Practice Assessment for Exam MS-900: Microsoft 365 Fundamentals

Question 1

A company plans to use Microsoft 365.

The company expresses the need to use Microsoft Software Assurance.

You need to recommend the pricing model that includes the Microsoft Software Assurance benefit.

Which pricing model should you recommend?

Answer 1

Microsoft Volume Licensing

Software Assurance is available as part of the Microsoft Volume Licensing benefits. The Cloud Solution Provider pricing model involves a Microsoft partner providing technical and billing services but does not include Software Assurance benefits. Microsoft Online Service Program is an alternative name of the Web Direct pricing model, which involves the pay-as-you-go billing that offers convenience and flexibility but does not include the Microsoft Volume Licensing benefits. The Web Direct pricing model involves pay-as-you-go billing, which offers convenience and flexibility, but does not include the Microsoft Volume Licensing benefits.

Question 2

A company plans to implement Microsoft 365 for 500 employees.

Employees work from desktop and laptop computers and need to use the Microsoft Office desktop applications.

You need to recommend the appropriate subscription plan.

Which subscription plan should you recommend?

Answer 2

Microsoft 365 E3

Microsoft 365 Enterprise E3 is suitable for organizations with more than 300 employees and includes desktop Office applications. Microsoft 365 F3 is meant for frontline-workers, who must use tablet and mobile devices for their work. It does not include desktop Office applications. Microsoft 365 Business cannot be used by companies with more than 300 employees.

Question 3

A company plans to transition to Microsoft 365.

The company is an on-premises software assurance customer and needs a base license type that offers cloud relevant software assurance benefits.

You need to recommend a user subscription license (USL).

Which license should you recommend?

Answer 3

From SA USLs

From SA USLs are for on-premises software assurance customers who want to migrate to the cloud. Add-on USLs are for on-premises software customers who want to try Microsoft 365 cloud products without giving up their on-premises solution. Full USLs are for first time buyers of Microsoft’s products and services or for on-premises customers without software assurance. Step Up USLs are for existing Microsoft 365 customers who want to upgrade their level of service.

Question 4

A company has an existing Microsoft Volume Licensing agreement and is operating exclusively in an on-premises environment.

The company plans to use Microsoft 365.

You need to recommend a user subscription licensing (USL) option that allows the company to leverage existing benefits while transitioning to Microsoft 365.

Which licensing option should you recommend?

Answer 4

From SA USLs

From SA USLs is intended for existing Volume Licensing customers, including the ability to leverage Software Assurance benefits. Add-on USLs are intended for on-premises customers without Volume Licensing that want to purchase Microsoft 365 services. Full USLs is intended for new customers without existing licensing agreements. Step Up USLs is intended for customers that need to upgrade their existing Microsoft 365 services.

Question 5

A company uses Microsoft 365.

The company records a monthly uptime percentage below 95%.

Which percentage of service credit can the company receive from Microsoft?

Answer 5

100 percent

The percentage credit that a company can receive is based on the monthly uptime percentage. Monthly uptime percentage of:

Below 99.9% grants 25% credit.
Below 99% grants 50% credit.
Below 95% grants 100% credit.

Question 6

A company recently subscribed to Microsoft 365.

The company wants to drive user adoption of the new Microsoft 365 services.

You need to recommend a support option for the company.

Which support option should you recommend?

Answer 6

FastTrack

FastTrack support service helps customers onboard to Microsoft 365 and supports the company to drive adoption of Microsoft 365 services in the company. Pre-sales is a support service provided to help the company with understanding more about Microsoft 365 services before the purchase is made. Community-based support is a free support service provided by members of the community. Microsoft Unified support is a 24/7 support service provided for your Microsoft 365 service for as-needed technical support.

Question 7

A company uses Microsoft 365.

The company help desk receives calls about errors when users access Office Online apps. The help desk team suspects it is a service issue.

You need to direct the help desk team to the location in the Microsoft 365 admin center to obtain more information about the issue.

Which location should you identify?

Answer 7

Health

The Health area in the admin center is the place where information about the current health of Microsoft services can be found. The Support area can be useful for raising a support ticket with Microsoft if there is no indication of current service health issues. The Settings area displays information about the company’s domain setup. The Reports area displays adoption score and usage reports. The Support area shows information about service requests created with Microsoft support.

Question 8

A company implements Microsoft 365.

