I85PREP
⌘ K
MS-900 study materials
MS-900 study resources

MS-900 practice questions

One question at a time. Build your MS-900 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Describe Microsoft 365 apps and services

Which Microsoft 365 service hosts user mailboxes in the cloud?

  1. OneDrive for Business
  2. Microsoft Teams
  3. SharePoint Online
  4. Exchange Online Correct answer.

Explanation

Exchange Online is the cloud email service in Microsoft 365 and holds each licensed user's mailbox, calendar, and contacts. The other services handle content collaboration and communication rather than mailbox hosting.

Question 2Describe Microsoft 365 apps and services

Which Microsoft 365 app is the primary hub for team chat, meetings, and calling?

  1. Microsoft Outlook
  2. Microsoft Viva Engage
  3. Microsoft SharePoint
  4. Microsoft Teams Correct answer.

Explanation

Microsoft Teams combines persistent chat, meetings, calling, and app integration in a single workspace. Outlook centers on email and calendar, while SharePoint and Viva Engage serve content and community scenarios.

Question 3Describe Microsoft 365 apps and services

Which service gives each licensed user personal cloud storage for files that can be shared?

  1. Exchange Online
  2. Microsoft Stream
  3. OneDrive Correct answer.
  4. SharePoint Online

Explanation

OneDrive provides per-user cloud storage where files can be kept private or shared with specific people. SharePoint Online is oriented toward shared team sites, while Exchange Online and Stream serve other workloads.

Question 4Describe Microsoft 365 apps and services

What is the primary purpose of SharePoint Online in Microsoft 365?

  1. Building intranet sites and libraries Correct answer.
  2. Recording and transcribing meetings
  3. Enforcing device compliance policies
  4. Hosting each user's cloud-based mailbox

Explanation

SharePoint Online is the content collaboration platform used to build intranet sites, document libraries, and lists. Mailboxes belong to Exchange Online, compliance policies to Intune, and meeting recording to Teams and Stream.

Question 5Describe Microsoft 365 apps and services

Which Power Platform tool automates repetitive business processes with little or no code?

  1. Power Automate Correct answer.
  2. Power Apps canvas apps
  3. Power BI reports
  4. Power Pages websites

Explanation

Power Automate builds flows that connect services and move data automatically between them. Power BI provides analytics, Power Apps builds custom applications, and Power Pages builds external-facing websites.

Question 6Describe Microsoft 365 apps and services

Which Microsoft 365 service is used to build interactive reports and dashboards from data?

  1. Microsoft Planner
  2. Microsoft Forms
  3. Microsoft Lists
  4. Power BI Correct answer.

Explanation

Power BI connects to data sources and produces interactive reports and dashboards for analysis. Forms collects responses, Planner tracks team tasks, and Lists stores structured records.

Question 7Describe Microsoft 365 apps and services

On what basis is Microsoft 365 Apps for enterprise licensed?

  1. Per mailbox, with unlimited devices
  2. Per device, with unlimited users
  3. Per site collection, with unlimited users
  4. Per user, with installs on multiple devices Correct answer.

Explanation

Microsoft 365 Apps for enterprise is assigned to a user, and that user can install the suite on up to five PCs or Macs, five tablets, and five phones. The license follows the user rather than a single device, mailbox, or site.

Question 8Describe Microsoft 365 apps and services

Where does an administrator manage users, license assignments, and billing for a Microsoft 365 tenant?

  1. Microsoft Purview portal
  2. Microsoft 365 admin center Correct answer.
  3. Microsoft Entra admin center
  4. Microsoft Teams admin center

Explanation

The Microsoft 365 admin center is the primary portal for user accounts, license assignment, subscriptions, and billing. The Teams and Entra admin centers manage narrower workloads, and Purview focuses on compliance.

Question 9Describe Microsoft 365 apps and services

What distinguishes a Teams channel from a Teams chat?

  1. Chats are shared team spaces; channels are private conversations
  2. Channels can include files; chats cannot include files
  3. Chats can include meetings; channels cannot include meetings
  4. Channels are shared team spaces; chats are private conversations Correct answer.

Explanation

A channel is a shared conversation inside a team that all team members can access, whereas a chat is private to the people included in it. Both channels and chats support file sharing and meetings, so the difference is audience rather than capability.

