MS-900

You manage a local Active Directory Domain Services environment. Your company purchases an Enterprise E1 license for all users. You need to implement self-service password reset. You want to achieve this goal while minimizing costs. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. Upgrade your subscription to Azure AD Premium P2.

B. Deploy Azure AD Connect.

C. Deploy Azure Information Protection.

D. Upgrade your subscription to Azure AD Premium P1. 

You are a Microsoft 365 administrator for a company. What are two ways that you can ensure data security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. service-level encryption using customer-provided key

B. tenant-dedicated Microsoft Azure AD encryption using customer-provided key

C. single-tenant infrastructure partitions for sensitive data

D. data transfer using transport-layer security (TLS)

You are a Microsoft 365 administrator for a company. You need to identify security vulnerabilities by using the Office 365 Attack Simulator. Which three attack simulations are available? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Brute-force password

B. Cross-site scripting

C. Password-spray

D. Denial-of-service

E. Display name spear-phishing

QUESTION 44 Your organization plans to deploy Microsoft 365 in a hybrid scenario. You need to ensure that employees can use a smart card for authentication. Which hybrid identity solution should you implement?

A. password hash synchronization with single-on

B. Active Directory Federation Services (AD FS)

C. PingFederate and federation integration 

D. pass-through authentication and single sign-on

You need to ensure that the process by which users sign in to Microsoft 365 confirms the identity of the user. Which feature should you use?

A. mobile application management (MAM)

B. Advanced Threat Protection (ATP)

C. Multi-Factor Authentication (MFA)

D. data loss prevention (DLP) policies

You are a Microsoft 365 administrator for a company. You need to ensure that company documents are marked as confidential. You must prevent employees from sharing documents with people outside the company. What are two possible ways to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Validate outbound emails by using DomainKeys identified Mail (DKIM)

B. Create sensitive information types

C. Configure Secure/Multipurpose Internet Mail Extensions (S/MIME) settings for Outlook

D. Create a data-loss prevention policy

E. Apply sensitivity labels to documents

You are the Microsoft 365 administrator for a company. An employee requests personal data under General Data Protection Regulation (GDPR) guidelines. You need to retrieve data for the employee. What should you do?

A. Create a data subject request case.

B. Create a retention policy.

C. Create a data-loss prevention policy.

D. Create a GDPR assessment.

A company has a Microsoft 365 subscription. Employees use personal devices to access company data in the cloud. You need to restrict employees from copying data to personal OneDrive folders. What should you use?

A. Information Rights Management

B. Microsoft Azure Security Center

C. Office 365 Advanced Threat Protection

D. Intune App Protection

You are the network administrator of a company. The Microsoft 365 tenant contains sensitive information. Employees must verify their identities when they sign into Microsoft 365 by providing information in addition to their Azure AD password. You need to select the tools that employees can use to verify their identities. Which two tools should you select? Each correct answer presents a complete solution.

A. Customer Lockbox for Office 365

B. Microsoft Security Center

C. Windows Hello for Business

D. Microsoft Authenticator 

You need to move videos to a Microsoft 365 tenant and ensure that the contents are automatically transcribed. Which Microsoft 365 service should you use?

A. Yammer

B. Stream

C. Flow

An organization uses Microsoft 365 Business to secure their data. Many users install the organization’s data on their personal tablets and phones. You need to protect the organization’s data stored on users’ devices. Which three features support device security? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Remotely wiping company data

B. Enabling Advanced Threat Protection for users

C. Disabling the device remotely

D. Automatically deleting files after 90 days of inactivity

E. Requiring users to have a PIN on their device

You use Microsoft Intune for device management. You must determine how many devices run each operating system. You must launch Intune and navigate to the Mobile Apps blade. Select the correct answer if the underlined text does not make the statement correct. Select “No change is needed” if the underlined text makes the statement correct.

A. Device configuration

B. Device compliance

C. No change is needed

D. Devices

You are the Microsoft 365 administrator for a company. You need to ensure that users receive a warning message if they select links in emails that might be unsafe. What should you do?

 A. Use Windows PowerShell to install the latest antimalware engine updates

B. Enable Microsoft Office 365 Advanced Threat Protection

C. Use the Microsoft Exchange Admin Center to configure a new spam-filter policy

D. Use the Microsoft Exchange Admin Center to create a new antimalware policy

A business acquaintance from another company sends you a document that is encrypted by Azure Information Protection (AIP). You are unable to open the document because the user account cannot be authenticated by the company’s Azure Active Directory. You need to access the document. What should you do?

A. Implement Azure Rights Management (RMS) for individuals for the user account.

B. Implement Information Rights Management (IRM) for the Office application.

C. Upgrade your account to include AIP for Office 365.

You are the Microsoft 365 administrator for a company. Which two admin roles can purchase more licenses? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. service administrator

B. user management administrator

C. global administrator

D. billing administrator

A company plans to purchase Microsoft 365 Enterprise licenses. Which two options can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. through a Cloud Solution Provider (CSP)

B. from the Microsoft website using a corporate credit card

C. from the Microsoft retail store

D. with an Enterprise Agreement (EA) subscription from Microsoft 

Your company plans to purchase a Microsoft 365 subscription. The company requires intranet and team sites. You need to select a Microsoft 365 subscription that provides the required features. Which two subscriptions can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Office 365 Home

B. Office Business Premium

C. Office 365 Business

D. Office 365 Business Essentials

You use Microsoft Business Products. When you try to create a support request, you receive the following message:

You don't have permission to access this page or perform this action.

