Microsoft 365 Fundamentals (MS-900) Exam — Questions and Answers

Question 1: How does Microsoft 365's 'defense in depth' security strategy benefit organizations?

It delegates all security responsibilities to Microsoft, removing the need for customer-managed policies
It layers multiple security controls so that if one fails, others continue to protect the environment (Correct answer)
It relies on a single, highly advanced security control to block all threats at the perimeter
It focuses exclusively on endpoint security to prevent initial compromise

Correct answer: It layers multiple security controls so that if one fails, others continue to protect the environment

Defense in depth applies multiple layers of security controls (identity, network, data, endpoint) so a breach of one layer does not compromise the entire environment.

Question 2: A retail company has 500 frontline workers who primarily use shared devices. Which Microsoft 365 license is most appropriate for these users?

Microsoft 365 Business Premium
Microsoft 365 E5
Microsoft 365 F3 (Correct answer)
Microsoft 365 A3

Correct answer: Microsoft 365 F3

Microsoft 365 F3 (Firstline Worker) is designed for frontline workers and includes mobile-optimized tools suitable for shared-device scenarios.

Question 3: Which of the following is an example of a SaaS application included in Microsoft 365?

Azure Virtual Machines
Microsoft Teams (Correct answer)
Azure Kubernetes Service
Azure Blob Storage

Correct answer: Microsoft Teams

Microsoft Teams is a SaaS application fully managed by Microsoft and delivered over the internet as part of Microsoft 365.

Question 4: An organization is evaluating the total cost of ownership (TCO) when migrating to Microsoft 365. Which factor represents a cost REDUCTION in the cloud model?

Elimination of hardware refresh cycles and data center maintenance costs (Correct answer)
Increased need for on-site IT staff to manage cloud configurations
Higher per-user licensing costs compared to perpetual licenses
Requirement to purchase additional bandwidth for cloud connectivity

Correct answer: Elimination of hardware refresh cycles and data center maintenance costs

Moving to Microsoft 365 eliminates costs associated with hardware procurement, data center space, power, cooling, and periodic hardware refresh cycles.

Question 5: Which statement accurately describes the shared responsibility model in Microsoft 365?

Security responsibility is split equally 50/50 between Microsoft and the customer
The customer is responsible for all infrastructure and application security
Microsoft manages infrastructure security while customers manage identity, data, and devices (Correct answer)
Microsoft is responsible for all security including user data and identities

Correct answer: Microsoft manages infrastructure security while customers manage identity, data, and devices

In the shared responsibility model, Microsoft secures the cloud infrastructure while customers retain responsibility for identities, data access, and endpoint security.

Question 6: What is Microsoft FastTrack?

A data visualization tool
An Excel plugin
A deployment and onboarding assistance program (Correct answer)
A browser extension

Correct answer: A deployment and onboarding assistance program

Microsoft FastTrack is a valuable service designed to help organizations successfully deploy and adopt Microsoft 365 services. It provides expert guidance, tools, and engineering assistance to ensure a smooth transition and maximize the value derived from their Microsoft 365 investment.

Question 7: Which cloud computing benefit directly helps an organization eliminate the cost of purchasing and maintaining physical server hardware?

Automatic software version control
Faster internet connection speeds
Increased customization options
Reduced capital expenditure through infrastructure offloading (Correct answer)

Correct answer: Reduced capital expenditure through infrastructure offloading

By moving to cloud services like Microsoft 365, organizations eliminate the need to purchase, maintain, and refresh on-premises hardware, reducing capital expenditure.

Question 8: What is the function of Microsoft FastTrack in the context of Microsoft 365 deployments?

A premium support tier for enterprise Microsoft 365 customers
A free deployment assistance service provided by Microsoft for eligible customers (Correct answer)
A migration tool for moving data from Google Workspace to Microsoft 365
A performance optimization tool for speeding up Microsoft 365 applications

Correct answer: A free deployment assistance service provided by Microsoft for eligible customers

Microsoft FastTrack is a free customer success service that provides guidance, best practices, and resources to help organizations deploy and adopt Microsoft 365.

Question 9: A non-profit organization wants to maximize its Microsoft 365 investment. Which program should they investigate for discounted or donated software?

Microsoft Developer Network (MSDN)
Microsoft Action Pack
Microsoft Partner Network
Microsoft for Nonprofits (formerly TechSoup) (Correct answer)

Correct answer: Microsoft for Nonprofits (formerly TechSoup)

Microsoft for Nonprofits provides eligible nonprofit organizations with donated or deeply discounted Microsoft 365 licenses through the Microsoft nonprofit program.

Question 10: Which Microsoft 365 app allows users to create, share, and collaboratively edit Word, Excel, and PowerPoint files in a web browser?

