This is the free Microsoft MS-900 practice question bank —
230 of 441 total questions, each with a full explanation, free to
read with no signup required. Updated 2026-04-24.
Every answer is verified against official Microsoft documentation —
see our methodology.
Question 1
HOTSPOT
-
A company uses an on-premises deployment of Configuration Manager to manage its on-premises Windows devices. The company plans to purchase an Intune subscription and implement co-management.
You need to describe the benefits of implementing co-management.
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Conditional access
Explanation: Co-management allows Configuration Manager–managed Windows devices to be enrolled with Intune, enabling Azure AD–based device compliance and Conditional Access policies. The other options are unrelated to co-management benefits.
Question 2
A company uses Microsoft 365 desktop apps.
The company plans to acquire Microsoft 365 Copilot.
You need to identify two components that Microsoft 365 Copilot uses with the desktop apps.
Which two components does Microsoft 365 Copilot use? Each correct answer presents part of the solution. Choose two.
NOTE: Each correct selection is worth one point.
A. Large language models
B. Microsoft Purview
C. Small language models
D. Microsoft Graph
Show Answer
Correct Answer: A, D
Explanation: Microsoft 365 Copilot integrates large language models (LLMs) to generate and reason over content, and it uses Microsoft Graph to ground responses in an organization’s data (emails, files, meetings) from Microsoft 365 desktop apps. Small language models are not identified as core components for Copilot, and Microsoft Purview is for compliance/governance rather than Copilot’s app functionality.
Question 3
HOTSPOT
-
A company is investigating the collaboration solutions in Microsoft 365.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Teams displays the calendar from the user’s Exchange Online mailbox, so changes sync automatically.
Teams audio conferencing does not support 15,000 dial-in phone attendees; PSTN limits are much lower.
Viewing live captions translated into other languages requires a Microsoft Teams Premium license.
Question 4
A company has Microsoft 365 Copilot licenses. The company plans to use Copilot Chat.
The company must restrict the information Copilot Chat references to only internal documents.
You need to ensure that only internal information is used.
Which two actions should you perform in Copilot Chat? Each correct answer presents part of the solution. Choose two.
NOTE: Each correct selection is worth one point.
A. Work in Web mode.
B. Disable web content.
C. Work in Work mode.
D. Disable web search.
Show Answer
Correct Answer: C, D
Explanation: To ensure Copilot Chat only uses internal company information, you must operate in Work mode, which limits Copilot to your organization’s Microsoft 365 data via Microsoft Graph. In addition, web search must be disabled so Copilot cannot retrieve or reference external internet content. Together, these settings ensure responses are based solely on internal documents and data.
Question 5
A company plans to use Copilot Chat to summarize email and documents.
You need to ensure that the Copilot Chat prompt has all the necessary information to provide complete responses.
Which element should the company include in the prompt?
A. expectation to format the level of detail required
B. comparison of different pieces of text to identify similarities
C. classification of text based on its content
D. generation of new text
Show Answer
Correct Answer: A
Explanation: To get complete and useful summaries, the prompt must specify expectations such as the desired level of detail, length, or format. This guidance helps Copilot Chat tailor the summary appropriately. The other options describe different text-processing tasks rather than prompt elements needed for summarization.
Question 6
A company is evaluating Microsoft 365 security features.
You need to describe Secure Score.
Which three items are included in Secure Score? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Devices
B. Groups
C. Users
D. Identity
E. Apps
Show Answer
Correct Answer: A, D, E
Explanation: Microsoft Secure Score measures security posture across key protection areas in Microsoft 365. It includes Devices (endpoint protection and management), Identity (Azure AD identity security and access controls), and Apps (app governance and cloud app security). Groups and Users are not top-level Secure Score categories.
Question 7
A company plans to implement Microsoft Defender XDR services in its Microsoft 365 environment.
The company requires that its security solution:
• Assesses the configuration of its internal network shares.
• Assesses browser extension permissions on devices.
• Identifies expiring certificates that are installed on devices.
• Identifies software that is installed on devices.
You need to recommend a security solution.
Which Microsoft Defender XDR service should you use?
A. Defender for Endpoint
B. Defender for Cloud Apps
C. Defender for Office 365
D. Defender Vulnerability Management
E. Defender for Identity
Show Answer
Correct Answer: D
Explanation: Defender Vulnerability Management provides device-based security posture and exposure assessments. It inventories installed software, evaluates misconfigurations such as insecure network shares, analyzes browser extension permissions, and identifies issues like expiring or weak certificates on devices. These requirements are not fully met by the other Defender XDR services.
Question 8
You are setting up Microsoft 365.
You need to determine how many directories a single Microsoft Entra tenant can have.
How many directories should you identify?
A. 1
B. 2
C. 5
D. 10
Show Answer
Correct Answer: A
Explanation: A Microsoft Entra tenant corresponds to exactly one directory. Each tenant is a single, dedicated directory that stores users, groups, and resources, so a tenant cannot contain multiple directories.
Question 10
A company is evaluating the security features in Microsoft 365.
You need to recommend the Microsoft 365 apps that help secure data.
Which two apps or services should you recommend? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Microsoft Delve
B. Microsoft 365 Copilot
C. Microsoft Entra
D. Microsoft Exchange
Show Answer
Correct Answer: C, D
Explanation: Microsoft Entra provides core security capabilities such as identity management, authentication, conditional access, and access control across Microsoft 365. Microsoft Exchange includes built-in security features for email and data protection, such as anti-malware, anti-phishing, and data loss prevention. The other options are not primarily security-focused services.
Question 11
DRAG DROP
-
A company is evaluating Microsoft 365 services.
Match each admin center in Microsoft 365 to its report. To answer, move the appropriate admin center from the column on the left to its report on the right. You may use each admin center once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Show Answer
Correct Answer: Public Switched Telephone Network (PSTN) usage — Teams
Migration details — Exchange
Sensitivity labels applied to files — SharePoint
Explanation: PSTN call usage is reported in the Teams admin center. Mailbox and service migration reports are found in the Exchange admin center. File-level sensitivity label reporting is available in the SharePoint admin center.
$19
Get all 441 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
