Page 1 of 148
“MICROSOFT MS-900 EXAM “ NEWEST
UPDATED EXAM 2025 – 2026 SOLVED
QUESTIONS & ANSWERS VERIFIED 100%
GRADED A+ (LATEST VERSION)
Microsoft MS-900 Exam
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration. You want to make sure that a smart card can be used by
staff for authentication purposes. Solution: You configure the use of password
hash synchronization with single-on as the hybrid identity solution. Does the
solution meet the goal?
A. Yes
B. No
B. No
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration. You want to make sure that a smart card can be used by
staff for authentication purposes. Solution: You configure the use of pass-
through authentication and single sign-on as the hybrid identity solution .Does
the solution meet the goal?
A. Yes
B. No
, Page 2 of 148
B. No
SSO triggers this design option as No. The requirement is to integrate smart card
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration.You want to make sure that a smart card can be used by
staff for authentication purposes.Solution: You configure the use of Active
Directory Federation Services (AD FS) as the hybrid identity solution. Does the
solution meet the goal?
A. Yes
B. No
A. Yes
To retrieve data for employees who request personal data under General Data
Protection Regulation (GDPR) guidelines, you have to create a GDPR
assessment.
A. No adjustment required
B. mobile application protection policy
C. device configuration policy
D. data subject request case
D. data subject request case
You are a Microsoft 365 administrator for a company whose employees are
allowed to access corporate information located in the cloud via their personal
devices. You have been tasked with making sure that employees are
prohibited from copying this information to their personal OneDrive folders.
You should make use of Intune App Protection.
A. No adjustment required
B. Information Rights Management
C. Microsoft Azure AD Privilege Identity Protection
D. Microsoft Azure AD Identity Protection
A. No adjustment required
, Page 3 of 148
Your company has a Microsoft Office 365 ProPlus subscription. You are
required to make use of Microsoft Azure Information Protection for document
classification and protection. Which of the following options should you use to
achieve your goal? Answer by dragging the correct options from the list to the
answer area.
-Add an Azure subscription to your Microsoft 365 tenant
-Enable the default Microsoft Azure AD Privilege Identity Protection policy
-Install the Azure Information Protection client
-Create a custom Azure Information Protection policy with the Confidential
label
-Enable the default Azure formation Protection policy
-Add an Azure subscription to your Microsoft 365 tenant
-Enable the default Azure formation Protection policy
You have been tasked with removing customer information in compliance with
General Data Protection Regulation (GDPR), after the customer generated data
subject request (DSR). You want to make sure that legal holds are placed on
relevant information if the opportunity arises. You want to start searching for
the client's information by using Content Search eDiscovery. Which of the
following applications can be searched with this method? (Choose two.)
A. Microsoft PowerApps
B. Microsoft Outlook
C. Microsoft Access
D. Microsoft SharePoint Online
, Page 4 of 148
B. Microsoft Outlook
D. Microsoft SharePoint Online
You have been tasked with configuring a data governance strategy that allows
for data classification. It should also allow for these classifications to be
enforced. Which of the following should form part of your strategy? (Choose
two.)
A. Apply Microsoft SharePoint permissions.
B. Publish labels.
C. Configure Microsoft Outlook Mail Tips.
D. Apply supervision policies.
E. Apply retention policies.
F. Apply preservation policies.
B. Publish labels.
D. Apply supervision policies.
As an administrator for this subscription, you are required to configure the use
of a cloud security feature that allows for emails and documents to be
classified and labeled. Which of the following is the feature you should use?
A. Microsoft Azure Information Protection.
B. Microsoft Azure AD Identity Protection.
C. Microsoft Azure AD Privilege Identity Protection.
D. Intune App Protection.
A. Microsoft Azure Information Protection.
After acquiring a Microsoft 365 E5 subscription, you are tasked with applying
security features. You are currently configuring a security feature that allows
you to control how a Microsoft support engineer accesses information during
a help session. Which of the following is the feature you are configuring?
