MICROSOFT CERTIFICATION
MS-900 Fundamentals Practice Exam
Exam Number: 3152 | Last updated 16-Apr-26 | 813+ questions across 4 vendor-aligned objectives
The MS-900 Fundamentals certification validates the skills of anyone seeking foundational knowledge of Microsoft 365 cloud services, security, compliance, and licensing. This exam measures your ability to work with Microsoft 365, Microsoft Teams, SharePoint Online, Exchange Online, Microsoft Entra ID, Microsoft Purview, demonstrating both conceptual understanding and practical implementation skills required in today’s enterprise environments.
The heaviest exam domains include Describe Microsoft 365 Apps and Services (45–50%), Describe Security, Compliance, Privacy, and Trust in Microsoft 365 (25–30%), and Describe Cloud Concepts (10–15%). These areas collectively represent the majority of exam content and require focused preparation across their respective subtopics.
Additional domains tested include Describe Microsoft 365 Pricing, Licensing, and Support (10–15%). Together, these areas round out the full exam blueprint and ensure candidates possess well-rounded expertise across the certification scope.
Every answer links to the source. Each explanation below includes a hyperlink to the exact Microsoft documentation page the question was derived from. PowerKram is the only practice platform with source-verified explanations. Learn about our methodology →
835
practice exam users
93.3%
satisfied users
89.2%
passed the exam
4.2/5
quality rating
Test your MS-900 Fundamentals knowledge
10 of 813+ questions
Question #1 - Describe Cloud Concepts
A small accounting firm currently runs servers in a closet. They are considering Microsoft 365 to eliminate hardware maintenance and enable remote work for their staff of 15.
Which cloud computing benefit is most relevant to this firm?
A) Complete customization of server operating systems
B) Increased hardware control
C) Lower internet bandwidth needs
D) Reduced IT management burden with automatic updates, patches, and high availability built into the service
Show solution
Correct answers: B – Explanation:
Microsoft 365 as a cloud service eliminates hardware management, provides automatic updates, and enables remote access — addressing the firm’s pain points. Cloud reduces, not increases, hardware control. Cloud may increase bandwidth needs. SaaS does not expose OS customization. Source: Check Source
Question #2 - Describe Cloud Concepts
A small accounting firm runs servers in a closet. They consider M365 to eliminate hardware maintenance and enable remote work.
Which cloud benefit is most relevant to this firm?
A) Lower internet bandwidth requirements reducing the firm monthly connectivity costs
B) Complete customization of server operating systems including kernel-level modifications
C) Reduced IT management burden with automatic updates, patching, and high availability included
D) Increased direct hardware control allowing the firm to select specific server components
Show solution
Correct answers: C – Explanation:
M365 as a cloud service eliminates hardware management, provides automatic updates, and enables remote access addressing the firm’s maintenance and flexibility pain points. Cloud reduces direct hardware control since Microsoft manages the infrastructure and component selection. Cloud services typically increase bandwidth needs since all access flows over the internet connection. SaaS does not expose operating system customization since Microsoft manages the entire platform stack. Source: Check Source
Question #3 - Describe Cloud Concepts
A CIO explains to the board why SaaS like M365 differs from IaaS in management responsibility.
Which statement correctly describes the SaaS shared responsibility model?
A) The customer manages every layer of the technology stack from hardware through application
B) The customer manages the operating system and middleware layer while Microsoft handles only hardware
C) Microsoft manages only the physical hardware while the customer manages everything above it
D) Microsoft manages infrastructure, platform, OS, and application — the customer manages data and access
Show solution
Correct answers: D – Explanation:
In SaaS, Microsoft manages the complete stack from physical infrastructure through the application. The customer is responsible for their data, user accounts, and access control policies. Customer OS and middleware management describes IaaS responsibility, not SaaS. Full customer management describes the traditional on-premises model without any cloud provider involvement. Hardware-only management by Microsoft describes a colocation arrangement, not the SaaS model. Source: Check Source
Question #4 - Describe Microsoft 365 Apps and Services
A marketing team needs real-time document co-authoring, file sharing with version history, and integrated team chat.
Which M365 service provides this integrated collaboration?
