Microsoft 365 Fundamentals MS-900 Foundations

A structured Microsoft MS-900 course covering cloud, apps, security, licensing, administration, and AI, with linked practice questions.

Level: Microsoft 365 Fundamentals (MS-900) Difficulty: beginner 5 lessons 60 min
Course progress 0 / 5
Back to courses

What you will learn

  • Describe cloud concepts and service models.
  • Explain Microsoft 365 apps.
  • Describe security and compliance.
  • Explain licensing and administration.
  • Describe AI and Copilot.

Before you start

  • Basic Microsoft 365 familiarity is helpful.
  • No prior cloud certification is required.
  • No programming experience is required.

Lesson 1 Cloud Concepts and Service Models

The Microsoft 365 Fundamentals MS-900 exam introduces cloud concepts, Microsoft 365 services, security, licensing, administration, and AI. Cloud computing delivers on-demand resources over the internet. SaaS provides software such as Microsoft 365, PaaS provides application platforms, and IaaS provides virtual infrastructure. Public clouds are shared, private clouds are dedicated, and hybrid clouds combine both. Scalability increases capacity and elasticity adjusts automatically to demand. Understanding service models helps organizations choose the right cloud strategy.

Example

Example: An organization uses Microsoft 365 as SaaS, builds custom apps on Azure PaaS, and runs legacy VMs on IaaS in a hybrid setup.

Lesson 2 Microsoft 365 Apps and Services

Microsoft 365 includes productivity apps and cloud services. Outlook manages email and calendars, Word creates documents, Excel handles spreadsheets, and PowerPoint creates presentations. Teams supports chat, meetings, and collaboration, while SharePoint hosts intranet sites and document libraries. OneDrive provides personal cloud storage, OneNote captures notes, and Planner organizes tasks. Microsoft 365 apps work together so teams can communicate, store files, and automate work. Understanding these services helps users and administrators choose the right tool.

Example

Example: A team collaborates in Teams, stores files in SharePoint, uses Planner for tasks, and shares presentations through OneDrive.

Lesson 3 Security and Compliance

Microsoft 365 security protects identities, data, and devices. Microsoft Entra ID manages identities, and multifactor authentication requires multiple factors. Conditional Access enforces sign-in policies, and data loss prevention blocks sensitive data sharing. Microsoft Purview provides compliance, eDiscovery, and governance tools. Sensitivity labels classify data, Information Protection encrypts and protects it, and Insider Risk Management detects risky activity. Administrators should enable security defaults, assign least privilege, and monitor compliance. These controls help organizations meet legal and regulatory requirements.

Example

Example: An organization enables MFA, uses Conditional Access for risky sign-ins, applies sensitivity labels, and reviews DLP alerts.

Lesson 4 Licensing and Administration

Microsoft 365 licensing determines which services users can access. Subscriptions are paid plans, and licenses are user entitlements. Microsoft 365 Business Basic includes web and mobile apps, E3 includes desktop apps and cloud services, and E5 adds advanced security and compliance. Volume licensing supports organizations at scale, and tenants are organization instances. The Microsoft 365 admin center manages users, groups, roles, and billing. Users are identities, groups collect users, and shared or resource mailboxes support team workflows. Usage reports show adoption and activity.

Example

Example: An admin assigns E3 licenses in the admin center, creates security groups, and reviews a monthly usage report.

Lesson 5 AI and Copilot

Microsoft integrates AI across Windows and Microsoft 365. Microsoft 365 Copilot assists users in Word, Excel, PowerPoint, Outlook, and Teams. Copilot in Windows helps with operating system tasks, and Bing Chat Enterprise provides AI chat with commercial data protection. Prompts are instructions given to AI models, and knowledge bases ground responses. Responsible AI principles include fairness, reliability, privacy, transparency, and accountability. Copilot Lab offers prompts and learning resources. Organizations should protect data, review AI output, and use AI responsibly.

Example

Example: A user asks Microsoft 365 Copilot to draft a proposal, verifies the output, and checks Copilot Lab for prompt best practices.