MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
During a Microsoft 365 planning workshop, let users reset forgotten passwords without calling the help desk. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Watch out — candidates often confuse productivity tools (Planner, Stream, Forms) with security capabilities, assuming any Microsoft 365 service can handle identity tasks, when only Entra ID-based features like SSPR are designed for password management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Self-service password reset (SSPR)
Self-service password reset (SSPR) is the correct Microsoft 365 capability because it allows users to reset their own forgotten passwords without requiring help desk intervention. SSPR is part of Microsoft Entra ID (formerly Azure Active Directory) and enforces security through multi-factor authentication verification before allowing a password change. This directly addresses the requirement to reduce help desk calls while maintaining identity security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Self-service password reset (SSPR)
Why this is correct
Self-service password reset (SSPR) is an Microsoft Entra ID feature that lets users verify their identity with methods such as phone, email, or the Microsoft Authenticator app, then reset their password without administrator involvement. It reduces helpdesk workload and strengthens security by enforcing multi-factor verification before password changes. In Microsoft 365, SSPR can be enabled for all users and integrated with conditional access policies to require registration and secure resets.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a cloud-based task and project management application within Microsoft 365, used by teams to create plans, assign tasks, and track progress. It operates in the productivity and collaboration domain and has no connection to Microsoft Entra ID identity verification, password management, or user account security. Therefore, deploying Planner would not give users the ability to reset their own passwords, so it cannot satisfy the stated requirement.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is an enterprise video hosting service that stores and streams recordings, like meetings and training videos, across an organization. It does not interact with authentication protocols or directory settings; its role is content distribution, not identity security. Since the need is for a user-driven password reset capability, Stream is irrelevant and fails to address any aspect of the requirement.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is a lightweight survey, quiz, and polling tool used to gather user feedback. While it can be embedded in Teams and supports some sharing permissions, it cannot query Microsoft Entra ID authentication methods or issue password resets. Its purpose is data collection, not user identity management, so choosing Forms would leave users unable to self-recover their passwords.
Go deeper
Related to this question
Learn chapter
Cross-Tenant Access Policies in Entra ID
Key term
SSPR
Self-Service Password Reset — a system that allows users to reset their own passwords without contacting IT support.
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
About these practice questions
Courseiva writes every MS-900 question from scratch — 794 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.