mediumMultiple Choice
MS-900 Practice Question: A compliance-aware administrator is selecting the…
A compliance-aware administrator is selecting the right Microsoft 365 capability to guide assignment of Microsoft 365 admin roles. Microsoft 365 licensing, admin, or support concept is most relevant?
⚠ Common exam trap
Test-takers frequently confuse productivity tools (like Whiteboard, Stream, or Forms) with governance concepts, failing to recognize that 'least privilege' is the only option directly tied to role assignment and compliance in Microsoft 365.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Least privilege
The principle of least privilege is the most relevant concept for guiding assignment of Microsoft 365 admin roles because it dictates that administrators should be granted only the permissions necessary to perform their job functions, minimizing security risks. This directly aligns with compliance requirements by ensuring that no user has excessive access to sensitive administrative functions. The other options (Whiteboard, Stream, Forms) are productivity or collaboration tools unrelated to role-based access control or compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Whiteboard
Why it's wrong here
Microsoft Whiteboard is a collaborative digital canvas bundled with Microsoft 365, not a mechanism for controlling access or permissions. It does not provide roles, administrative scoping, or any principle that guides compliance-aware permission assignments. Choosing Whiteboard would misidentify a productivity workload as a security control, whereas the administrator needs a fundamental security concept like least privilege.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is an enterprise video hosting service, which is unrelated to administrator authorization decisions. Although Stream supports compliance with features such as eDiscovery and retention policies, it does not define how administrators should scope user permissions or roles. An administrator selecting a licensing or permission approach would not choose a media platform; they need the security principle of least privilege instead.
- ✓
Least privilege
Why this is correct
Least privilege is the correct security principle, stating that users and administrators should receive only the permissions necessary for their assigned tasks. This minimizes the attack surface, limits exposure of sensitive data, and satisfies compliance obligations such as ISO/IEC 27001 and Microsoft's Zero Trust model. Unlike the product options, least privilege is an architectural concept that directly guides role and permission design within Microsoft 365.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is a quiz and survey application used to collect user input, so it has no bearing on permission assignment or compliance-aware administration. While Forms data can be governed with data loss prevention policies, the tool itself is a workload rather than an access-control principle. An administrator would not use Forms to determine who has access to what; that is the role of least privilege and RBAC.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
Learn chapter
Zero Trust Security Principles in Microsoft 365
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Collaboration
Collaboration in Microsoft 365 refers to the integrated tools and services that enable people to work together in real time, share information, and coordinate tasks from anywhere.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.