A. Customer Lockbox.
B. Data Governance.
“MICROSOFT MS-900 EXAM “ NEWEST
UPDATED EXAM 2025 – 2026 SOLVED
QUESTIONS & ANSWERS VERIFIED 100%
GRADED A+ (LATEST VERSION)
Microsoft MS-900 Exam
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration. You want to make sure that a smart card can be used by
staff for authentication purposes. Solution: You configure the use of password
hash synchronization with single-on as the hybrid identity solution. Does the
solution meet the goal?
A. Yes
B. No
B. No
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration. You want to make sure that a smart card can be used by
staff for authentication purposes. Solution: You configure the use of pass-
through authentication and single sign-on as the hybrid identity solution .Does
the solution meet the goal?
A. Yes
B. No
, Page 2 of 148
B. No
SSO triggers this design option as No. The requirement is to integrate smart card
You have been tasked with deploying Microsoft 365 for your company in a
hybrid configuration.You want to make sure that a smart card can be used by
staff for authentication purposes.Solution: You configure the use of Active
Directory Federation Services (AD FS) as the hybrid identity solution. Does the
solution meet the goal?
A. Yes
B. No
A. Yes
To retrieve data for employees who request personal data under General Data
Protection Regulation (GDPR) guidelines, you have to create a GDPR
assessment.
A. No adjustment required
B. mobile application protection policy
C. device configuration policy
D. data subject request case
D. data subject request case
You are a Microsoft 365 administrator for a company whose employees are
allowed to access corporate information located in the cloud via their personal
devices. You have been tasked with making sure that employees are
prohibited from copying this information to their personal OneDrive folders.
You should make use of Intune App Protection.
A. No adjustment required
B. Information Rights Management
C. Microsoft Azure AD Privilege Identity Protection
D. Microsoft Azure AD Identity Protection
A. No adjustment required
, Page 3 of 148
Your company has a Microsoft Office 365 ProPlus subscription. You are
required to make use of Microsoft Azure Information Protection for document
classification and protection. Which of the following options should you use to
achieve your goal? Answer by dragging the correct options from the list to the
answer area.
-Add an Azure subscription to your Microsoft 365 tenant
-Enable the default Microsoft Azure AD Privilege Identity Protection policy
-Install the Azure Information Protection client
-Create a custom Azure Information Protection policy with the Confidential
label
-Enable the default Azure formation Protection policy
-Add an Azure subscription to your Microsoft 365 tenant
-Enable the default Azure formation Protection policy
You have been tasked with removing customer information in compliance with
General Data Protection Regulation (GDPR), after the customer generated data
subject request (DSR). You want to make sure that legal holds are placed on
relevant information if the opportunity arises. You want to start searching for
the client's information by using Content Search eDiscovery. Which of the
following applications can be searched with this method? (Choose two.)
A. Microsoft PowerApps
B. Microsoft Outlook
C. Microsoft Access
D. Microsoft SharePoint Online
, Page 4 of 148
B. Microsoft Outlook
D. Microsoft SharePoint Online
You have been tasked with configuring a data governance strategy that allows
for data classification. It should also allow for these classifications to be
enforced. Which of the following should form part of your strategy? (Choose
two.)
A. Apply Microsoft SharePoint permissions.
B. Publish labels.
C. Configure Microsoft Outlook Mail Tips.
D. Apply supervision policies.
E. Apply retention policies.
F. Apply preservation policies.
B. Publish labels.
D. Apply supervision policies.
As an administrator for this subscription, you are required to configure the use
of a cloud security feature that allows for emails and documents to be
classified and labeled. Which of the following is the feature you should use?
A. Microsoft Azure Information Protection.
B. Microsoft Azure AD Identity Protection.
C. Microsoft Azure AD Privilege Identity Protection.
D. Intune App Protection.
A. Microsoft Azure Information Protection.
After acquiring a Microsoft 365 E5 subscription, you are tasked with applying
security features. You are currently configuring a security feature that allows
you to control how a Microsoft support engineer accesses information during
a help session. Which of the following is the feature you are configuring?
A. Customer Lockbox.
B. Data Governance.
