MS-900 Access reviews Practice Question
A business stakeholder asks how Microsoft 365 can help them periodically review group memberships and application access. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Many candidates confuse general productivity tools (Planner, Stream, Forms) with identity governance capabilities, leading candidates to pick a familiar-sounding option instead of recognizing Access Reviews as the specific Entra ID feature for periodic access certification.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access reviews
Access reviews in Microsoft Entra ID (formerly Azure AD) allow administrators to periodically review and certify group memberships and application access. This capability directly addresses the stakeholder's requirement by automating recurring attestation workflows, ensuring that only authorized users retain access. It is part of Microsoft's identity governance framework, not a general productivity or media tool.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner organises tasks and plans; it holds no directory data about group memberships or application access, so it cannot perform reviews. It is tempting as a tracking tool for review tasks, but the actual recertification capability is Microsoft Entra ID Governance access reviews, which query and revoke entitlements directly.
- ✓
Access reviews
Why this is correct
Access reviews in Microsoft Entra ID Governance let reviewers periodically recertify group memberships and application assignments, with recurring schedules and automatic removal on denial. This satisfies the stem's requirement for periodic review of memberships and app access.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream hosts and shares video content, offering no mechanism to review group memberships or application access. It is tempting as a Microsoft 365 service, but periodic access reviews require Microsoft Entra ID Governance's access reviews, which recertify membership and app assignments on a schedule.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms collects survey and quiz responses; it cannot enumerate group memberships or application assignments, let alone recertify them. It is tempting because forms could gather reviewer input manually, but periodic access reviews need Microsoft Entra ID Governance, which automates recertification of group and application access.
Go deeper
Related to this question
Learn chapter
Microsoft Entra External Identities (B2B)
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Access review
An access review is a periodic audit process where administrators check and confirm which users have permissions to what resources, ensuring only authorized people retain access.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.