A) Exchange Online only providing email communication without document co-authoring capability
B) Microsoft Teams integrating file sharing, co-authoring, and persistent chat in one workspace
C) Windows 11 operating system providing desktop computing without cloud collaboration services
D) OneDrive personal storage only providing individual file storage without team collaboration
Show solution
Correct answers: B – Explanation:
Teams integrates persistent chat, document co-authoring via SharePoint/OneDrive, and file sharing in a unified workspace accessible from desktop and mobile. Exchange Online provides email and calendar without the real-time co-authoring and persistent team chat features. OneDrive provides individual file storage without the team collaboration workspace and integrated chat. Windows 11 is a client operating system that does not provide the cloud-based collaboration services described. Source: Check Source
Question #5 - Describe Microsoft 365 Apps and Services
An organization needs an intranet with company news, departmental sites, and document libraries for all employees.
Which M365 service provides intranet and document management?
A) Microsoft Teams only which uses SharePoint for storage but is not itself an intranet platform
B) Azure Virtual Machines providing cloud compute infrastructure without intranet site capabilities
C) SharePoint Online providing intranet sites, document libraries, and enterprise content management
D) Power BI providing business intelligence analytics dashboards without content management features
Show solution
Correct answers: C – Explanation:
SharePoint Online provides customizable intranet hub sites, department team sites, document libraries, and enterprise content management with search across the organization. Teams integrates with SharePoint for file storage but does not provide the intranet publishing and site management experience. Azure VMs provide cloud infrastructure without intranet site building, content management, or document library capabilities. Power BI creates analytical dashboards and reports without intranet publishing or document management functionality. Source: Check Source
Question #6 - Describe Microsoft 365 Apps and Services
Employees need Word, Excel, PowerPoint, and Outlook on desktop, mobile, and web browser across all their devices.
Which M365 feature provides this cross-platform app access?
A) Microsoft 365 Apps including installable desktop versions, mobile apps, and web-based Office
B) Dynamics 365 providing business process applications for CRM and ERP without Office productivity
C) Windows Server providing server operating system infrastructure without end-user productivity apps
D) Azure DevOps providing software development CI/CD pipeline tools without Office productivity apps
Show solution
Correct answers: A – Explanation:
Microsoft 365 Apps includes installable desktop versions for Windows and Mac, mobile apps for iOS and Android, and web-based versions accessible from any browser on any device. Windows Server is an infrastructure operating system without end-user productivity application distribution. Azure DevOps provides development tools for software teams without Office productivity application delivery. Dynamics 365 provides CRM and ERP business applications without the core Office productivity suite. Source: Check Source
Question #7 - Describe Microsoft 365 Apps and Services
A company needs a platform for company-wide knowledge sharing with community discussions and Q&A forums.
Which M365 service enables this social knowledge sharing?
A) Azure Active Directory managing identity and access without social networking or knowledge sharing
B) Viva Engage providing enterprise social networking with community discussions and Q&A features
C) Power Automate providing workflow automation without community discussion or knowledge sharing
D) Exchange Online Distribution Lists broadcasting email messages without community discussion forums
Show solution
Correct answers: B – Explanation:
Viva Engage (formerly Yammer) provides enterprise social networking with community spaces, threaded discussions, Q&A, and knowledge sharing across the organization. Distribution Lists broadcast email to member groups without interactive community discussion or knowledge management features. Azure AD manages identity authentication and authorization without social networking or knowledge platform capabilities. Power Automate handles workflow automation and does not provide community discussion or knowledge sharing features. Source: Check Source
Question #8 - Describe Security, Compliance, Privacy, and Trust in Microsoft 365
A CISO needs transparency into how Microsoft protects M365 customer data including encryption and datacenter security.
Which Microsoft resource provides this documentation?
A) Marketing brochures providing promotional content without detailed technical security documentation
B) Social media posts sharing informal updates without comprehensive security compliance evidence
C) Third-party blog reviews providing external opinions that may be outdated or technically inaccurate
D) Microsoft Trust Center and Service Trust Portal with audit reports and compliance documentation
Show solution
Correct answers: D – Explanation:
The Trust Center and Service Trust Portal provide official compliance certifications, SOC and ISO audit reports, and detailed security whitepapers documenting Microsoft data protection practices. Marketing brochures provide promotional content without the technical depth needed for security evaluation. Social media posts are informal communications without the structured compliance documentation that security teams require. Third-party blog reviews may be outdated, technically inaccurate, or reflect incomplete understanding of Microsoft security practices. Source: Check Source
Question #9 - Describe Security, Compliance, Privacy, and Trust in Microsoft 365
A healthcare company needs to verify M365 meets HIPAA compliance requirements before storing patient communications.
