MS-900 Describe Microsoft 365 apps and services Practice Question
A company deploys Microsoft 365 Business Premium. The IT team wants to enable employees to sign in using a mobile app without passwords. Which app should they configure?
⚠ Common exam trap
Candidates often confuse Microsoft Entra ID (the identity provider that enables passwordless authentication) with the actual user-facing app (Microsoft Authenticator) that performs the sign-in, leading them to select Entra ID instead of the correct app.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Authenticator
Microsoft Authenticator is the correct app because it enables passwordless sign-in for Microsoft 365 Business Premium users via FIDO2-based phone sign-in or number matching. It allows employees to authenticate using biometrics or a PIN, eliminating the need for a password during sign-in.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Intune
Why it's wrong here
Microsoft Intune is a unified endpoint management (MDM/MAM) service that controls device compliance, configuration, and app protection policies. It can integrate with Conditional Access to enforce device posture, but it does not facilitate user sign-in or passwordless authentication. Intune manages the device itself; it never stores credentials or issues sign-in challenges to a user.
- ✗
Microsoft Entra ID
Why it's wrong here
Microsoft Entra ID (formerly Azure AD) is the cloud-based identity and access management platform that performs authentication and authorization for Microsoft 365. However, it is a backend directory service, not a user-facing mobile application that an end user opens to complete a sign-in. While Entra ID validates credentials and issues tokens, the actual 'app' that presents the second factor or passwordless prompt on the user's phone is Microsoft Authenticator.
- ✗
Microsoft Copilot
Why it's wrong here
Microsoft Copilot is an AI-powered productivity assistant embedded across Microsoft 365 apps like Word, Excel, and Teams. It generates content and summarizes information but has no functionality related to identity verification, multi-factor authentication, or sign-in. Copilot cannot trigger push notifications, validate OTP codes, or act as an authentication factor, so it is completely unrelated to the user sign-in process.
- ✓
Microsoft Authenticator
Why this is correct
Microsoft Authenticator is the mobile app specifically designed to handle sign-in verification for Microsoft 365. It enables passwordless sign-in and multi-factor authentication via push notification, number matching, or a rotating one-time code. When deploying Microsoft 365 Business Premium, users are expected to install and register Authenticator with their work account in Entra ID, making it the correct tool for user sign-in in this scenario.
Go deeper
Related to this question
About these practice questions
One of 217 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.