be able to collaborate on a project in real time by using a whiteboard. In the Microsoft 365 admin portal, which Office 365 product should you configure?

A. Microsoft Yammer

B. Microsoft Office Delve

C. Microsoft SharePoint Online

D. Microsoft Teams

You need to reduce the amount of time that the IT team spends on user support. What are three possible ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Enable Microsoft Office 365 Customer Lockbox

B. Upgrade all client devices to Windows 10

C. Use Windows AutoPilot to deploy devices

D. Deploy Microsoft MyAnalytics to devices

E. Deploy Microsoft Office 365 Professional Plus to all client devices

You are the Microsoft 365 administrator for a company. You install Microsoft Office 365 ProPlus on five devices. You deactivate the Microsoft Office 365 ProPlus license on one device. Which task can you perform on the deactivated device?

A. Edit a column

B. Create a document

C. Co-author a document

D. View a document

Your company has a Microsoft Office 365 subscription. You need to co-author files with other users. Which tool should you use?

A. Microsoft SharePoint Online

B. Microsoft Skype for Business Online

C. Microsoft Office Delve

D. Microsoft Exchange Online

You are the Microsoft 365 administrator for a company. You install Microsoft Office 365 ProPlus on five devices. You deactivate device. Which task can you perform on the deactivated device?

A. Print a document.

B. Leave a comment in a document.

C. Start a new document from a template.

D. Set properties on a document. 

E. Create a document

F. Edit a document

G. Co-author a document

You are the Microsoft 365 administrator for a company. Users in the IT department must receive new Office 365 preview features before the features are deployed to other users in the company. You need to ensure only the users in the IT department receive preview features. Which two actions should you perform? Each correct answer represents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

A. Instruct users to navigate to http://insider.office.com and sign up for Office Insider.

B. Instruct users to update Office ProPlus.

C. In the organizational profile, set the update preference to Targeted release for selected users.

D. Instruct users to uninstall Office ProPlus and then reinstall the software.

E. In the organizational profile, set the update preference to Standard release. 

A company has a Microsoft 365 subscription. You deploy Windows 10 devices by using Windows Autopilot. You need to ensure that team members can access data that is stored in OneDrive for Business when team members are at remote sites. What should you do?

A. Enroll team members in Microsoft Azure AD multi-factor authentication.

B. Add the devices to Microsoft 365 using the Devices tile.

C. Enroll devices in Microsoft Intune.

D. Instruct team members to sign in to their devices using their Microsoft Azure AD credentials. 

You are a Microsoft 365 administrator for a company. Microsoft plans to release a new feature for Microsoft Excel. You need to ensure that the feature becomes available for employees to install as soon as possible.

To which release channel should you subscribe?

A. Microsoft release

B. Standard release

C. Office 365 team release

D. Targeted release

Your company is evaluating the differences between deployments of Office 365 ProPlus and Office 2016. You need to determine the installation features of each deployment. Which installation feature is unique to Office 365 ProPlus?

A. Installation can be completed by using Click-to-Run.

B. Installation can be completed by using System Center Configuration Manager.

C. Installation is available in both 32-bit and 64-bit versions.

D. Installation is on the user’s local computer. 

You use Microsoft 365 Usage Analytics. You need to know the number of users who are active today and were also active last month. Which adoption metric should you use?

A. MoMReturningUsers

B. EnabledUsers

C. ActiveUsers

D. CumulativeActiveUsers

You are a Microsoft 365 administrator for a company. You use products that are in private preview, public preview, or general availability (GA). You need to determine at which phases you can receive support from the Microsoft 365 admin center. For which product phase or phases can you receive support?

A. GA, private preview, and public preview

B. GA and private preview only

C. GA only

D. GA and public preview only

E. public preview and private preview only

You need to ensure that all users in your tenant have access to the earliest release of updates in Microsoft 365. You set the organizational release preference to Standard release. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

A. Targeted release for entire organization

B. No change is needed

C. Targeted release for select users

D. First release

You are the Microsoft 365 administrator for a company. You install Microsoft Office 365 ProPlus on five devices. You deactivate the Microsoft Office 365 ProPlus license on one device. Which task can you perform on that device?

A. Leave a comment in a document.

B. Co-author a document.

C. Create a document

D. Print a document

E. Set properties on a document.

F. Start a new document from a template.

You are the desktop administrator for an organization. You need to ensure that Office 365 ProPlus is installed on all employee computers. Which three tools can you use to deploy Office 365 ProPlus? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Microsoft Intune

B. System Center Operations Manager

C. Windows Installer (MSI) package

D. System Center Configuration Manager

E. Office Deployment Tool

You are a Microsoft 365 administrator for a company. Employees use Microsoft Office 365 ProPlus to create documents. You need to implement document classification and protection by using Microsoft Azure Information Protection. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Add an Azure subscription to your Microsoft 365 tenant

B. Install the Azure Information Protection client

C. Create a custom Azure Information Protection policy with the Confidential label

D. Enable the default Azure Information Protection policy E. Install the Rights Management Service client

A company deploys Microsoft Azure AD. You enable multi-factor authentication. You need to inform users about the multi-factor authentication methods that they can use. Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

A. Receive an automated call on the desk phone that includes a verification code

B. Insert a small card in to a desktop computer and provide a PIN code when prompted

C. Receive a call on a mobile phone and select the pound sign (#) when prompted

D. Receive an SMS text message that includes a verification code

You are a Microsoft 365 administrator for a company. Several users report that they receive emails which have a PDF attachment. The PDF attachment launches malicious code. You need to remove the message from inboxes and disable the PDF threat if an affected document is opened. Which feature should you implement?