Question 10Describe Microsoft 365 apps and services

By default, how are permissions applied to a new SharePoint document library?

  1. Only site owners can view new libraries
  2. Each file inherits permissions from its author
  3. The library inherits permissions from its parent site Correct answer.
  4. Permissions come from the Microsoft 365 group mailbox

Explanation

New libraries, folders, and items inherit permissions from the site by default, which keeps administration simple. Inheritance can be deliberately broken when a library needs unique permissions.

Question 11Describe Microsoft 365 apps and services

A Microsoft 365 group provides shared membership used by which combination of services?

  1. Only the Microsoft Teams workspace and its channels
  2. Only the Exchange Online mailbox and shared calendar
  3. Mailbox, calendar, SharePoint site, and Teams Correct answer.
  4. Only the SharePoint team site and its document libraries

Explanation

Creating a Microsoft 365 group provisions a shared mailbox, calendar, SharePoint team site, and Teams workspace from a single membership list. That single membership model reduces administrative effort across the connected services.

Question 12Describe Microsoft 365 apps and services

Which app should a team use to organize work on a shared kanban-style task board?

  1. Microsoft Lists
  2. Microsoft Bookings
  3. Microsoft To Do
  4. Microsoft Planner Correct answer.

Explanation

Planner organizes team work into plans, buckets, and tasks with assignments and due dates on a board. To Do is personal task management, Lists is for structured records, and Bookings handles appointments.

Question 13Describe Microsoft 365 apps and services

Which Microsoft 365 service hosts enterprise social communities and leadership conversations?

  1. Viva Learning
  2. Viva Goals
  3. Viva Insights
  4. Viva Engage Correct answer.

Explanation

Viva Engage provides communities, conversations, and storylines for enterprise social networking. Viva Insights analyzes work patterns, Viva Learning curates learning content, and Viva Goals tracks objectives and key results.

Question 14Describe Microsoft 365 apps and services

A user needs to collect survey responses from people outside the organization. Which app fits best?

  1. Microsoft Forms Correct answer.
  2. Microsoft Bookings
  3. Microsoft Lists
  4. Microsoft Planner

Explanation

Forms creates surveys, quizzes, and polls and can collect responses from external people when the form link is shared. Lists, Planner, and Bookings serve tracking, task, and scheduling scenarios.

Question 15Describe Microsoft 365 apps and services

Which app is best suited for tracking structured information such as issues or inventory with custom views?

  1. Microsoft Lists Correct answer.
  2. Microsoft To Do
  3. Microsoft Planner
  4. Microsoft Forms

Explanation

Lists stores structured records with custom columns, views, and formatting, which suits issue tracking, inventory, and similar data. To Do and Planner manage tasks, and Forms collects responses.

Question 16Describe Microsoft 365 apps and services

Which app is designed for an individual to manage personal tasks and daily to-dos across devices?

  1. Microsoft Planner
  2. Microsoft Lists
  3. Microsoft To Do Correct answer.
  4. Microsoft Bookings

Explanation

Microsoft To Do is a personal task manager that syncs tasks and reminders across devices and surfaces Outlook flagged items. Planner coordinates team work, Lists stores structured records, and Bookings schedules appointments.

Question 17Describe Microsoft 365 apps and services

How does Microsoft 365 Copilot ground its responses in organizational content?

  1. It uploads tenant documents to a public model
  2. It relies only on public internet search results
  3. It requires daily manual data uploads by admins
  4. It uses Microsoft Graph data the user can access Correct answer.

Explanation

Copilot retrieves content through the Microsoft Graph and honours the permissions the signed-in user already has, so answers reflect accessible tenant data. It does not bypass access controls, publish tenant content, or depend on manual daily uploads.

Question 18Describe Microsoft 365 apps and services

What does Windows 365 provide?

  1. A local Windows installation managed by Intune
  2. A backup service for on-premises file shares
  3. A cloud PC streamed to a user's device Correct answer.
  4. A browser-only edition of Microsoft 365 Apps

Explanation

Windows 365 delivers a Cloud PC, which is a Windows desktop hosted in the cloud and streamed to the user's device. Intune can manage devices but does not host a desktop, and the web versions of the apps are a separate offering.