Which compliance feature helps assess HIPAA alignment?
A) Microsoft Purview Compliance Manager with a HIPAA assessment template mapping responsibilities
B) Azure Advisor providing resource optimization recommendations without compliance assessment tools
C) Power BI providing data visualization dashboards without regulatory compliance evaluation
D) Teams Admin Center managing Teams settings without healthcare compliance assessment capability
Show solution
Correct answers: A – Explanation:
Compliance Manager provides pre-built assessment templates including HIPAA that map Microsoft and customer responsibilities, tracking the organization compliance posture against regulatory requirements. Azure Advisor provides performance, cost, and reliability recommendations without regulatory compliance assessment tools. Power BI creates data visualizations and analytical dashboards without compliance posture evaluation or regulatory mapping. Teams Admin Center manages Teams policies and settings without healthcare-specific compliance assessment features. Source: Check Source
Question #10 - Describe Security, Compliance, Privacy, and Trust in Microsoft 365
An admin implements Zero Trust principles. Identity verification must be enforced for every access request.
Which M365 security feature embodies the Zero Trust “verify explicitly” principle?
A) Microsoft Entra Conditional Access evaluating identity, device, location, and risk per request
B) Disable all remote access entirely which blocks legitimate work rather than verifying identity
C) Use only password authentication which provides single-factor verification without additional signals
D) Trust all internal network traffic implicitly which directly contradicts the Zero Trust model
Show solution
Correct answers: A – Explanation:
Conditional Access evaluates multiple signals including identity strength, device compliance, network location, and risk level for every access request, embodying Zero Trust explicit verification. Implicit trust for internal traffic is the traditional perimeter model that Zero Trust specifically replaces. Disabling remote access blocks legitimate productivity rather than applying verification-based access decisions. Password-only authentication provides single-factor verification without the multi-signal evaluation that Zero Trust requires. Source: Check Source
Get 813+ more questions with source-linked explanations
Every answer traces to the exact Microsoft documentation page — so you learn from the source, not just memorize answers.
Exam mode & learn mode · Score by objective · Updated 16-Apr-26
Learn more...
What the MS-900 Fundamentals exam measures
- Describe Cloud Concepts (10–15%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Describe Microsoft 365 Apps and Services (45–50%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Describe Security, Compliance, Privacy, and Trust in Microsoft 365 (25–30%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
- Describe Microsoft 365 Pricing, Licensing, and Support (10–15%) — Evaluate your ability to implement and manage tasks within this domain, including real-world job skills and scenario-based problem solving.
How to prepare for this exam
- Review the official exam guide to understand every objective and domain weight before you begin studying
- Complete the relevant Microsoft Learn learning path to build a structured foundation across all exam topics
- Get hands-on practice in an Azure free-tier sandbox or trial environment to reinforce what you have studied with real configurations
- Apply your knowledge through real-world project experience — whether at work, in volunteer roles, or contributing to open-source initiatives
- Master one objective at a time, starting with the highest-weighted domain to maximize your score potential early
- Use PowerKram learn mode to study by individual objective and review detailed explanations for every question
- Switch to PowerKram exam mode to simulate the real test experience with randomized questions and timed conditions
Career paths and salary outlook
Earning this certification can open doors to several in-demand roles:
- Microsoft 365 Support Specialist: $65,000–$90,000 per year (based on Glassdoor and ZipRecruiter data)
- IT Help Desk Analyst: $55,000–$80,000 per year (based on Glassdoor and ZipRecruiter data)
- Cloud Solutions Associate: $70,000–$95,000 per year (based on Glassdoor and ZipRecruiter data)
Official resources
Microsoft provides comprehensive free training to prepare for the MS-900 Fundamentals exam. Start with the official Microsoft Learn learning path for structured, self-paced modules covering every exam domain. Review the exam study guide for the complete skills outline and recent updates.