The company has concerns about the encryption and classification of information and removal of Shadow IT in the organization.

You need to recommend a Zero Trust methodology pillar solution.

Which two pillars should you recommend? Each correct answer represents part of a complete solution.

Answer 8

Data
Applications

In the data pillar, security is focused on resolving the concern of Shadow IT by ensuring that all applications in the organization are centrally managed. In the applications pillar, security is focused on resolving the concern of Shadow IT by ensuring that all applications in the organization are centrally managed. The infrastructure pillar focuses on improving security at the infrastructure layer through the assessment of version and configurations. In the networks pillar, security is focused on the protection of network layer through segmentation and micro-segmentation.

Question 9

A company uses Microsoft 365.

The company expresses the need to adopt the concept of assumed breach and mitigate it.

You need to recommend the access type to implement.

Which access should you recommend?

Answer 9

network segmentation

Network segmentation is one the most common techniques that is used to implement the principle of assumed breach. External firewalls are not considered sufficient in the context of the principle of assumed breach since they are based on the premise that the breach has not taken place yet. Just-in-time access is part of the implementation of the least privileged access principle. Password-based authentication is no longer viewed as a sufficient way to protect access to secured resources and is not part of the implementation of the principle of assumed breach.

Question 10

A company uses Microsoft 365.

The company needs real-time policy evaluation to involve access control through segmentation.

You need to recommend the primary component of the Zero Trust model that needs to be configured.

Which primary component do you recommend?

Answer 10

Network

Network-based protection relies on such components as internal segmentation and micro-segmentation. Granularity in apps-based protection is typically based on roles. Device-based protection relies on device risk and compliance state. Infrastructure-based protection relies on such components as just-in-time (JIT) and version control.

Question 11

A company implements Microsoft 365.

The company needs to allow external sharing with partners and vendors. The company requires the default configuration available to achieve this goal.

You need to recommend a cloud identity provider.

Which two providers should you recommend? Each correct answer presents a complete solution.

Answer 11

Microsoft Entra ID
Microsoft account

By default, guests can use their existing Microsoft Entra ID work or school accounts and their Microsoft account to redeem the B2B collaboration invitations received. Facebook federation can be configured for self-service sign up when building an app. It cannot be used as a sign in option to redeem external collaboration invitations. Active Directory is an on-premises directory service, which cannot be used to fulfill external sharing requirements.

Question 12

A company is planning the user login process for access to Microsoft 365.

The company needs to document the login process stages. You need to explain the process that verifies if a username and password combination is correct.

Which named process should you explain?

Answer 12

Authentication

Authentication is the process of verifying if the provided credentials are correct. Authorization occurs after authentication, and defines, for an identity that has already been authenticated, to which resources access should be granted or denied. Zero Trust is an approach that assumes that all requests come from an open and untrusted network. The Shared responsibility model is a way to shift the security responsibilities between the customer and the cloud provider.

Question 13

A company implements Microsoft 365.

The company has a new remote work policy for employees.

You need to recommend a solution that meets the following requirements:

Employees can only access company resources from specific locations.
Extra authentication factors are included.
Which solution should you recommend?

Answer 13

Conditional Access

Microsoft Entra ID Conditional Access includes location-based policies and multifactor authentications. JIT access does not include extra authentication methods and location policies. JIT is part of implementing the principle of least privilege access. Federation does not include extra authentication methods and location policies. It allows users authenticated by one identity provider, such as Microsoft Entra ID, to access resources that are controlled by other identity providers. Micro-segmentation does not include extra authentication methods and location policies. Micro-segmentation is a network-based control mechanism.

Question 14

A company uses Microsoft Entra ID as an authentication platform.

Active Directory is not integrated with Microsoft Entra ID. The company needs to use Microsoft Defender to check potentially compromised users.

You need to recommend a solution.

Which solution should you recommend?

Answer 14

Defender for Identity

Defender for Identity is a solution that uses the Active Directory data as signals to identify suspicious activities. Defender for Office 365 protects against threats in email messages. Defender for Cloud Apps operates as an intermediary between the cloud user and cloud provider, mediating the requests sent to the cloud providers. Defender for Endpoint is used to protect devices (endpoints), integrating with Microsoft Intune, Defender for Cloud, and other services.

Question 15

A company implements Microsoft 365.

