mediumMultiple Choice
MS-900 Role-based access control (RBAC) Practice Question
A service owner is comparing Microsoft 365 capabilities and needs to avoid giving every IT staff member Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?
⚠ Common exam trap
Test-takers frequently confuse productivity tools (Whiteboard, Forms, Stream) with administrative concepts, failing to recognize that the core issue is about role-based access control and licensing, not feature functionality.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Assign specific admin roles based on job responsibility
The question asks which concept is most relevant when a service owner needs to avoid giving every IT staff member Global Administrator access. Assigning specific admin roles based on job responsibility (Option B) directly addresses this by following the principle of least privilege, allowing granular control over Microsoft 365 administrative tasks without granting full, unrestricted access. This is a core identity and access management concept tied to Microsoft 365 licensing and administration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Whiteboard
Why it's wrong here
Whiteboard is a collaborative canvas for brainstorming and diagramming, with no role in delegating administrative privileges. The scenario requires role-based access control through Microsoft Entra ID admin roles. Whiteboard is tempting because IT staff may use it during planning, but it neither grants nor scopes administrator permissions.
- ✓
Assign specific admin roles based on job responsibility
Why this is correct
Role-based access control grants each IT staff member only the permissions their duties require, such as Exchange Administrator or Helpdesk Administrator. This scoped assignment satisfies the constraint of avoiding Global Administrator for everyone, applying least privilege across Microsoft 365 admin roles.
- ✗
Microsoft Forms
Why it's wrong here
Forms is a survey and data-collection tool; it holds no administrative role model, so it cannot limit Global Administrator exposure. The stem needs Microsoft Entra ID role assignments. Forms tempts because IT staff collect input with it, but it governs no tenant permissions whatsoever.
- ✗
Microsoft Stream
Why it's wrong here
Stream is a video hosting and sharing service within Microsoft 365, unrelated to privilege delegation. The scenario needs Microsoft Entra ID role-based access control to scope admin rights. Stream tempts because it is an admin-managed workload, but managing a workload is not the same as delegating tenant administrator roles.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.