Microsoft 365 Fundamentals: MS-900 +Practice Questions

Describe core cloud concepts and the different types of cloud services. Assess the benefits and considerations of hybrid and on prem services, and compare how they interoperate.

Understand cloud computing as on-demand, pay-as-you-go services managed by providers, enabling compute, storage, and collaboration via virtual machines, file shares, OneDrive for Business, and Teams without upfront hardware.

Explore how cloud computing shifts funding from capital expenditure (CapEx) to operating expenditure (OpEx), enabling pay-as-you-go on-demand virtual machines and scale sets to handle traffic bursts.

Compare public, private, and hybrid cloud models and how data is stored and accessed across shared and dedicated public clouds, private on-premise clouds, and Azure deployments.

Explore the three major cloud service models, infrastructure as a service, platform as a service, and software as a service, and see what each includes and who manages it.

Learn to protect data in the cloud with privacy-focused practices, encryption, access controls, and audits; comply with HIPAA, GLBA, SOX, and EU laws; and manage disaster recovery and ownership.

Explore the benefits of cloud computing, including cost effectiveness and pay-for-what-you-use pricing. Learn about scalability, elasticity on demand, and reliable, multi data center availability.

Azure is Microsoft's cloud platform, comparable to AWS and Google Cloud. It enables building, deploying, and managing apps and services with Azure Active Directory, Key Vault, CDN, and multi-factor authentication.

Monthly updates to the Azure portal and Microsoft 365 portal bring mostly minor changes—renamed options or moved tabs—that can affect demonstrations, while courses are updated quarterly to reflect those changes.

Demonstrates a practical tour of the Azure portal, exploring all services and categories, including Azure Active Directory and Intune, and configuring device profiles such as Wi‑Fi for iOS.

Discover Microsoft 365 as a SaaS that bundles Office apps, Windows licenses, and security tools into a single subscription, enabling team collaboration with Teams, Microsoft 365 Defender, and compliance policies.

Compare Office 365 and Microsoft 365, noting core apps and services like Word, Excel, Exchange, SharePoint, Teams, and OneDrive, with Microsoft 365 adding mobility security, Azure AD, and Intune.

Microsoft 365 encompasses Office 365 apps like OneNote and PowerPoint as components, along with mobile device management, security and compliance tools, Windows licensing, and information protection.

Compare the user portal and admin center by creating a new user, assigning a Microsoft 365 license, and exploring admin centers to manage users, licenses, groups, and roles.

Explore Copilot, Microsoft's integrated conversational AI that automates tasks, analyzes data, generates content, personalizes memory, and supports real-time web search across Windows, 365 apps, and Edge.

Explore the new Microsoft 365 Copilot interface with a secure AI chat that helps write, draft emails, and guide tasks, plus built-in agents and coaching tools.

Microsoft renames Azure Active Directory to Microsoft Entra ID with no changes in capabilities. Update course materials accordingly as the Entra product family expands.

Discover how Azure Active Directory delivers cloud-based identity management and single sign-on for thousands of apps, with on-prem integration, self-service, and premium features like conditional access and identity protection.

Explore how the new Microsoft Entra admin center consolidates Azure Active Directory management, enabling you to manage users, groups, devices, and apps within a single console.

Switch between the classic and updated Azure Active Directory views in Microsoft Entra via office.com, 365 admin center, or portal.azure.com to create and manage users, groups, and devices.

Explains cloud models, including cloud-only with SaaS, PaaS, and IaaS, and shows hybrid cloud linking on-prem resources to Azure for mobile users with cloud file shares.

Evaluate cloud models to balance cost, security, and reliability while considering on premise hardware, and decide between migration or coexistence for a scalable Azure transition.

Explore hybrid working, combining office and home on a set schedule, and flexible working, prioritizing discretion over hours and location while meeting deadlines.

Explore the core Microsoft 365 apps and services, including productivity and collaboration solutions with Teams, plus endpoint modernization, management concepts, deployment options, and analytics.