Microsoft Forms
Microsoft Stream
Microsoft 365 Apps for the web (Office Online) (Correct answer)
Microsoft Whiteboard

Correct answer: Microsoft 365 Apps for the web (Office Online)

Microsoft 365 Apps for the web (formerly Office Online) provides browser-based versions of Word, Excel, PowerPoint, and OneNote for online collaboration.

Question 11: Which Microsoft 365 tool provides a centralized dashboard where security administrators can view alerts, incidents, and threat intelligence across Microsoft security products?

Microsoft 365 Defender portal (Correct answer)
Microsoft 365 Admin Center
Microsoft Endpoint Manager admin center
Microsoft Purview Compliance Portal

Correct answer: Microsoft 365 Defender portal

The Microsoft 365 Defender portal (security.microsoft.com) provides a unified view of security alerts, incidents, and threat data across Defender products.

Question 12: What is the key difference between Microsoft 365 E3 and Microsoft 365 E5 licensing?

E3 includes phone system capabilities while E5 does not
E5 includes advanced security, compliance, and analytics features not in E3 (Correct answer)
E5 is only available for government organizations
E5 supports more users than E3

Correct answer: E5 includes advanced security, compliance, and analytics features not in E3

Microsoft 365 E5 builds on E3 by adding advanced security (Microsoft Defender), compliance tools, and Power BI Pro, making it suitable for organizations with higher security needs.

Question 13: What is the primary purpose of Microsoft Intune in Microsoft 365?

Cloud-based endpoint management and mobile device management (Correct answer)
Identity and access management
File storage and synchronization
Email filtering and anti-spam

Correct answer: Cloud-based endpoint management and mobile device management

Microsoft Intune is a cloud-based service focused on mobile device management (MDM) and mobile application management (MAM) to help protect corporate data.

Question 14: Which of the following bundles includes Microsoft Viva Learning in full?

Viva Insights by Microsoft
Microsoft 365 E3
O365 E1
Microsoft Viva Suite (Correct answer)

Correct answer: Microsoft Viva Suite

Microsoft Viva Learning is one of the modules within the broader Microsoft Viva employee experience platform. While basic Viva Learning functionality might be available with some Microsoft 365 subscriptions, the full capabilities and advanced features of Viva Learning, along with other Viva modules like Viva Insights, Viva Topics, and Viva Connections, are included as part of the comprehensive Microsoft Viva Suite.

Question 15: Your business intends to get a Microsoft 365 membership. Intranet and team sites are required by the firm. <br> You must choose a Microsoft 365 subscription that includes the capabilities you require. <br> Which two subscriptions do you have access to? Each accurate response provides a comprehensive solution.

Office 365 Business Premium (Correct answer)
Office 365 Business
Office 365 Business Essentials (Correct answer)
Office 365 Home

Correct answer: Office 365 Business Premium

For a company requiring intranet and team sites, both Office 365 Business Premium (now Microsoft 365 Business Standard) and Office 365 Business Essentials (now Microsoft 365 Business Basic) are suitable Microsoft 365 subscriptions. Both plans include SharePoint Online, which is the core service for creating and managing intranet portals and team collaboration sites, fulfilling the company's requirements while offering different sets of additional features.

Question 16: When planning a project in Microsoft 365 Fundamentals Certification, which element should be established FIRST?

Project timeline
Clear objectives, scope, and success criteria (Correct answer)
Budget allocation
Team member assignments

Correct answer: Clear objectives, scope, and success criteria

Clear objectives and success criteria form the foundation for all other planning decisions.

Question 17: An IT administrator needs to check if a specific Microsoft 365 service is currently experiencing an outage. Which tool should they use?

Microsoft 365 Admin Center Service Health (Correct answer)
Microsoft Secure Score dashboard
Microsoft Endpoint Manager
Azure Cost Management

Correct answer: Microsoft 365 Admin Center Service Health

The Service Health section within the Microsoft 365 Admin Center provides real-time status of all Microsoft 365 services and incident notifications.

Question 18: A company wants to ensure that only devices meeting security requirements can access corporate resources. Which Azure AD feature should they use?

Azure AD B2C
Azure AD B2B
Password Hash Synchronization
Conditional Access with device compliance policies (Correct answer)

Correct answer: Conditional Access with device compliance policies

Conditional Access combined with device compliance policies enforces that only compliant devices can access resources.

Question 19: Which of the following provides organizations with access to audit reports, compliance documentation, and trust-related information about Microsoft's cloud services, demonstrating how Microsoft meets various regulatory standards?

Microsoft Secure Score
Microsoft Purview Compliance Manager
Microsoft Defender Portal
Service Trust Portal (Correct answer)

Correct answer: Service Trust Portal

The Microsoft Service Trust Portal is the central location for accessing documentation about Microsoft's compliance with international standards and regulations. It provides access to third-party audit reports, white papers, and information about how Microsoft cloud services protect customer data.

