MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
A department head asks which Microsoft 365 option should be used to provide a cloud identity platform for Microsoft 365 and approved SaaS applications. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Watch out — candidates often confuse productivity tools (like Planner, Forms, or Stream) with security or identity services, mistakenly thinking any Microsoft 365 app can serve as an identity platform, when only Microsoft Entra ID provides the required cloud identity and access management capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID
Microsoft Entra ID (formerly Azure Active Directory) is the correct choice because it is the cloud-based identity and access management service that provides authentication, single sign-on (SSO), and conditional access for Microsoft 365 and thousands of pre-integrated SaaS applications. It acts as the identity platform, managing user identities and controlling access to resources, which directly aligns with the department head's requirement for a cloud identity platform.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Planner
Why it's wrong here
Planner is a Kanban-style task and project management app in Microsoft 365, used to assign work, track progress, and collaborate on plans. It does not include any capability to enforce conditional access policies, manage user identities, or govern who can sign in to Microsoft 365 resources. Therefore, it cannot satisfy a requirement for identity-based access management.
- ✗
Microsoft Forms
Why it's wrong here
Forms is for creating surveys, quizzes, and polls, collecting data in Excel, and analyzing responses. Although it has some data-retention settings and access via sharing links, it does not act as an identity provider or control authentication and authorization for Microsoft 365. So it is not the service to implement when the need is centralized identity and access management.
- ✓
Microsoft Entra ID
Why this is correct
Entra ID (formerly Azure AD) is the identity and access management backbone for Microsoft 365; it authenticates users and enforces conditional access, multi-factor authentication, and device restrictions. Because the department head needs a service to manage who can access Microsoft 365 resources, Entra ID is the correct platform, not just a tool with a task or content focus.
- ✗
Microsoft Stream
Why it's wrong here
Stream is a video management service for uploading, organizing, and sharing recorded meetings, training sessions, and other video content. It relies on Microsoft 365 permissions and Entra ID for authentication, but it does not itself provide identity verification or access control policies. Thus, Stream is irrelevant to a requirement for controlling how users sign in to Microsoft 365.
Go deeper
Related to this question
Learn chapter
Communication Compliance in Microsoft 365
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
Key term
Single sign-on
Single sign-on (SSO) is an authentication method that allows a user to log in once and gain access to multiple applications or systems without re-entering credentials.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.