Explore how Exchange Online in Microsoft 365 functions as a messaging and collaboration platform, delivering email, mailboxes, archiving, calendars, attachments online, shared mailboxes, policy and compliance standards, and cross-platform access.

Explore basic Exchange Online settings in the admin center, including mailbox creation from licensed users, shared mailboxes, and delegation. Learn about groups, mail flow, and room resources.

Power Apps lets any user create and share apps within Microsoft 365, using Excel, SQL, or SharePoint back end, and distribute them to users across devices in the cloud.

Create a basic expense report app in Power Apps using an Excel table from OneDrive, define date created, title, description, and expense amount, and customize the layout.

Explore the Microsoft Viva suite's components, including connections, engage, insights, and learning, and see how they boost connection, collaboration, wellbeing, and consolidated learning resources.

Discover Viva Connections in the Microsoft 365 portal, a dashboard of shortcuts to apps like OneDrive and Viva Learning, with options to add, edit, and publish cards.

Viva learning consolidates LinkedIn Learning, Microsoft Learn, and Microsoft 365 training into a single online learning platform with quick courses and topic-specific tracks, plus flexible provider integration.

Explore Viva Insights to track wellbeing, productivity, and teamwork, set quiet time and focus plans, receive weekly digests, and optimize meetings and privacy settings.

Learn how Viva Engage functions as a digital bulletin board and town square, creating finance communities, posting discussions and polls, and managing public, private, and official settings.

Learn how Veeva goals, a goal-setting management solution, enables setting objectives, breaking them into smaller steps, and tracking progress, with its own license separate from other Microsoft 365 products.

Explore SharePoint Online in Microsoft 365, a cloud collaboration tool for intranet sites, document libraries, workflows, search, approvals, versioning, and mobile access.

Learn to create SharePoint sites in Microsoft 365, choosing team or communication sites, manage access with owners and groups, and navigate the admin center for governance and migration.

Explore how Microsoft Teams acts as a central collaboration hub in Microsoft 365, enabling chat, calls, video meetings, document sharing, status updates, and access across devices.

Discover how Microsoft Teams integrates with Microsoft 365 apps and external tools, using Power BI, Power Apps, Power Automate, Dynamics 365, and Power Virtual Agent, plus third-party partners.

Explore Microsoft Teams phone features, including voice and video calls from chat, Outlook, the Calls app, or your desk phone, plus voicemail, transcription, and group call pickup.

Set up a Microsoft Teams user in the admin center, schedule and join meetings via calendar and web, and explore messaging policies in the Teams admin center.

Discover OneDrive for Business as the cloud storage for personal data, enabling secure sharing, cross‑device synchronization, 1 TB per user, with 30‑day retention, conditional access, and a 90‑day recycle bin.

Explore how to manage OneDrive via the admin center per user, adjust data retention and storage limits up to 5 TB, configure sharing and notifications, and block specific file types.

Discover Yammer, Microsoft’s enterprise social network for internal home and external collaboration, with live events, polls, communities, mentions, and real-time Q&A, and integrates with Outlook and SharePoint.

Explore Yammer in a Microsoft 365 environment: post to the home feed or a Paris community. Create and manage communities, follow leaders, and use private messaging and notifications.

Explore how Microsoft Project, a cloud-based tool, enables task assignment, scheduling, and timeline updates, with Kanban boards, Microsoft Teams collaboration, and Power BI dashboards.

Learn how Microsoft Project licensing works in the admin center, including view-only licenses versus project for office plans, and what you can view or share.

Explore Microsoft Planner, a collaborative task management tool with kanban boards, buckets, task cards, notifications, and seamless integrations with Teams and Outlook.

Create and customize a Microsoft Planner plan, name it virtual machine migration, choose templates, set privacy, add and assign tasks, organize with buckets, track progress with charts and schedule.

Explore Microsoft Stream, a streaming and sharing service that securely uploads, stores, tags, searches, analyzes, and shares videos within your organization, with encrypted access via Azure AD and link sharing.