The company’s security team needs to understand threat signals for Microsoft 365 products and services. You need to recommend a solution that meets the following requirements:

Provide the first line of defense in the stack.
Automated investigation and remediation of breaches.
Provide capabilities for network protection.
Which solution should you recommend?

Answer 15

Microsoft Defender for Endpoint

Microsoft Defender for Endpoint provides the first line of defense in the stack, automated investigation, and remediation of breaches and network protection. Microsoft Defender for Office 365 protects organizations from malicious emails, URLs, and collaborative tools. It does not provide capabilities for network protection. Microsoft Defender for Identity protects the organization from malicious identity attacks. It does not provide capabilities for network protection. Microsoft Defender for Cloud Apps provides advanced threat protection to cloud apps.

Question 16

A company authenticates by using Active Directory for its on-premises applications and resources. The company uses Microsoft 365.

The company requires single sign-on (SSO) with smart cards or certificates for the cloud apps and on-premises objects.

You need to recommend a Microsoft Entra ID authentication method.

Which authentication method should you recommend?

Answer 16

Federated

Federated authentication is a recommended authentication for companies with complex requirements that cannot be met by Microsoft Entra ID. User authentication validation happens on the company’s Active Directory single sign-on (SSO) with smart cards or certificates, which is supported through federated authentication. Password hash synchronization, pass-through authentication, and passwordless authentication do not support SSO with smart cards or certificates.

Password hash synchronization enables users to sign in to on-premises and cloud applications using the same password. This ensures that the user’s authentication takes place in Microsoft Entra ID rather than the company’s on-premises Active Directory. Pass-through authentication enables users to sign in to on-premises and cloud applications using the same password. This authentication type validates the user’s password against the company’s on-premises Active Directory, not Microsoft Entra ID. Passwordless authentication is a more convenient way to authenticate because passwords are completely removed and replaced by something you have, something you are, or something you own.

Question 17

A company uses Microsoft Entra ID.

Internal authenticated users who try to access company apps outside the designated IP range must be blocked.

You need to recommend a Microsoft Entra ID feature the company should use.

Which feature should you recommend?

Answer 17

Conditional access

Conditional access provides an additional layer of security for authenticated users who try to access company apps and data. Access can be restricted based on several signals, which include user or group membership, named location information, device application, real-time risk detection, user risks, cloud apps, or actions. After the policy is applied, a decision is reached whether to block access, grant access, or require additional verification. User flows are used to create sign in and sign-up policies for external identities (Microsoft Entra ID B2C). External identities help companies manage external users. Role-based access is used to assign a collection of permissions to a user.

Question 18

A company uses Microsoft Entra ID.

The help desk receives multiple requests for password changes from employees.

You need to recommend a solution to avoid these requests.

Which Microsoft Entra ID feature should you recommend?

Answer 18

self-service password reset

Microsoft Entra ID self-service password reset is a Microsoft Entra ID feature that allows users to reset and update their passwords. Multifactor authentication, password hash synchronization, and pass-through authentication do not provide this capability. They are features of Microsoft Entra ID, but each provides a different function. Multifactor authentication creates an additional layer of security after authentication. Password hash synchronization enables authentication for on-premises Active Directory objects in Microsoft Entra ID. Pass-through authentication enables sign-in to both on-premises and cloud applications using the same password.

Question 19

A company uses Microsoft 365.

The company requires a tool to understand its current security posture.

You recommend Microsoft Secure Score.

You need to describe its capabilities.

Which three capabilities should you describe? Each correct answer presents a complete solution.

Answer 19

Secure Score provides improvement actions on the current security posture.
Companies can use Secure Score to measure their current security posture across apps, identities, and devices.
Secure Score can be used to set key performance indicators (KPIs) for the company’s security posture.

Secure Score is one of the tools in the Microsoft Defender portal. It shows the company’s current security posture. The higher the Secure Score, the better the company’s security posture.

Question 20

A company uses Microsoft 365.

The company wants to monitor the following activities:

suspicious behaviors of employees
details of mailbox attacks and user involved attacks
breach activities on devices
You need to identify which admin portal the company should use.

Which admin portal should you identify?

