MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A business stakeholder asks how Microsoft 365 can help them allow sign-in using biometrics or FIDO2 security keys. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Watch out — candidates often confuse productivity tools (Planner, Stream, Forms) with identity and access management capabilities, failing to recognize that passwordless authentication is a core feature of Microsoft Entra ID, not a standalone app.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID passwordless authentication
Microsoft Entra ID passwordless authentication (Option B) is the correct capability because it directly supports sign-in using biometrics (Windows Hello, Microsoft Authenticator) and FIDO2 security keys. This feature eliminates the need for passwords by leveraging public-key cryptography and the WebAuthn standard, aligning with the stakeholder's request for passwordless sign-in methods.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Planner coordinates tasks and plans; it holds no authentication capability, so it cannot process biometric or FIDO2 credentials. It is tempting because it lives within Microsoft 365, but it is the right choice for assigning work items and tracking team progress, not for verifying sign-in identity through Microsoft Entra ID.
- ✓
Microsoft Entra ID passwordless authentication
Why this is correct
Microsoft Entra ID passwordless authentication directly satisfies the biometrics and FIDO2 requirement. It supports Windows Hello biometrics and FIDO2 security keys through the WebAuthn standard, replacing passwords entirely. This maps precisely to the stakeholder's stated sign-in methods, unlike other Microsoft 365 capabilities that address different security or compliance concerns.
- ✗
Microsoft Stream
Why it's wrong here
Stream hosts and shares video content; it performs no credential verification, so biometric and FIDO2 sign-in cannot be configured there. It is tempting as a Microsoft 365 workload, but it is correct for publishing and viewing enterprise videos, not for authentication through Microsoft Entra ID.
- ✗
Microsoft Forms
Why it's wrong here
Forms collects survey and quiz responses; it neither registers nor validates FIDO2 keys or biometric factors. Its presence in Microsoft 365 makes it tempting, yet it suits building questionnaires and polls, whereas phishing-resistant sign-in requires Microsoft Entra ID authentication methods.
Quick reference
Asymmetric Encryption Algorithm Comparison
| Algorithm | Key Exchange | Signatures | Equivalent Security Key | Notes |
|---|---|---|---|---|
| RSA-3072 | Yes | Yes | 128-bit | Widely deployed; slow for bulk data |
| ECDSA P-256 | No | Yes | 128-bit | Fast signatures; standard TLS certs |
| ECDH / ECDHE | Yes | No | 128-bit | Perfect forward secrecy in TLS 1.3 |
| DH / DHE | Yes | No | 128-bit (3072-bit key) | Replaced by ECDHE in modern TLS |
| Ed25519 | No | Yes | ~128-bit | SSH keys, modern PKI |
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID (Azure AD) in M365
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.