A. Microsoft Exchange Admin Center block lists

B. Sender Policy Framework

C. Advanced Threat Protection anti-phishing

D. zero-hour auto purge E. DKIM signed messages with mail flow rules

You are the Microsoft 365 administrator for a company. All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the application. You need to implement a Microsoft Intune policy to enforce the security requirements. Which policy should you use?

A. device compliance

B. device configuration

C. app protection

D. app configuration

A company deploys Exchange Online and SharePoint Online. You must audit and assessment report for the Microsoft 365 cloud services that the company uses. You need to provide the required documents. Which Microsoft site should you use to obtain this information?

A. Compliance Manager

B. Service Trust Portal

C. Office 365 Security and Compliance Center

D. Azure portal

This question requires that you evaluate the underlined text to determine if it is correct. A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs. You should implement Microsoft Azure Information Protection for Microsoft Office 365. Review the underlined text. If it makes the statement correct, select No change is needed. If the statement is incorrect, select the answer choice that makes the statement correct.

A. No change needed.

B. Azure Information Protection Premium P2 2

C. Azure Information Protection Premium P1

D. Microsoft 365 E3

A company plans to migrate to Microsoft 365. You need to advise the company about how Microsoft provides protection in a multitenancy environment. What are three ways that Microsoft provides protection? Each correct answer presents part of the solution. (Choose three.) NOTE: Each correct selection is worth one point.

A. Customer content at rest is encrypted on the server by using BitLocker.

B. Microsoft Azure AD provides authorization and role-based access control at the tenant layer.

C. Customer content at rest is encrypted on the server by using transport-layer security (TLS).

D. Microsoft Azure AD provides authorization and role-based access control at the transport layer.

E. Mailbox databases in Microsoft Exchange Online contain only mailboxes from a single tenant.

F. Mailbox databases in Microsoft Exchange Online contain mailboxes from multiple tenants.

You are the Microsoft 365 administrator for a company. Your company plans to open a new office in the United Kingdom. You need to provide penetration test and security assessment reports for the new office. Where can you locate the required reports?

A. Data Governance page of the Security and Compliance portal

B. Compliance Manager page of the Services Trust portal

C. Data Loss Prevention page of the Security and Compliance portal

D. Regional Compliance page of the Services Trust portal

You are the Microsoft Office 365 administrator for a company. You need to perform security and compliance reviews before new updates are distributed to the entire company. What should you implement?

A. standard releases

B. Microsoft 365 Enterprise Test Lab

C. targeted releases

D. FastTrack

A company has a Microsoft 365 subscription that includes Office apps. A user has identified a new issue while working with an app. When the user attempts to create a support request, the following message displays:

You don't have permission to access this page or perform this action.

You need to determine the cause of the error message. What is the cause?

A. The user account is disabled.

B. The user does not have a license assigned for the app.

C. The user account is not a member of the global admin role.

D. The company does not have Premier support.

Your company purchases Microsoft 365 Enterprise and Azure AD P2 licenses. You need to provide identity protection against malicious login attempts. What should you implement?

A. Azure AD Identity Protection

B. Azure AD Privileged Identity Management

C. Azure Information Protection

D. Azure Identity and Access Management 

A company needs to protect documents and emails by automatically applying classifications and labels. You must minimize costs. You should implement Information Rights Management. Review the underlined text. If it makes the statement correct, select No change is needed. if the statement is incorrect, select the answer choice that makes the statement correct.

A. No change needed.

B. Azure Information Protection Premium P2

C. Azure Information Protection Premium P1

D. Microsoft 365 E3

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items. Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Enable policy to block legacy authentication.

B. Enable user risk policy.

C. Require multi-factor authentication for all users.

D. Delete/block accounts not used in last 30 days.

E. Do not expire passwords. 

A company deploys Microsoft Azure AD. You enable multi-factor authentication. You need to inform users about the multi-factor authentication methods that they can use. Which of the following methods is NOT a valid multi-factor authentication method in Microsoft 365?

A. Receive an automated call on the desk phone that includes a verification code.

B. Use the Microsoft Authenticator mobile application to receive a notification and authenticate.

C. Receive a call on a phone.

D. Enter a Windows 10 PIN code when prompted.

You deploy Enterprise Mobility + Security E5 and assign Microsoft 365 licenses to all employees. Employees must not be able to share documents or forward emails that contain sensitive information outside the company. You need to enforce the file sharing restrictions. What should you do?

A. Use Microsoft Azure Information Protection to define a label. Associate the label with an Azure Rights Management template that prevents the sharing of files or emails that are marked with the label.

B. Create a Microsoft SharePoint Online content type named Sensitivity. Apply the content type to other content types in Microsoft 365. Create a Microsoft Azure Rights Management template that prevents the sharing of any content where the Sensitivity column value is set to Sensitive.

C. Use Microsoft Azure Information Rights Protection to define a label. Associate the label with an Active Directory Rights Management template that prevents the sharing of files or emails that are marked with the label.

D. Create a label named Sensitive. Apply a Data Layer Protection policy that notifies users when their document contains personally identifiable information (PII).