Demonstrates how to use Microsoft Stream to record with webcam and mic, add thumbnails and chapters, publish, and share via a link or email, with private or public options.

Learn how Microsoft Bookings schedules and manages appointments with a web-based calendar and Outlook integration. Create booking pages, define services, and set buffers, reminders, and Teams integration.

Explore how to create and customize booking pages in Microsoft Bookings, set services and staff, configure self-service options, availability, and notifications, and manage public vs internal booking flows.

Explore how Microsoft To Do enables intelligent task management across devices to plan your day, create subtasks, leverage smart suggestions, set reminders, and share lists with others.

Discover how to use Microsoft To Do to create lists, add tasks, mark important items, set due dates and reminders, and flag emails from Outlook.

Create surveys, quizzes, polls, and questionnaires with Microsoft Forms, share and collaborate, view real-time analytics, export to Excel, and grade responses.

Create a form to compare cloud providers with options Azure, AWS, Google, and other; enable multiple or required answers and collect responses via a shareable link.

Use Microsoft Lists to organize information and work, creating lists from scratch or templates in SharePoint or Teams. Sort, filter, attach files, add pictures, automate, and track version history.

Learn to create a new list from a template or Excel in Microsoft Lists, fill a travel request, share the link, and approve it with notifications.

Explore Microsoft 365 reports to monitor usage over 7–180 days and compare adoption scores against similar-sized organizations, noting privacy-friendly username concealment and adoption-driven insights.

Microsoft 365 apps, including Word, Excel, PowerPoint, Outlook, and OneNote, offer built-in editors, designer templates, rehearsal with a coach and voice and body language feedback, plus note-taking with math tools.

Understand data residency in Microsoft 365 by verifying where Exchange, SharePoint, OneDrive, and Teams data resides, e.g., UK requirements versus default US storage, via the admin center.

Windows as a service replaces major OS upgrades with ongoing maintenance, delivering feature updates twice a year and monthly quality updates through Windows Insider and semi-annual deployment channels.

Deploy updates to a limited ring of representative devices across departments to validate performance and collect data to guide broad deployment.

Discover how Windows Virtual Desktop centralizes a Windows 10 image in Azure, delivering isolated user sessions and centralized management of updates via scalable host pools.

Access Windows 365 as a cloud pc that streams your entire desktop from the cloud to any device. Choose between business and enterprise editions, with enterprise offering mobile device management.

Compare Windows 365 and Azure Virtual Desktop to decide which cloud-based solution fits Windows desktops; Windows 365 is turnkey and subscription-based, while Azure VDI offers deeper configuration and resource-based pricing.

Understand Windows Autopilot, a cloud-based modern deployment that resets devices into configured states using deployment profiles, groups, and policies, eliminating on-prem infrastructure.

Learn how to gather hardware information for autopilot by running a PowerShell script, enabling script execution, installing the get-windows-autopilot-info script, and exporting data to a csv.

Configure Autopilot in Intune endpoint manager by importing Windows Autopilot devices from a CSV, creating a deployment profile, and linking the Autopilot group for automatic enrollment and app installation.

Sign in with a Microsoft account to verify autopilot installation and device assignment. Confirm the serial-number based computer name and Azure AD enrollment.

Co-management unites configuration manager with Microsoft Intune for unified administration of Windows 10 and Windows 11 devices, enabling conditional access with MFA and leveraging leaked credential service prompts.

Explore configuration manager, an on-premises tool to manage desktops, servers, data centers, and OS deployments with software updates, now cloud-enabled to integrate with Intune, Azure AD, Defender, and Autopilot.

Explore how tenant attach synchronizes Configuration Manager with your Intune tenant, enabling cloud attach components like code management and endpoint analytics for a single unified view of all devices.

Intune endpoint management enables unified control from a single console for on-premise and personal devices, securing access on unsecured networks and streamlining updates and backups.

Demonstrate endpoint manager in the Microsoft 365 admin center, create Windows 10 compliance policies with BitLocker, secure boot, code integrity, and enable iOS enrollment with app protection.