Answer 20

Microsoft 365 Defender portal

Microsoft 365 Defender portal is used to manage and monitor security across apps, data, identities, and infrastructure. The Exchange admin portal, SharePoint admin center, and Microsoft Purview compliance portal cannot be used to manage or monitor these attacks. The Exchange admin portal is used to manage advanced email settings, such as quarantine, encryption, and mail flow rules. The SharePoint admin center is used to manage sites, sharing, and storage for ‎SharePoint‎ and ‎OneDrive‎. The Purview compliance portal is used to help the company understand its compliance needs.

Question 21

A company uses Microsoft 365.

The company wants protection against insider risks, such as IP theft and data leaks.

You need to recommend a service that provides this type of protection.

What should you recommend?

Answer 21

Microsoft Purview

Microsoft Purview Insider Risk Management uses indicators from Microsoft 365 and third parties to detect potentially risky activity. It uses logs from Microsoft 365 and Microsoft Graph, allowing a company to identify risks and take action to mitigate the risks. Protecting against IP theft requires understanding the content of data stored and how it is shared, which is not offered by Microsoft Defender for Endpoint. The Priva Privacy Risk Management feature can detect overexposed data and data transfers but does not block them. It only notifies users who must decide which action to take themselves. The Service Trust Portal demonstrates how Microsoft cloud services protect customer’s data. It provides information rather than actual protection against IP theft and data leaks.

Question 22

A company uses Microsoft 365.

The company requires documentation that confirms Microsoft cloud services will protect company data.

You need to recommend a tool that provides the documentation.

Which tool should you recommend?

Answer 22

Service Trust Portal

The Service Trust Portal is the repository of artifacts documenting how Microsoft cloud services protect company data. Whitepapers, certifications, reports, and other documents are available from the portal.

Secure Score offers a score, along with recommendations to improve a company’s security posture. Purview offers means for a company to manage its compliance needs, with tools to handle information governance, information protection, and others. Finally, eDiscovery solutions are intended to allow searching through application content, being available for Microsoft OneDrive, Teams, SharePoint, and Exchange, among others.

Question 23

A company needs to implement Microsoft productivity solutions for its 500 employees.

The company has high speed internet access from its locations to the cloud. Remote workers have high speed internet access to the cloud.

Internet connectivity uptime is not 100%.

Users must be able to:

Collaborate within documents and workbooks.
Create relational databases.
You need to recommend a solution.

Which solution should you recommend?

Answer 23

Microsoft 365 Enterprise

Relational databases can be created using Microsoft Access, available as a desktop-only application. Enterprise subscriptions allow for more than 300 employees, covering the 500 employee’s requirement. Microsoft 365 web apps for business or enterprise do not offer Microsoft Access, which would allow the creation of relational databases, as it is a desktop-only application. Microsoft 365 web apps (for business or enterprise) do not offer Microsoft Access, which would allow the creation of relational databases, as it is a desktop-only application. Furthermore, business subscriptions are available only with up to 300 licenses. Although Microsoft Access is available as a desktop-only application in Microsoft 365 Business, it is available for organizations having only up to 300 subscriptions.

Question 24

A company implements Microsoft 365.

The company needs to enable team leads to manage the tasks for team members.

You need to recommend a solution that meets the following requirements:

Assign a task to multiple team members.
Manage tasks in a Calendar view.
Visualize the progress of individual and team tasks in a Charts view.
Which Microsoft 365 app should you recommend?

Answer 24

Planner

Planner provides the team lead and team members the ability to manage tasks in a structured manner by creating a plan and buckets, for organizing assigned tasks. Tasks can be displayed in different views such as Charts and Calendar. To Do manages your to do list on a day-to-day basis. OneDrive is a cloud library for file storage and sharing. Bookings provides an easy way to manage the scheduling of appointments. To Do, OneDrive, and Bookings do not support task management.

Question 25

A company plans to use Microsoft 365. You need to make several apps available for users. Which app must you install locally on each user’s computer?

Answer 25

Publisher Publisher is a Microsoft 365 app that needs to be installed on a local computer to be used by a licensed user. OneDrive, OneNote, and Teams are Microsoft 365 apps that do not require a local installation in order to be used by a licensed user.

Question 26

A company uses Microsoft 365. The company needs to manage virtual scheduling and appointments. This solution must meet the following requirements: Enable the company to set appointment times, business hours, and pricing. Allow customers to schedule appointments through a webpage. Enable the company access to a contact list of customers. Which Microsoft 365 app should you recommend?