You need to determine the cause of the error message. What is the cause?

A. Your password is expired

B. Your account is disabled

C. Your company does not have Premier support

D. Your account is not a member of the global admin role 

A company experiences a Microsoft 365 outage that affects an entire region. You check the Service Health Dashboard and observe that the service is healthy. After the incident is resolved, you need to find information in Service Health Dashboard that describes what happened during the outage. What should you use?

A. Message Center

B. incident closure summary

C. Post-Incident Review (PIR)

D. service request

A company is a Microsoft 365 reseller. The company does not provide managed services or direct customer support. You need to provide licenses for customers and earn commissions for each license sold. What should you do?

A. Buy licenses for customers by using the Microsoft admin portal.

B. Sign up as a Cloud Solution Provider direct reseller.

C. Sign up as a Cloud Solution Provider indirect reseller.

D. Buy licenses for customers from a Microsoft Authorized distributor.

A company has a Microsoft 365 subscription and a Microsoft Azure support plan. You need to implement only Azure services for which Microsoft provides technical support. Which two types of services and features can you implement? Each correct answer presents part of the solution.

A. general availability

B. targeted release

C. public preview

D. private preview

A company that has 50 employees plans to purchase a Microsoft 365 Business subscription. Which two payment methods are available? Each correct answer presents a complete solution. (Choose two.) NOTE: Each correct selection is worth one point.

A. PayPal

B. automatic bank transfer

C. Enterprise Agreement

D. credit card or debit card

A small advertising company has 250 employees. You need to migrate all users to Microsoft 365 and meet the following requirements:

• Provide a user-centric licensing solution for all users.
• Manage devices from a single location.
• Minimize licensing costs

Which licensing model should you use?

A. Microsoft 365 Business

B. Microsoft 365 Education

C. Microsoft 365 Enterprise E3

D. Microsoft 365 Enterprise E5

You are the Microsoft 365 administrator for a company. A user experiences an issue with SharePoint Online. You need to resolve the issue. Which two options can you use? Each correct answer presents a complete solution. (Choose two.) NOTE: Each correct selection is worth one point.

A. Go to the SharePoint admin and create a support request.

B. Contact Microsoft technical support by telephone.

C. Create a new service request from the Microsoft 365 admin center.

D. Create a service request from the SharePoint portal

You are the Microsoft 365 administrator for a company. Your company wants to learn more about what happens if the availability terms of the Microsoft Office 365 services are not met. Where can you find this information?

A. Service Level agreement

B. Microsoft Services agreement

C. Microsoft Cloud agreement

D. Microsoft Products and Services agreement

E. Microsoft Enterprise agreement

A company is purchasing a Microsoft 365 subscription to replace the current on-premises IT infrastructure. You need to identify the impacts of subscribing to Microsoft 365. Which three outcomes can the company expect? Each correct answer presents a complete solution. (Choose three.) NOTE: Each correct selection is worth one point.

A. Predictable Microsoft licensing costs

B. Increased Exchange Server Client Access License (CAL) costs

C. Increased Windows Server Client Access License (CAL) costs

D. Increased service scalability

E. Decreased on-premises infrastructure maintenance 

Your organization plans to deploy a subscription-based licensing model of Microsoft Office to devices. You must use group policy to enforce Office application settings. You need to deploy Office to the enterprise. Which version of Office should you deploy?

A. Office 365 ProPlus

B. Office Professional Plus 2016

C. Office Online

D. Office Home and Business 2016 

An organization plans to deploy Microsoft Office 2019 or Office 365 ProPlus. What are two advantages of Office 365 ProPlus? Each correct answer presents a complete solution. (Choose two.) NOTE: Each correct selection is worth one point.

A. Features remain constant through the lifetime of the applications.

B. Office 365 ProPlus includes downgrade rights.

C. A single license may be deployed to multiple devices.

D. Fully functional Office mobile apps are free to install and use.

A company plans to migrate to Microsoft 365. Firstline employees need to be able to collaborate by using Microsoft Yammer, SharePoint Online, StaffHub, and Teams. You must minimize costs. You need to subscribe to Microsoft Office 365. Which subscription type should you use?

A. E3

B. ProPlus

C. E1

D. Personal

E. F1

A company plans to purchase Microsoft 365. You need to give management an overview of the Microsoft 365 pricing model. Which of the following describes how the company will be billed for Microsoft 365?

A. The company will be charged according to the amount of computing resources it uses each month across all users.

B. The company will make a single payment for Microsoft 365, after which it owns the license for Microsoft 365 and can use it in an unlimited fashion.

C. The company will be charged annually for a single Microsoft 365 license that can be shared among all employees.

D. The company will be charged according to the number of user licenses required.

You are the Microsoft 365 administrator for a company. You need to track scheduled maintenance events in Microsoft 365 admin center. Where can you track these events?

A. Reports

B. Support

C. Service Health

D. Message Center

You are the Office 365 administrator for a company. You encounter a problem in your tenant. You launch the Microsoft 365 admin center and select Create a new service request. You need to get help resolving your problem through the admin center. Which three actions can you perform from the admin center? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Receive a Microsoft technical support phone number to speak with a Microsoft support technician.

B. Request a Microsoft service technician to contact you by using email.

C. Use the query text box to type information about your problem and receive links to help documentation.

D. Schedule a time for a Microsoft service technician to call you.

E. Chat with a live Microsoft service engineer.