Courseiva
mediumMultiple Choice

MS-900 Practice Question: A service owner is comparing Microsoft 365…

A service owner is comparing Microsoft 365 capabilities and needs to reset user passwords without assigning Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?

⚠ Common exam trap

Many exam-takers assume only Global Administrator can reset passwords, overlooking the existence of the Password Administrator role, which is specifically designed for delegated password management without full admin privileges.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Password Administrator

The Password Administrator role in Microsoft Entra ID allows a service owner to reset user passwords without needing the highly privileged Global Administrator role. This aligns with the principle of least privilege, as it grants only the specific permissions required for password management while avoiding broader administrative access.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Microsoft Whiteboard

    Why it's wrong here

    Microsoft Whiteboard is a visual collaboration canvas used for sketching, diagramming, and brainstorming in real time. It is not an Microsoft Entra ID or Microsoft 365 administrative role, so it cannot reset passwords or manage user directory settings. Deploying Whiteboard does not delegate any identity management permissions, and it also requires a separate license rather than fulfilling an admin or support requirement.

  • ✓

    Password Administrator

    Why this is correct

    The Password Administrator role is a built-in Microsoft Entra ID role that grants the ability to reset passwords for users who are non-admins, as well as for some limited admin roles, without assigning full Global Admin privileges. This makes it the correct choice when a service owner needs to delegate password reset tasks. It is explicitly scoped for identity management, unlike collaboration tools, and is the least-privileged role that can handle this requirement.

  • ✗

    Microsoft Forms

    Why it's wrong here

    Microsoft Forms is a web-based app for creating surveys, quizzes, and polls, storing responses in a list or Excel workbook. It provides no control over user accounts or passwords within Microsoft Entra ID, and its permissions are limited to the Forms app itself, not directory-wide. Choosing Forms for a password reset delegation is a category error because Forms manages data collection, not identity or access management.

  • ✗

    Microsoft Stream

    Why it's wrong here

    Microsoft Stream is an enterprise video service for uploading, organizing, and sharing recordings, with features like transcription and access control per video. However, Stream's permissions govern content viewing and sharing, not user directory objects, and it cannot reset or manage account credentials. As a content platform, Stream has no overlap with the Microsoft Entra ID role needed to delegate password resets, and it is not license- or admin-related.

About these practice questions

Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.