Question 19Describe Microsoft 365 apps and services

Which Microsoft 365 service manages device enrollment and compliance policies?

  1. Microsoft Defender
  2. Microsoft Entra ID
  3. Microsoft Intune Correct answer.
  4. Microsoft Purview

Explanation

Intune handles device enrollment, configuration profiles, compliance policies, and app deployment for managed endpoints. Purview addresses data compliance, Entra ID addresses identity, and Defender addresses threat protection.

Question 20Describe Microsoft 365 apps and services

Which service provides identity and access management, including single sign-on and conditional access?

  1. Microsoft Entra ID Correct answer.
  2. Microsoft Defender for Business
  3. Microsoft Purview
  4. Microsoft Intune

Explanation

Microsoft Entra ID is the cloud identity provider for Microsoft 365 and supports single sign-on, multifactor authentication, and conditional access. Intune, Defender, and Purview address device, threat, and data concerns respectively.

Question 21Describe Microsoft 365 apps and services

A compliance officer must find sensitive information across Exchange, SharePoint, and OneDrive. Which service should be used?

  1. Microsoft Intune
  2. Microsoft Defender for Cloud Apps
  3. Microsoft Purview Correct answer.
  4. Microsoft Entra ID

Explanation

Microsoft Purview provides data classification, sensitive information types, and policies that span Exchange, SharePoint, and OneDrive. Intune and Entra ID manage devices and identities, while Defender for Cloud Apps governs SaaS application usage.

Question 22Describe Microsoft 365 apps and services

An administrator wants advance notice of planned changes that will affect the tenant. Which tool should they use?

  1. Service health
  2. Message center Correct answer.
  3. Service requests
  4. Usage reports

Explanation

Message center publishes tenant-specific announcements about upcoming changes, including timing and any required actions. Service health reports current incidents and advisories instead of planned feature changes.

Question 23Describe Microsoft 365 apps and services

Which capabilities does Microsoft 365 E3 add beyond Office 365 E3?

  1. Desktop Word, Excel, and PowerPoint
  2. Exchange Online mailboxes with 100 GB
  3. Windows Enterprise and EMS Correct answer.
  4. OneDrive storage and SharePoint team sites

Explanation

Office 365 E3 already includes the Office apps, Exchange Online, SharePoint, and OneDrive. Microsoft 365 E3 adds Windows Enterprise E3 plus the Enterprise Mobility + Security suite on top of those services.

Question 24Describe Microsoft 365 apps and services

What is a defining characteristic of a Microsoft Loop component?

  1. It is a static file downloaded before edits
  2. It is a portable block that stays in sync Correct answer.
  3. It is a meeting recording stored in Stream
  4. It is a dashboard tied to a Power BI dataset

Explanation

Loop components are portable units of content that stay synchronized wherever they are embedded, such as in a chat, email, or document. They are not static attachments, recordings, or reporting artefacts.

Question 25Describe Microsoft 365 apps and services

Which capability does Microsoft Defender for Business provide?

  1. Device configuration profiles and app deployment
  2. Data loss prevention policies for email
  3. Endpoint detection and response for devices Correct answer.
  4. Identity governance and access reviews

Explanation

Defender for Business is an endpoint security solution that includes antivirus, attack surface reduction, and endpoint detection and response. Data loss prevention belongs to Purview, identity governance to Entra ID, and configuration profiles to Intune.

Question 26Describe Microsoft 365 apps and services

Which Microsoft 365 service provides hosted email mailboxes, shared calendars, and built-in anti-spam and anti-malware filtering for an organization?

  1. OneDrive for Business
  2. Exchange Online Correct answer.
  3. SharePoint Online
  4. Microsoft Teams

Explanation

Exchange Online is the cloud service that hosts user mailboxes and calendars and applies mail-flow protection such as anti-spam and anti-malware filtering. The other services in the list handle collaboration, sites, or personal file storage rather than mail delivery.

Question 27Describe Microsoft 365 apps and services

A user wants a private cloud location for their own work documents that syncs automatically to a laptop and stays private until the user shares it. Which service should the user choose?