Explore security, compliance, privacy, and trust in Microsoft 365, covering the zero trust security principle, identity and access management, threat protection, and risk and compliance solutions with practical demonstrations.

Explore Microsoft's zero trust model by verifying every request from open networks, assessing device and credential risks, and enabling remediation with multifactor authentication and password updates.

Identify common attack types such as broad-based and spear phishing, password spray, cross-site scripting, and device compromise, and learn how Microsoft 365 Defender mitigates threats across endpoints, identities, and email.

Practice granular delegated admin privileges to enforce the principle of least privileged access, granting task-specific access rather than full admin rights. Audit delegated activities to ensure permissions and accountability.

Explore how Microsoft 365 Defender unifies Defender for endpoint, Defender for Office 365, Defender for identity, and Defender for cloud apps to protect endpoints, identities, and cloud apps.

Explore how conditional access policies combine user, device, risk level, and actions to govern access to cloud apps, using sign-in history, location, device health, and multi-factor controls.

Explore creating a conditional access policy in the Azure Active Directory admin center, using trusted locations and IP ranges, and applying MFA and sign-in risk conditions.

Explore conditional access setup across Microsoft 365 admin center and Entra admin center. Create new policies, define named locations, and access identical options in Azure Active Directory.

Enable mfa for individual users or in bulk, with states enabled, enforced, or disabled, noting that disable is the default. Legacy authentication remains until registration completes, then forces mfa.

Learn to configure and test multi-factor authentication (MFA) in Azure Active Directory, including lockout policies, fraud alerts, and authenticator app setup.

Enable self-service password reset in Azure Active Directory for all users, selecting authentication methods (mobile app, email, text, security questions) so users reset passwords securely.

Explore how to access Entra self-service password reset in the admin center, navigating Azure Active Directory to customize authentication methods and registration, with the same options as the classic portal.

Explore how Microsoft 365 protects data at the file level with Windows Information Protection and data loss prevention, including notifications when sensitive data such as social security numbers is detected.

Explore Microsoft Purview, a unified data governance service for on-premise, multi-cloud, software as a service data, with compliance manager, auditing, e-discovery, alerts, data loss prevention, insider risk, and compliance score.

Explore pravah, a privacy capability in Microsoft 365, enabling privacy by default under GDPR and CCPA, and manage subject rights with Purview in the admin center.

Explore how eDiscovery in Microsoft 365 identifies and preserves electronic information for legal cases, using holds, custodians, and advanced eDiscovery to search exchange mailboxes, groups, SharePoint, and Teams.

Learn to use Microsoft Purview e-discovery to create cases, manage custodians and locations, and configure search with themes, near-duplicate handling, and kql conditions for precise preservation and export.

Apply sensitivity labels in Microsoft Purview to classify and protect emails and documents using predefined and custom sensitive information types. Enforce automatic labeling, optional encryption, and watermarking across content.

Publish sensitivity labels after creation to make them available to users and services. Label policies control visibility, default labeling, mandatory labeling with audit logs and justification, and auto labeling options.

Define and publish a sensitivity label in the 365 admin center, including creating a finance label with content markings, auto labeling, and protection policy settings.

Apply and manage sensitivity labels across Word, Excel, and PowerPoint, using automatic labeling, a policy tip, and customizable watermarks, headers, and footers to protect documents.

Protect sensitive information with data loss prevention across OneDrive, SharePoint, Teams, and Exchange. Configure predefined and custom DLP rules, enforce blocks, send notifications, and view policy matches and DLP reports.

Configure a data loss prevention policy in Microsoft 365 to protect UK medical information (NHS number, NINO) across OneDrive and Exchange, with policy tips, alerts, and optional blocking.

Discover how the secure score in Microsoft 365 Defender portal highlights recommended actions, including enabling multi-factor authentication for admin roles, and use the status and action plan to track implementation.

Detect and mitigate insider risk in Microsoft 365 by monitoring data access and actions, using e-discovery to investigate, and enforcing sanctioned data policies.

