CertBlaze

Microsoft

MS-900 Free Practice Questions — Page 19

Question 192

A company is evaluating virtualization services. You need to determine the difference between Microsoft 365 and Azure Virtual Desktop. Which feature is unique to Microsoft 365?

A. Users can sign into a dedicated virtual machine.
B. Users can rename their assigned virtual machine.
C. Administrators can assign users to the local administrators group on the virtual machine.
D. Administrators can connect the virtual machine to an on-premises network.
E. Administrators can manage the virtual machines by using Microsoft Endpoint Manager.
Show Answer
Correct Answer: A
Explanation:
The question is effectively comparing Windows 365 (often loosely referred to as part of Microsoft 365) with Azure Virtual Desktop (AVD). A core, defining characteristic of Windows 365 is that each user is provisioned a permanently assigned, dedicated Cloud PC (a single-user VM). In contrast, AVD is primarily designed around pooled, multi-session desktops, and while it can be configured with personal host pools, this is not its default or defining model. Other options are not unique: both platforms can be managed with Microsoft Endpoint Manager (Intune), can be connected to on-premises networks, can grant local administrator rights, and VM renaming is an implementation detail rather than a service-level differentiator. Therefore, the feature unique to Microsoft 365 (Windows 365) is the guaranteed dedicated virtual machine per user.

Question 193

A company is evaluating Microsoft Azure Conditional Access policies. You reed to determine which scenarios Conditional Access policies support. Which three scenarios should you select? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Multi-factor authentication
B. Self-service password reset capabilities
C. Hybrid Azure Active Directory joined device
D. Blocked access to Microsoft 365 services for unverified users
E. BitLocker deployment
Show Answer
Correct Answer: A, C, D
Explanation:
Azure Conditional Access policies are used to control access to cloud apps based on conditions and grant controls. They can require multi-factor authentication (A), evaluate device state such as hybrid Azure AD joined devices (C), and block or grant access to Microsoft 365 services for users or devices that do not meet verification or compliance requirements (D). Self-service password reset (B) and BitLocker deployment (E) are separate features and not scenarios directly implemented by Conditional Access.

Question 194

HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 194
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Intune manages both personally owned (BYOD) and organization-owned devices when enrolled. It integrates with Azure AD and supports Conditional Access policies for access control.

Question 195

HOTSPOT - A company is evaluating solutions to improve their customer service capabilities. When customers call the company, they should be directly routed to the appropriate customer service person. You need to recommend solutions for the company's requirements. Which solutions should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 195
Show Answer
Correct Answer: Implement Direct Routing: Microsoft Teams Phone Connect the correct customer service associate to a customer: Microsoft Teams Phone
Explanation:
Microsoft Teams Phone supports Direct Routing with the PSTN. It also provides auto attendants and call queues to route callers directly to the appropriate customer service associate. Other options listed do not provide call routing or customer-call association capabilities.

Question 196

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 196
Show Answer
Correct Answer: Yes Yes No
Explanation:
1) SharePoint can surface enterprise social features using its Newsfeed alongside Microsoft Teams integrations. 2) Administrators can disable or limit SharePoint enterprise social features (e.g., Newsfeed activities) via SharePoint/My Site settings. 3) SharePoint supports selecting one enterprise social service at a time (e.g., Yammer or Newsfeed), not multiple simultaneously.

Question 198

HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 198
Show Answer
Correct Answer: Yes Yes No
Explanation:
The Service Trust Portal provides compliance audit reports and third‑party penetration test/assessment reports. It is an information portal only and does not configure tenant features such as Conditional Access, which is done in Microsoft Entra ID.

Question 199

HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 199
Show Answer
Correct Answer: No No Yes
Explanation:
Endpoint Manager does not include an Intune Connector specifically for Azure Active Directory; the connector is for on-premises Active Directory. There is no Intune Exchange Connector included in Endpoint Manager (the legacy Exchange connector is deprecated/removed). Endpoint Manager (via Intune) can manage and monitor mobile devices.

Question 200

HOTSPOT - A company plans to implement Microsoft Information Protection (MIP). Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 200
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Sensitivity labels can encrypt emails and grant external users time-limited access. Labels can apply visual markings to emails (such as headers/footers and supported markings), and container labels protect Microsoft Teams, Microsoft 365 groups, and SharePoint sites.

Question 201

HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 201
Show Answer
Correct Answer: Yes Yes Yes
Explanation:
Microsoft Cloud App Security (now Microsoft Defender for Cloud Apps) supports integration across multiple cloud providers, includes compliance and regulatory assessment for cloud applications, and offers behavioral analytics with anomaly detection to identify risky activities.

Question 202

HOTSPOT - Instructions: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for MS-900 question 202
Show Answer
Correct Answer: Yes Yes
Explanation:
The Microsoft 365 user portal lets end users install desktop apps, use web apps, and manage/share files in OneDrive. The Microsoft 365 admin center is used by administrators to manage users, applications, and services available to those users.

$19

Get all 441 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full MS-900 study guide →