  1. OneDrive Correct answer.
  2. Microsoft Teams
  3. Exchange Online
  4. SharePoint Online

Explanation

OneDrive is the per-user storage service: content is private to the owner until shared, and the sync client keeps a local copy on devices. SharePoint Online is designed for team sites and shared libraries, while Teams and Exchange are for collaboration and mail.

Question 28Describe Microsoft 365 apps and services

Which Microsoft Entra capability allows users to reset their own passwords after proving their identity with a registered verification method?

  1. Privileged Identity Management
  2. Self-service password reset Correct answer.
  3. Microsoft Entra Password Protection
  4. Conditional Access

Explanation

Self-service password reset lets users unlock or reset their account by confirming identity through methods such as the Authenticator app, phone, or email. The other features govern access decisions, role activation, or password screening rather than user-initiated recovery.

Question 29Describe Microsoft 365 apps and services

A business analyst needs to automatically route approval requests and post a message when a form is submitted, without writing code. Which service should the analyst use?

  1. Power Apps
  2. Power BI
  3. Power Automate Correct answer.
  4. Microsoft Forms

Explanation

Power Automate builds workflows from triggers and actions, so a form submission can trigger an approval and a posted notification. Power BI visualizes data, Power Apps builds apps, and Microsoft Forms only gathers the responses.

Question 30Describe Microsoft 365 apps and services

A company needs a branded intranet site that publishes company-wide news to all employees, with content authored by a small communications team. Which SharePoint site type fits?

  1. Wiki page library
  2. Team site connected to a Microsoft 365 group
  3. SharePoint hub site
  4. Communication site Correct answer.

Explanation

A communication site is intended for a small authoring group to broadcast content to a broad read-only audience, which matches a corporate news intranet. Team sites are built for many contributors working together, and a hub site only associates other sites for navigation and search.

Question 31Describe Microsoft 365 apps and services

Which app lets customers book appointments with staff based on their availability and receive automatic confirmations?

  1. Microsoft Planner
  2. Microsoft To Do
  3. Microsoft Bookings Correct answer.
  4. Microsoft Lists

Explanation

Microsoft Bookings publishes a scheduling page, checks staff calendars for availability, and sends confirmations and reminders. To Do tracks personal tasks, Lists stores structured records, and Planner organizes team task boards.

Question 32Describe Microsoft 365 apps and services

An administrator needs to confirm whether Exchange Online is currently experiencing an active outage. Where should the administrator look?

  1. Message center
  2. Service health Correct answer.
  3. Usage reports
  4. Microsoft 365 roadmap

Explanation

Service health in the Microsoft 365 admin center shows the current status of each service and any active incidents or advisories. Message center and the roadmap communicate planned changes and new features, and usage reports show adoption rather than availability.

Question 33Describe Microsoft 365 apps and services

Which option lets a user open and edit Word, Excel, and PowerPoint files in a browser without installing any Office software?

  1. Microsoft 365 apps for the web Correct answer.
  2. Windows 365
  3. Microsoft 365 Copilot
  4. Microsoft 365 Apps for enterprise

Explanation

Microsoft 365 apps for the web are the browser-based versions of Word, Excel, PowerPoint, and Outlook that require no local installation. Microsoft 365 Apps for enterprise is the installed desktop suite, Windows 365 delivers a cloud PC, and Copilot is an AI assistant layered on top of the services.

Question 34Describe Microsoft 365 apps and services

A company wants its Teams users to chat and call people in a partner organization without giving those partner users access to the company's teams, channels, or files. What should be configured?

  1. Guest access
  2. Shared channels
  3. Anonymous meeting join
  4. External access Correct answer.

Explanation

External access permits federated chat and calling with users in other organizations while leaving the tenant's teams, channels, and files off limits. Guest access and shared channels deliberately grant access to internal collaboration resources, and anonymous join applies only to meetings.

Question 35Describe Microsoft 365 apps and services

An HR team wants to assign required training courses to employees, who then browse and complete the courses inside Teams alongside content from external learning catalogs. Which app provides this?

  1. Microsoft Viva Engage
  2. Microsoft Viva Insights
  3. Microsoft Viva Learning Correct answer.
  4. Microsoft Viva Goals

Explanation

Microsoft Viva Learning brings organizational and third-party learning content into Teams, lets administrators assign courses, and tracks completion. The other Viva modules address community conversation, productivity analytics, and objectives tracking.