Microsoft 365 offers a unified audit log in purview, enabling security and compliance investigations across services, with standard retention of 90 days and premium up to ten years.

Explore the service trust portal and compliance manager to view audit reports, select HIPAA health care assessments, and assign actions to improve Office 365 compliance.

Azure Sentinel provides centralized threat protection by ingesting data across cloud and on-premises environments, enabling cloud-scale collection, detection, investigation, and automated response.

Learn what Azure Sentinel is and why configuration lies outside this course; recognize the optional demo for deeper Azure Sentinel exploration not required for the MS-900 exam.

Explore Azure Sentinel in the Azure portal: create a workspace, connect data sources, build Kusto queries, analytics rules, incidents, and import playbooks from GitHub.

Explore Microsoft 365 pricing and billing management, licensing options, and support choices, and clarify the differences among the available options for the MS-900 objectives.

Discover how licenses accompany Microsoft 365, assign per-user subscription licenses in the admin center, and manage full, add-on, software assurance, and step up options for on-prem and cloud.

Assign licenses via the admin center by selecting active users, adjust apps, and monitor license availability; create new users with autogenerate passwords, and export license lists from billing.

Explore Azure Active Directory licensing tiers—from free to P1 and P2—covering features like dynamic groups and conditional access, plus pricing, service level agreements, and renewal terms.

Explore cloud pricing with a pay-as-you-go CSP and per-user licensing, and consider an enterprise agreement for 3-year licensing with 500+ users and 24/7 support.

Identify and compare billing account options in the microsoft 365 admin center, including the microsoft online service program, the microsoft products and services agreement Mpesa, and the microsoft customer agreement.

Manage subscriptions and billing in the Microsoft 365 admin center by viewing statements, updating payment methods, changing billing frequency, and assigning or unassigning licenses, upgrades, renewals, and notifications.

Compare consumption-based pricing and fixed pricing to see pay as you go charging for usage versus provisioning resources regardless of use.

Learn to check service health for Microsoft 365 and Azure, view incidents and updates in the admin center and portal.azure.com, and understand health history, advisories, and root causes.

Explore the spectrum of Microsoft 365 support options—from standard to unified—highlighting features like dedicated experts, health reviews, ticketless support, and on-demand training.

Learn how customer lockbox safeguards your environment by requiring manager and customer approvals for Microsoft access, and by opening a new service request in the Azure portal.

Explore Microsoft 365 Lighthouse, a centralized dashboard that MSPs use to manage and monitor multiple Microsoft 365 tenants from a single view, improving efficiency and customer satisfaction.

Explore how Microsoft 365 service level agreements define uptime guarantees by product offering and use service credits rather than refunds to lower your costs.

Use fast track to plan your Microsoft 365 deployment with a guided success plan that maps capabilities to products like Exchange, SharePoint, OneDrive, and Intune, plus migration and adoption resources.

Compare dogfooding and flighting as testing strategies, highlighting internal use, real-world feedback, and risk mitigation through controlled releases to identify bugs and usability issues.

Compare traditional on-premise deployment, a manual, image-based process, with modern cloud-based deployment using Dell hardware IDs, Intune, and deployment profiles to automatically image and configure devices.

demonstrate autopilot deployment using Windows 10 (or 11), with navigation unchanged since 2021 and no autopilot UI changes through 2024.

Explore Windows Autopilot as a cloud-based modern deployment that pre-stages devices, registers hardware IDs, and applies profiles, policies, and apps for automatic user sign-in.

Gather Windows autopilot hardware information by running PowerShell as administrator, installing the get-windows-autopilot-info script, and exporting data to hwid.csv on the desktop.

Configure autopilot in endpoint manager (Intune) by importing a Windows Autopilot CSV, creating a deployment profile, and assigning devices to a group for automatic oobe with Azure AD joined setup.

Sign in with a Microsoft account confirms the device is deployed. Windows Autopilot assigns the device, applies the BTS naming standard, and connects to BTS devs Azure AD.