Answer 26

Bookings Bookings provides an easy way for the company to set appointment times and business hours, enables customers to schedule appointments, and access contact lists of customers. To Do manages your to do list on a day-to-day basis. Planner gives teams the ability to manage tasks in a structured manner by creating a plan for it, assign tasks in a board, and view progress as charts. Forms provides the ability to create surveys, quizzes, and polls. To Do, Planner, and Forms do not provide the ability to manage virtual scheduling and appointments.

Question 27

A company evaluates appointment scheduling solutions to implement. You need to recommend a solution that meets the following requirements: Users must be able to create pages that are accessible through shareable links for customers to schedule appointments. Integrate with Microsoft Teams. Which solution should you recommend?

Answer 27

Bookings Bookings is a web-based tool for managing appointments. It allows creating a shareable link where customers can schedule and reschedule appointments. It can be integrated with Teams. To Do helps users plan and manage their day with tasks. Planner helps manage shared task-based activities. Although it can be integrated with Teams, it does not offer the functionality of creating a shareable self-service booking page. Project is a tool for complex work efforts. It is extensible with other apps, as it is built on the Power Platform. Views can be used for tasks using Kanban task boards and Gantt charts.

Question 28

A company plans to use Microsoft 365. You need to recommend a solution that meets the company's requirements: Communicate with chat, voice calling, and online meetings. Communicate with email messages. Schedule meetings and appointments. Which two applications should you recommend? Each answer is part of the solution.

Answer 28

Microsoft Teams Microsoft Exchange Teams provides capabilities to meet, chat, call, and collaborate in one place. Exchange provides a user with a personalized inbox to deal with emails and captures events in a calendar. Bookings allows you to customize appointment details and booking requirements. OneDrive is a cloud document library for storing and sharing files. To Do is a tool to manage personal tasks and to-do lists.

Question 29

A company implements Microsoft 365. The company needs to collaborate on files. You need to recommend a solution that meets the following requirements: Provide access to files when there is no internet connectivity. Provide sharing of files with users internal and external to the organization. Provide native applications for Mac, Windows, and mobile operating systems. Which solution should you recommend?

Answer 29

Microsoft OneDrive OneDrive is a tool for collaborating on files that allows offline access to files, offers desktop-based versions of the application SharePoint teams sites allow collaboration on documents and sharing with internal and external users. It also offers a desktop-based application but does not offer offline access. Microsoft Teams is a collaboration tool intended for chatting, meetings, and calendar. Although you can store files on Teams sites, and there are desktop-based applications available, the files are not accessible while offline. Viva Engage is a corporate social network. Content can be shared to internal and external users. It is available as a desktop-based app, but it does not offer offline file access.

Question 30

A company uses Microsoft 365. The company plans to arrange a conference call that will be attended by 4,500 employees. You need to recommend a solution that meets the following requirements: All employees can attend the meeting. All employees can participate by using moderated Q&A. Which solution should you recommend?

Answer 30

Live event Microsoft Teams live events support a moderated Q&A experience for up to 20,000 participants. Microsoft Teams meetings support view-only capabilities for up to 20,000 participants and screen sharing for up to 1,000 participants, but not a moderated Q&A experience for up to 20,000 participants. Microsoft Teams webinars support up to 1,000 participants with fully interactive capabilities. Microsoft Stream is used to upload, view, and share videos.

Question 31

A company evaluates productivity solutions to implement. The solution must be able to: Provide departments access to secure shared file storage. Facilitate department-wide co-authoring. Provide workflow integration with Microsoft Power Automate. You need to recommend a solution to implement. Which solution should you recommend?

Answer 31

Microsoft SharePoint team sites SharePoint team sites provide secure shared file storage, facilitate collaboration on content authoring among all team members, as well as support integration with Microsoft Teams and Power Automate. SharePoint communication sites are meant to provide means for communicating information across teams, with a small number of content authors. Viva Engage is primarily a social networking platform. While Viva Engage does offer integration with Teams, it does not support workflow integration with Power Automate. This applies to both internal and external network.

Question 32

A company uses Microsoft OneDrive to collaborate on documents. The chief security officer (CSO) states there may be a security issue based upon how the system displays file recommendations for users. You need to identify the service that provides this capability. Which service should you identify?