Question 36Describe Microsoft 365 apps and services

A company issues personal phones to staff but does not enroll them in device management. Staff must be blocked from copying work content from Outlook mobile into personal apps. Which control should be used?

  1. Conditional Access sign-in frequency
  2. Device compliance policies
  3. Windows Autopilot
  4. App protection policies Correct answer.

Explanation

App protection policies in Microsoft Intune protect organizational data at the application layer, so copy-and-paste restrictions apply even on devices that are not enrolled. Compliance policies require enrollment, sign-in frequency controls reauthentication, and Autopilot provisions Windows devices.

Question 37Describe Microsoft 365 apps and services

Which capability is included in Microsoft 365 E5 but not in Microsoft 365 E3?

  1. Privileged Identity Management Correct answer.
  2. Microsoft 365 Apps for enterprise
  3. Microsoft Defender for Office 365 Plan 1
  4. Microsoft Intune Plan 1

Explanation

Microsoft 365 E5 includes Microsoft Entra ID P2, which provides Privileged Identity Management for just-in-time role activation and access reviews. Microsoft 365 E3 includes Entra ID P1 but not P2, while Apps for enterprise, Intune Plan 1, and Defender for Office 365 Plan 1 are part of E3.

Question 38Describe Microsoft 365 apps and services

A user with a Microsoft 365 Copilot license missed a Teams meeting. Which Copilot capability helps the user catch up on what was discussed and decided?

  1. Starting a recording automatically
  2. Booking a follow-up meeting
  3. Generating a recap with key points Correct answer.
  4. Translating the recording into another language

Explanation

Copilot in Teams can summarize a meeting from its transcript and surface key points and follow-up items so a participant can catch up quickly. Translation, recording, and scheduling are separate Teams features that do not produce an AI-generated summary.

Question 39Describe Microsoft 365 apps and services

Which Microsoft 365 capability lets users place and receive calls over the public switched telephone network with a phone number from inside Teams?

  1. Microsoft Teams external access
  2. Microsoft Teams town halls
  3. Microsoft Teams Phone Correct answer.
  4. Microsoft Teams webinars

Explanation

Microsoft Teams Phone adds PSTN calling so users can make and receive traditional telephone calls in the Teams client using an assigned number. External access covers federation with other organizations, and webinars and town halls are meeting formats for broadcasting.

Question 40Describe Microsoft 365 apps and services

A company wants the Desktop and Documents folders on Windows devices redirected to OneDrive automatically so those files are protected. Which feature should be configured?

  1. Retention policy
  2. Known Folder Move Correct answer.
  3. Files On-Demand
  4. Redirect to an on-premises file share

Explanation

Known Folder Move redirects Desktop, Documents, and Pictures to OneDrive so files are backed up and available across devices. Files On-Demand controls local caching of already-synced content, and a retention policy governs how long content is kept.

Question 41Describe Microsoft 365 apps and services

Where should users upload recorded presentations so colleagues can watch them on demand with transcripts and permission-based access inside Microsoft 365?

  1. Microsoft Stream Correct answer.
  2. SharePoint news posts
  3. Microsoft Teams chat
  4. Exchange Online public folders

Explanation

Microsoft Stream is the video service in Microsoft 365 that stores recordings in SharePoint, generates transcripts and captions, and enforces permissions. Chat is meant for short conversational exchange, and news posts are text-and-image pages rather than a video portal.

Question 42Describe Microsoft 365 apps and services

Which approach lets IT ship new Windows devices directly to employees so a device is automatically configured the first time the employee signs in, with no imaging performed by IT?

  1. Group Policy preferences
  2. Microsoft Deployment Toolkit
  3. Microsoft Intune compliance policies
  4. Windows Autopilot Correct answer.

Explanation

Windows Autopilot registers devices with the tenant so that out-of-box devices join the organization and receive configuration during the first user sign-in. Compliance policies only assess device state, Group Policy preferences set individual settings, and deployment toolkits rely on imaging.

Question 43Describe Microsoft 365 apps and services

Which Defender for Office 365 feature re-evaluates links in email at the moment a user clicks them and blocks access to malicious destinations?