Question 20: What is the MOST important leadership quality for a MS-900 certified professional managing a team?

Avoiding all conflict
Demonstrating integrity, clear communication, and ability to develop team members (Correct answer)
Achieving highest personal metrics
Maintaining strict control over all decisions

Correct answer: Demonstrating integrity, clear communication, and ability to develop team members

Effective leadership requires integrity, clear communication, and developing team members.

Question 21: Which Microsoft 365 feature automatically classifies and labels sensitive documents based on content inspection?

Microsoft Purview Sensitivity Labels (Correct answer)
Microsoft Defender for Cloud Apps
Microsoft Compliance Manager
Azure Information Protection Scanner

Correct answer: Microsoft Purview Sensitivity Labels

Microsoft Purview Sensitivity Labels automatically classify and protect documents by applying encryption and visual markings based on content policies.

Question 22: What does the principle of 'Zero Trust' assume about network traffic inside a corporate network?

No traffic should be trusted by default, even internal traffic (Correct answer)
Internal traffic is always safe and trusted
Trust is granted automatically after first login
Only external traffic needs verification

Correct answer: No traffic should be trusted by default, even internal traffic

Zero Trust assumes breach and verifies every request explicitly, regardless of whether it originates inside or outside the network perimeter.

Question 23: What is Microsoft Viva primarily designed to support in an organization?

Network monitoring
IT security operations
Cloud cost management
Employee experience and engagement (Correct answer)

Correct answer: Employee experience and engagement

Microsoft Viva is an employee experience platform that helps organizations improve engagement, learning, wellbeing, and knowledge sharing.

Question 24: Which statement best describes how Microsoft handles law enforcement requests for customer data stored in Microsoft 365?

Microsoft requires valid legal process and notifies customers when permitted before complying (Correct answer)
Microsoft never responds to any government data requests
Microsoft automatically grants law enforcement direct database access
Microsoft proactively shares customer data with law enforcement monthly

Correct answer: Microsoft requires valid legal process and notifies customers when permitted before complying

Microsoft's Law Enforcement Requests Report documents that Microsoft requires valid legal process, challenges overbroad requests, and notifies customers when legally permitted.

Question 25: What is the key difference between a 'retention label' and a 'retention policy' in Microsoft Purview?

Retention labels only work in SharePoint while policies only work in Exchange
Retention policies are free while retention labels require an add-on license
Retention labels are applied to specific items and can mark content as a record, while retention policies apply broadly to locations like all mailboxes (Correct answer)
Retention labels apply to entire sites while policies apply to individual files

Correct answer: Retention labels are applied to specific items and can mark content as a record, while retention policies apply broadly to locations like all mailboxes

Retention labels are applied at the item level and can declare content as records, whereas retention policies are applied broadly across entire locations like all Exchange mailboxes or all SharePoint sites.

Question 26: A company on a monthly subscription to Microsoft 365 Business Premium wants to switch to annual billing. What is the primary financial benefit?

Access to more features
Unlimited storage
Lower per-user monthly cost (Correct answer)
Free FastTrack onboarding

Correct answer: Lower per-user monthly cost

Annual commitment billing for Microsoft 365 typically offers a lower effective monthly cost compared to month-to-month billing.

Question 27: Which Microsoft 365 component is classified as a cloud-based identity service?

Microsoft Exchange Server (on-premises)
Azure Active Directory (Microsoft Entra ID) (Correct answer)
Windows Server Active Directory
Microsoft SQL Server

Correct answer: Azure Active Directory (Microsoft Entra ID)

Azure Active Directory (now Microsoft Entra ID) is Microsoft's cloud-based identity and access management service used by Microsoft 365.

Question 28: Which cloud model delivers software over the internet?

Infrastructure as a Service (IaaS)
Software as a Service (SaaS) (Correct answer)
Network as a Service (NaaS)
Platform as a Service (PaaS)

Correct answer: Software as a Service (SaaS)

Software as a Service (SaaS) is a cloud computing model where a third-party provider hosts applications and makes them available to customers over the internet. Users access the software via a web browser or client application, without needing to manage the underlying infrastructure, operating systems, or platform components.

Question 29: What is the Service Level Agreement (SLA) uptime guarantee Microsoft provides for Microsoft 365 paid services?

99% uptime
95% uptime
99.9% uptime (Correct answer)
100% uptime

Correct answer: 99.9% uptime

Microsoft guarantees 99.9% uptime (financially backed SLA) for Microsoft 365 paid services, equating to less than 8.76 hours of downtime per year.

Question 30: Which Microsoft 365 plan is purpose-built for US government agencies requiring FedRAMP High compliance?

Microsoft 365 DoD
Microsoft 365 Government GCC
Microsoft 365 E5
Microsoft 365 Government GCC High (Correct answer)

Correct answer: Microsoft 365 Government GCC High

Microsoft 365 Government GCC High meets FedRAMP High, ITAR, and DFARS requirements, making it suitable for agencies handling sensitive but unclassified data.