Answer 32

Microsoft Graph Finding content in OneDrive is simplified through the Graph application programming interface. This feature provides file recommendations based on your relationship to other people, how you received various files, and when you last accessed them. Planner is a cloud-based service to organize your daily activities, with features such as to-do lists. Viva is an employee experience platform (EXP) that empowers people and teams to be their best, from anywhere, bringing together communications, insights, knowledge, learning, and resources within the flow of everyday work and collaboration. Viva Engage is a secure enterprise social network internal to an organization.

Question 33

A company uses Microsoft 365. The company plans to arrange a Microsoft Teams meeting for 4,500 employees. You need to specify the maximum number of participants that will be able to call in to the meeting from their phones. Which number should you specify?

Answer 33

1,000 Microsoft Teams audio conferencing supports up to 1,000 participants.

Question 34

A company uses Microsoft 365. The company evaluates productivity solutions to implement. The solution must be able to: Provide secure communication with users across multiple departments in the same organization. Limit access to company employees with a valid email address. Support communication through a dedicated desktop application. Support for playing videos in-line and for automatic generation of transcriptions with Microsoft Stream. You need to recommend a solution to implement. Which solution should you recommend?

Answer 34

Microsoft Viva Engage internal network Viva Engage internal network provides secure communication with users across multiple departments in the same company, limits access to company members with a valid email address, as well as supporting communication through dedicated desktop application and playing of videos in-line and for automatic generation of transcriptions with Microsoft Stream. SharePoint team sites do not support communication via a dedicated desktop application or playing of videos in-line and for automatic generation of transcriptions. Viva Engage external network provides the required collaboration capabilities but does not limit access to company employees with a valid email address.

Question 35

A company implements Microsoft 365. The Sales team currently communicates with the Customer Support team by email messages. The Sales team and Customer Support team need to be able to collaborate on documents together, editing, and commenting in real time. You need to recommend a collaboration solution for the teams to use. Which three solutions should you recommend? Each correct answer is part of the solution.

Answer 35

Microsoft OneNote Microsoft SharePoint Microsoft Teams OneNote provides the capability to share a notebook, insert linked files, and real-time editing. SharePoint provides an intranet site for sharing files and real-time editing and is ideal for this scenario. Microsoft Teams provides the capability to set up a team with channels for specific people to share files and real-time editing. Bookings is a scheduling tool and would not help in this scenario. Viva Connections is an employee insights tool and would not help in this scenario.

Question 36

A company implements Microsoft 365. The company needs to implement a Cloud PC solution for 600 employees. The solution must meet the following requirements: Fixed fee-based pricing model. Full integration with Microsoft Intune by default. Ability to be provisioned with custom images. You need to recommend a cloud solution. Which solution should you recommend?

Answer 36

Windows 365 Enterprise Windows 365 Enterprise is for large enterprises and provides unlimited Cloud PCs available and a fixed fee-based pricing model. Windows 365 Enterprise can run custom images on Cloud PCs and has full integration with Microsoft Intune by default. Windows 365 Business is for small enterprises with up to 300 Cloud PCs. It cannot be configured with custom images and does not have full integration with Microsoft Intune by default. Azure Virtual Desktop and Azure Virtual Machine have a flexible consumption-based pricing model.

Question 37

A company uses Microsoft 365. The company needs to implement a virtual desktop solution for 1,000 employees. You need to recommend a solution that meets the following requirements: Provide dedicated desktop compute resources to each user. Integrate with Microsoft Intune and Defender without installing additional software. Provide automatic provisioning triggered by a user license assignment. Minimize the maintenance effort. Which solution should you recommend?

Answer 37

Windows 365 Enterprise Windows 365 Enterprise provides dedicated desktop compute resources to each individual user, integrates natively with Microsoft Intune and Defender, offers automatic provisioning triggered by a user license assignment, minimizes the maintenance overhead, and supports organizations with more than 300 users. Windows 365 Business is limited to 300 users. Azure Virtual Desktop minimizes the maintenance overhead, but it does not provide dedicated desktop compute resources to each individual user, does not integrate natively with Microsoft Intune and Defender, and it does not offer automatic provisioning triggered by a user license assignment. Azure Virtual Machine does not minimize the maintenance overhead, does not provide dedicated desktop compute resources to each individual user, does not integrate natively with Microsoft Intune and Defender, and it does not offer automatic provisioning triggered by a user license assignment.

Question 38

A company implements Microsoft 365. The company needs a cloud-based service that can manage all devices and applications. You need to recommend a service that meets the following requirements: Ability to manage Windows and Mac operating systems. Ability to manage Android and iOS/iPadOS. Ability to integrate with Microsoft Entra ID. Provide insights into compliance status of devices. Which service should you recommend?