  1. Anti-phishing policies
  2. Safe Attachments
  3. Tenant Allow/Block List
  4. Safe Links Correct answer.

Explanation

Safe Links rewrites and checks URLs at time of click, so a destination that becomes malicious after delivery is still blocked. Safe Attachments analyzes attachments in a sandbox, anti-phishing policies evaluate message and sender signals, and the tenant allow/block list is a manual override list.

Question 44Describe Microsoft 365 apps and services

What is the maximum number of users for which Microsoft 365 Business Premium can be licensed in a single organization?

  1. 25
  2. 300 Correct answer.
  3. 100
  4. Unlimited

Explanation

Microsoft 365 Business Premium is a small and medium business plan capped at 300 licensed users. Organizations that expect to grow beyond that ceiling must move to enterprise plans such as Microsoft 365 E3 or E5.

Question 45Describe Microsoft 365 apps and services

A compliance team must detect and block emails and Teams messages that contain credit card numbers, and show users a policy tip explaining the block. Which Microsoft Purview solution should they use?

  1. Data Loss Prevention Correct answer.
  2. eDiscovery
  3. Sensitivity labels
  4. Retention labels

Explanation

Data Loss Prevention policies inspect content for sensitive information types such as credit card numbers, block the action, and display policy tips to users. eDiscovery searches content for legal matters, while retention and sensitivity labels classify or preserve content rather than blocking its transmission.

Question 46Describe Microsoft 365 apps and services

Fabrikam users must collaborate in a Contoso Teams channel using their own Fabrikam credentials and must not appear as guest accounts in the Contoso directory. What should Contoso configure?

  1. Anonymous meeting join
  2. External access federation
  3. Guest access with a shared team
  4. A shared channel with B2B direct connect Correct answer.

Explanation

Shared channels combined with B2B direct connect let people from another tenant work in a channel with their home credentials without being added as guest accounts. Guest access creates guest objects in the directory, external access only enables chat and calling, and anonymous join is limited to meeting attendance.

Question 47Describe Microsoft 365 apps and services

All users whose job title attribute is set to Contingent Worker must automatically gain access to a SharePoint site, and lose it when the attribute changes. What should be configured?

  1. A Microsoft 365 group with manual membership
  2. A dynamic group with an attribute rule Correct answer.
  3. A Teams private channel
  4. A SharePoint permission level

Explanation

A dynamic group in Microsoft Entra ID evaluates a membership rule against user attributes, so access granted through that group follows the attribute automatically. Manual membership requires an administrator to add and remove people, and permission levels and private channels control access scope rather than group population.

Question 48Describe Microsoft 365 apps and services

An administrator must be able to create user accounts and reset passwords, but must not be able to view billing or assign administrator roles. Which Microsoft Entra role should be assigned?

  1. Global Administrator
  2. User Administrator Correct answer.
  3. Privileged Role Administrator
  4. Billing Administrator

Explanation

The User Administrator role covers creating and managing users and resetting passwords while excluding billing and role-assignment duties. Global Administrator and Privileged Role Administrator both exceed the requirement, and Billing Administrator cannot manage user accounts.

Question 49Describe Microsoft 365 apps and services

A security team wants visibility into which unsanctioned cloud apps employees are using and the ability to block those apps. Which service should they use?

  1. Microsoft Defender for Office 365
  2. Microsoft Defender for Cloud Apps Correct answer.
  3. Microsoft Intune
  4. Microsoft Purview Insider Risk Management

Explanation

Microsoft Defender for Cloud Apps is a cloud access security broker that discovers shadow IT from network traffic, assesses risk, and can block or restrict apps. Defender for Office 365 protects email and collaboration content, Intune manages devices and apps on endpoints, and Insider Risk Management detects risky user behavior.

Question 50Describe Microsoft 365 apps and services

Contoso must keep project documents for exactly seven years and then delete them, and records managers must be able to apply the rule manually to individual documents. Which Microsoft Purview feature should they use?

  1. An eDiscovery hold
  2. A retention policy applied to all SharePoint sites
  3. A sensitivity label
  4. A retention label Correct answer.

Explanation

A retention label can be published for manual application to individual items and enforces retention and disposition settings such as delete after seven years. A retention policy applies automatically at the location level without per-item manual application, sensitivity labels classify and protect content, and an eDiscovery hold preserves content for a legal matter.