Microsoft 365 Certified: Fundamentals - (MS-900) Exam Questions

Answer: No

Explanation: These advantages are typically associated with public clouds, like Microsoft Azure, rather than private clouds. Private clouds often require higher costs and ongoing hardware maintenance.

1. Conditional access policies allow you to require multi-factor authentication for Microsoft Azure management tasks.
   Answer: Yes
   Explanation: Conditional access policies in Azure AD can enforce multi-factor authentication (MFA) for sensitive tasks, including Microsoft Azure management, to enhance security.

2. Conditional access policies allow you to require multi-factor authentication for users who have administrative roles.
   Answer: Yes
   Explanation: Conditional access policies can specifically target users with administrative roles, requiring MFA to secure their privileged access.

Correct Answer:

Leave SharePoint data for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365.

Explanation:

The finance department's SharePoint site collection uses third-party encryption to meet compliance requirements, making it necessary to leave that data on-premises unless Microsoft 365's compliance features meet the specific encryption needs. Migrating other SharePoint data and Exchange mailboxes to Microsoft 365 is feasible and aligns with the goal of leveraging Microsoft 365 services as much as possible.

Why not the other options?

1. Migrate all SharePoint data and Exchange mailboxes to Microsoft 365:
   This may violate compliance requirements due to the encrypted SharePoint data for the finance department.

2. Leave mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365:
   This unnecessarily keeps finance department mailboxes on-premises, as Exchange Online can handle mailboxes securely with compliance policies.

3. Leave SharePoint data and mailboxes for finance department users on-premises. Migrate all other SharePoint data and Exchange mailboxes to Microsoft 365:
   Keeping both SharePoint data and mailboxes for finance users on-premises is overly restrictive. Exchange Online can meet compliance needs for mailboxes.

Correct Answers:

1. Microsoft Authenticator smartphone app

2. Verification code sent in a text message

3. Verification code sent in a phone call

Explanation:

1. Microsoft Authenticator smartphone app:
   The Microsoft Authenticator app is a supported MFA method that provides options such as push notifications for approval and time-based one-time passwords (TOTP). It is widely used for its convenience and security.

2. Verification code sent in a text message:
   Microsoft 365 supports sending verification codes via SMS to the user’s registered phone number. This is a common and straightforward MFA method.

3. Verification code sent in a phone call:
   Microsoft 365 supports phone call verification, where the user receives an automated call with a verification code or an option to press a key (e.g., #) to confirm identity.

Why the others are not supported:

1. Biometric retinal scanner:
   Biometric authentication is not natively supported as part of Microsoft 365’s default MFA options. However, it can be implemented as part of Windows Hello for Business, which integrates with Microsoft 365 for identity verification.

2. Custom security question:
   Security questions are not considered a secure authentication method and are not supported in Microsoft 365’s MFA offerings.

Correct Answer:

Service Trust Portal

Explanation:

The Service Trust Portal is the appropriate site to access audit and compliance reports for Microsoft 365 services, including Exchange Online and SharePoint Online. It provides detailed information about Microsoft's compliance with global standards, such as ISO, GDPR, and SOC. It also includes audit reports, trust documents, and regulatory compliance guides.

Why not the other options?

1. Compliance Manager:
   Compliance Manager, part of Microsoft Purview, helps organizations manage their own compliance posture and provides tools for assessing compliance risks. However, it is not used to obtain Microsoft's audit reports.

2. Microsoft 365 Defender (formerly Office 365 Security and Compliance Center):
   This tool is primarily used for managing security, data governance, and compliance settings for Microsoft 365. It does not provide audit reports for Microsoft's cloud services.

3. Azure portal:
   The Azure portal is used to manage Azure services and resources. While it includes compliance-related tools for Azure services, it is not specific to Microsoft 365 services like Exchange Online and SharePoint Online.

Explanation: In an on-premises environment, the company is responsible for managing and applying updates to the Exchange server.

Product: Exchange Online

Explanation: Microsoft 365 Groups, including group-based email functionality, is a feature supported by Exchange Online as part of Microsoft 365.

Product: Exchange Online

Explanation: Microsoft Bookings is a cloud-based scheduling solution available only through Microsoft 365, which is part of the Exchange Online ecosystem.