Answer 38

Microsoft Intune Intune provides a cloud-based service for managing applications and devices. It provides the ability to manage Windows, MacOS, Android, Android Enterprise, and iOS/iPadOS. Intune integrates with Microsoft Entra ID and gives the ability to check for compliance status of devices. Desktop Analytics is a cloud-based service that provides insights on the update readiness of your client pc. Configuration manager is an on-premises management solution that manages client computers and servers on the corporate network or internet based. Windows 365 Enterprise is a Cloud PC. Desktop Analytics, Configuration manager, and Windows 365 Enterprise do not provide a cloud-based service to manage devices and applications.

Question 39

A company uses Microsoft 365. The company needs to virtualize applications for users. You need to recommend a solution that provides: Virtualized desktops for use by employees. Consumption-based pricing. Which solution should you recommend?

Answer 39

Microsoft Azure Virtual Desktop Azure Virtual Desktop allows virtualization of apps and desktops, allowing them to be accessible by single or multiple users. Windows 365 is a Cloud PC solution, accessible by a single user. Microsoft 365 is the evolution of Office 365, including the Office apps and Windows licenses. Azure Bastion is a broker service for accessing VMs hosted in Azure.

Question 40

A small manufacturing company uses factory automation controls in a Windows 11 environment. The engineering manager has a concern that manufacturing will be impacted by Windows updates. You need to recommend a Servicing channel solution that includes the following requirements: Windows 11 devices only receive the minimum required service updates. All systems receive security updates. Which solution should you recommend?

Answer 40

Long-Term Servicing Channel Long-Term Servicing Channel is the best match for the minimum required service requirements. The Windows Insider Program does not fit the requirements as it would put the customer’s production machines into the early adopters group. The General Availability Channel does not fit the minimum required service update requirements. Semi-Annual Enterprise Channel is an update channel for Microsoft 365 Apps (Office) and does not apply to Windows.

Question 41

A company implements Microsoft 365. The company needs a solution that can intelligently and securely manage the pre-configuration and set-up of new devices. You need to recommend a service that meets the following requirements: Support Windows 10 and 11. Simplify the lifecycle management of the devices. Integrate the devices with existing device and application management solutions. Which solution should you recommend?

Answer 41

Windows Autopilot Windows Autopilot manages the pre-configuration and setup of new devices. Windows Autopilot is available on Windows 10 and 11 devices and simplifies the lifecycle management of the device. Windows Autopilot also automatically enrolls the devices in Intune and can integrate the devices with Configuration Manager. Windows 365, Desktop Analytics, and Configuration Manager do not manage the pre-configuration and set-up of new devices.

Question 42

A company uses Microsoft 365. The company needs to use Microsoft 365 products more efficiently. You need to recommend an analytics solution. Which solution should you recommend?

Answer 42

productivity score report The productivity score report provides specific recommendations that help organizations to use Microsoft 365 products more efficiently. The usage report helps understand how people in the organization use Microsoft 365 services. The Endpoint Manager admin center offers insights regarding the Endpoint Manager functionality, allowing for identifying status of devices used by people within the organization. The Teams admin center offers insights regarding the Teams status, including user activity and device usage reports. Usage report, Endpoint Manager admin center, and Teams admin center do not provide specific recommendations regarding optimizing the usage of Teams or other Microsoft 365 services.

Question 43

A company uses Microsoft 365. The company wants to help employees find a balance between productivity and well-being. You need to recommend a solution that allows the identification of teams' work patterns that could lead to burnout. Which solution should you recommend?

Answer 43

Manager Insights feature of Microsoft Viva Insights Manager Insights in Viva Insights allows users to understand patterns such as after-hours work, meeting overload, or too little focus time. This can provide insights to foster a healthy and successful team. Personal Insights in Viva Insights allows individuals to get actionable recommendations to improve work patterns, from the personalized Viva Insights app in Microsoft Teams. Usage reports allow an organization to understand how people are using the Microsoft 365 apps and services. Security and compliance reports show information about security trends and track the protection of your identities, data, devices, apps, and infrastructure.

Question 44

A company uses Microsoft 365. The company needs to understand the employee adoption rate for Microsoft 365 apps and the company’s overall productivity score. The company needs a report that shows information for the past 90 days. The report must include the following information: Total number of Microsoft Office activations Total number of stored files Microsoft browser usage You need to recommend an admin center the report can be generated from. Which admin center should you recommend?

Answer 44

Microsoft 365 Admin center Microsoft 365 Admin center displays the company’s productivity score, number of office activations, files stored, and Microsoft’s browser usage for last 7, 30, 90, and 180 days. Teams Admin center displays usage reports within Teams. Compliance Admin center displays the company’s compliance score and recommended actions to improve this score. SharePoint Admin center displays reports on content services and data access governance.

Question 45

A company uses Microsoft 365. A new user signs into the Microsoft 365 user portal by using a third-party web browser. The user is not able to access all Microsoft 365 apps. You need to recommend a solution. What should you recommend?

Answer 45

Assign a license to the user. To allow a user to access Microsoft 365 applications via the user portal, you must assign a Microsoft 365 license to the user. The global reader role allows a user to view admin features and settings in Microsoft 365 admin centers, but not to access Microsoft 365 applications via the user portal. Access to the Microsoft 365 user portal does not require browser extensions or the use of Microsoft Edge.

Question 46

A company creates virtual machines in the public cloud. The company needs to have full responsibility for managing the operating systems and network controls. Which cloud service model should you use?

Answer 46

Infrastructure-as-a-Service (IaaS) The IaaS model provides the ability to have full responsibility for the management of your operating systems and network controls. Software-as-a-Service provides access to the applications in the cloud. All you need is to provide the data. Operating systems and network controls cannot be managed in the SaaS model. Operating systems cannot be managed with this model and network controls are a shared responsibility.

Question 47

A company uses Microsoft 365. Which three services are fully hosted and managed by Microsoft in the cloud? Each correct answer is a complete solution.

Answer 47

Microsoft OneDrive Microsoft Bookings Microsoft Viva Connections OneDrive is a fully managed service by Microsoft. Bookings is a fully managed scheduling application. Viva is a fully managed employee experience application. OneDrive is a fully managed service by Microsoft. Microsoft Entra ID is not a fully managed service by Microsoft.

Question 48

A company evaluates productivity solutions to implement. The solution must be able to: Provide employees access to Microsoft Office applications. Minimize the company’s maintenance and management costs. You need to recommend a solution. Which type of cloud service should you recommend?

Answer 48

Software as a Service (SaaS) The company should use Microsoft 365, which is an example of Software as a Service (SaaS). SaaS provides the ability to use software without the need for development of custom software-based solutions or managing the underlying networking, storage, and compute services. IaaS consists of infrastructure services (such as networking and storage) and compute offerings that provide full access to the operating system running in cloud-hosted virtual machines but imposes extra management and maintenance overhead. PaaS consists of services that provide the ability to develop software-based solutions without the need to manage the underlying networking, storage, and compute services, as well as eliminate the need for full access to the operating system running in cloud-hosted virtual machines. However, PaaS solutions do require a certain degree of management and maintenance, considerably higher than Software as a Service (SaaS) offerings.

Question 49

A company uses a Microsoft SQL Server with several databases in their data center. The company plans to move the databases to the cloud. The cloud provider should be responsible for: Software installation Database backups Database engine upgrades You need to recommend a service. Which type of service should you recommend?

Answer 49

Platform-as-a-Service (PaaS) Platform-as-a-Service (PaaS) is similar to IaaS (virtual machines) but offers a specific service with most of the management being the responsibility of the cloud provider. Software-as-a-Service (SaaS) is software hosted by a cloud provider and available to users. Infrastructure-as-a-Service (IaaS) is equivalent to virtual machines, where the customer is responsible for installing and configuring all the software running on it. Function-as-a-Service (FaaS) offers a platform for hosting functions, which usually respond to events, being triggered only for a very specific action and stopped immediately after concluding the task.

Question 50

A company hosts several services in an on-premises data center. You are making a presentation to the company about the benefits of cloud computing. Which two cloud computing benefits should you describe? Each correct answer presents a complete solution.

Answer 50

high availability of resources ability to deploy apps across regions Cloud computing provides high availability of resources. Cloud computing provides geo-distribution, which gives the ability to deploy apps and other resources across regions. In cloud computing, the service provider has control of the data center, not the company. In cloud computing, data does not reside locally.