MS-900 key terms

A cloud subscription that bundles productivity apps such as Exchange Online, SharePoint, and Teams with Windows and device management tools, licensed per user on a monthly or annual basis.

The locally installed versions of Word, Excel, PowerPoint, Outlook, and other Office programs, delivered through a Microsoft 365 subscription and kept current with automatic updates.

A hosted email service that supplies mailboxes, calendars, contacts, and spam filtering to an organization, reachable through Outlook, mobile clients, or a web browser.

A collaboration hub that combines persistent chat, online meetings, calling, and file sharing, with conversations organized into channels inside teams of people.

A cloud service for building intranet and team sites and for storing documents in libraries, offering versioning, workflows, search, and permission management for organizational content.

Per-user cloud storage that syncs files from a device and lets people share content with colleagues, while remaining owned and governed by the organization rather than the individual.

A family of employee-experience apps covering communications, insights, learning, knowledge, and goals, designed to surface culture and development content inside Microsoft Teams.

A set of low-code tools - Power Apps, Power Automate, Power BI, and Power Pages - used to build business apps, automate workflows, and analyze data without deep programming.

A cloud service that streams a personalized Windows desktop, complete with apps and settings, to any device, with the operating system hosted and managed by Microsoft.

A desktop and application virtualization service running in Azure that gives users remote access to a full Windows environment, including multi-session hosts shared by several users.

An AI assistant embedded in Microsoft 365 apps that draws on organizational content and large language models to draft text, summarize information, and answer questions in context.

A cloud service for mobile device management and mobile application management that pushes configuration, compliance, and protection policies to phones, tablets, and computers.

Microsoft's cloud identity and access management service, which stores user and group accounts and authenticates sign-ins to Microsoft 365 and thousands of other applications.

A web portal where administrators manage users, licenses, billing, service health, and configuration settings for their organization's Microsoft 365 subscription.

A security model that treats no request as trusted by default and verifies identity, device health, and context before granting access to each resource.

A policy engine in Microsoft Entra that allows or blocks access using signals such as user, group, device state, location, and risk, and can require extra controls before granting entry.

A sign-in requirement that combines two or more different proofs of identity, such as a password plus a phone approval or code, to limit damage from stolen credentials.

A service that shields email and collaboration tools from phishing, malware, and malicious links using safe attachments, safe links, and attack simulation training.

A cloud access security broker that discovers unsanctioned apps, monitors usage, and applies session and access policies to software-as-a-service applications across the organization.

A numerical rating of an organization's security posture compared with Microsoft recommendations, paired with improvement actions that raise the score when completed.

Tags applied to files, emails, and sites that classify content and can enforce encryption, watermarks, or access limits, staying attached to the content wherever it travels.

Policies that detect sensitive information such as card numbers or health records in email, files, and chats, then block, warn about, or audit the action being taken.

Rules that keep content for a set period and then delete it, applied across mailboxes, sites, and Teams locations so records are preserved or removed consistently.

Tools for identifying, placing on hold, searching, and exporting content from mailboxes and sites in response to investigations, litigation, or regulatory requests.

A Purview solution that uses behavioral signals and policy templates to detect risky user activity such as data leaks or exfiltration, then routes alerts to investigators for review.

A tool that assesses an organization's compliance posture against regulations and standards, listing recommended improvement actions and producing an overall compliance score.

A Microsoft website that publishes audit reports, compliance certifications, and security documentation so customers can verify how cloud services meet regulatory and industry standards.

A partner model in which resellers buy Microsoft cloud subscriptions and sell them to customers together with their own billing, provisioning, and first-line support services.

A volume-licensing contract for larger organizations that covers software and cloud services for a fixed term, usually three years, at negotiated organization-wide prices.

An enterprise plan that includes the core Office apps, Windows Enterprise, and foundational identity and device management, aimed at organizations with larger workforces.

The top enterprise plan, which adds advanced security, analytics, compliance, and calling capabilities on top of E3, including Defender XDR, premium Purview features, and Power BI Pro.

A plan for small and medium businesses that combines Office apps, email, Teams, device management, and advanced security features, limited to a maximum of 300 users.

Lower-cost Microsoft 365 plans such as F1 and F3 that give shift and deskless employees Teams, identity, and management tools, with F3 adding web and mobile Office apps.

An optional subscription attached to a base plan that unlocks extra capability, such as additional calling minutes or advanced compliance features, priced per user per month.

Assigning Microsoft 365 licenses to a security group so members automatically receive the license when they join and give it up when they leave.

A Microsoft benefit included with eligible subscriptions that provides guided deployment assistance and remote help for onboarding Microsoft 365 services.

A contractual commitment defining the uptime Microsoft guarantees for a service and the service credits a customer may claim if that target is missed.

A capability that lets individual users buy certain Microsoft subscriptions with their own payment method, which administrators can allow, restrict, or switch off.