Question 31: Which Microsoft 365 plan is best suited for small businesses with up to 300 users needing core productivity apps?

Microsoft 365 F3
Microsoft 365 E3
Microsoft 365 E5
Microsoft 365 Business Standard (Correct answer)

Correct answer: Microsoft 365 Business Standard

Microsoft 365 Business Standard supports up to 300 users and includes core Office apps, Teams, Exchange, and SharePoint.

Question 32: What is the primary difference between Microsoft 365 Apps for Business and Microsoft 365 Business Basic?

Apps for Business includes desktop Office apps; Basic is web-only (Correct answer)
Basic includes advanced compliance tools; Apps for Business does not
Basic includes Teams; Apps for Business does not
Apps for Business includes Exchange Online; Basic does not

Correct answer: Apps for Business includes desktop Office apps; Basic is web-only

Microsoft 365 Apps for Business includes installable desktop Office applications, while Business Basic only provides web-based Office apps.

Question 33: Where can Microsoft 365 administrators monitor the real-time status of all Microsoft 365 services?

Microsoft Store dashboard
Windows Update settings
Microsoft 365 Service Health dashboard in the admin center (Correct answer)
Microsoft's public Twitter account

Correct answer: Microsoft 365 Service Health dashboard in the admin center

The Service Health dashboard in the Microsoft 365 admin center shows real-time status of all services and details of any active incidents.

Question 34: What type of encryption does Microsoft 365 use to protect data stored at rest in services like Exchange Online and SharePoint Online?

MD5 hashing
SSL/TLS encryption only
BitLocker and service-level encryption (including Customer Key option) (Correct answer)
RC4 encryption

Correct answer: BitLocker and service-level encryption (including Customer Key option)

Microsoft 365 uses BitLocker disk-level encryption and service-level encryption at rest; organizations can optionally manage their own keys using Customer Key.

Question 35: Which portal allows admins to configure and manage security settings?

Billing Portal
Whiteboard
Security Center (Correct answer)
Design Studio

Correct answer: Security Center

The Microsoft 365 Security Center (now part of the Microsoft 365 Defender portal) is the centralized portal where administrators can configure, monitor, and manage security settings and policies for their Microsoft 365 environment. It provides a comprehensive view of security posture, threat protection, and compliance features. This allows admins to effectively safeguard their organization's data and users.

Question 36: Which Microsoft 365 app uses AI to automatically generate slide presentations from a simple text prompt?

Microsoft Designer
Copilot in PowerPoint (Correct answer)
PowerPoint Designer
Microsoft Forms

Correct answer: Copilot in PowerPoint

Copilot in PowerPoint can generate full presentations from a text prompt when included in eligible Microsoft 365 plans.

Question 37: Which Microsoft 365 feature provides a centralized view of your organization's security posture and suggests improvements?

Microsoft Secure Score (Correct answer)
Microsoft Adoption Score
Microsoft Productivity Score
Microsoft Compliance Score

Correct answer: Microsoft Secure Score

Microsoft Secure Score is a measurement of an organization's security posture that provides recommendations to improve security across Microsoft 365 services.

Question 38: Which Microsoft 365 feature allows administrators to restrict which cloud apps users can access based on user, device, location, and risk signals?

Azure AD Conditional Access (Correct answer)
Microsoft Intune App Protection Policies
Azure AD Privileged Identity Management
Microsoft Defender for Cloud Apps

Correct answer: Azure AD Conditional Access

Conditional Access uses signals like user identity, device compliance, location, and risk level to enforce granular access policies for cloud apps.

Question 39: A company running Microsoft 365 E3 wants to add advanced threat protection. What is the most cost-effective add-on?

Purchase Microsoft Defender for Office 365 Plan 2
Upgrade to Microsoft 365 E5
Purchase Microsoft 365 E5 Security add-on (Correct answer)
Purchase Microsoft Intune separately

Correct answer: Purchase Microsoft 365 E5 Security add-on

The Microsoft 365 E5 Security add-on provides advanced security features at a lower cost than upgrading to the full E5 plan.

Question 40: Which documentation practice BEST demonstrates regulatory compliance for MS-900 certified professionals?

Maintaining organized, dated, and signed records of all activities (Correct answer)
Keeping informal handwritten notes
Relying on memory for routine procedures
Filing documents only when audited

Correct answer: Maintaining organized, dated, and signed records of all activities

Organized, dated, and signed records demonstrate systematic regulatory compliance.

Microsoft 365 Fundamentals (MS-900) Exam

The MS-900 exam certifies foundational knowledge of cloud services and the Microsoft 365 cloud model, including core Microsoft 365 components and services.

Questions

45 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds