mediumMultiple Choice
MS-900 Practice Question: An administrator is reviewing a request from…
An administrator is reviewing a request from users who need to reset user passwords without assigning Global Administrator. Microsoft 365 licensing, admin, or support concept is most relevant?
⚠ Common exam trap
Test-takers frequently confuse the Password Administrator role with the Global Administrator role, assuming only Global Admin can reset passwords, or they might pick a random Microsoft service like Forms or Stream because they sound 'administrative' without understanding the specific role-based access control (RBAC) permissions in Microsoft Entra ID.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Password Administrator
The Password Administrator role in Microsoft Entra ID (formerly Azure AD) allows users to reset passwords for non-administrator users and manage service requests without granting the highly privileged Global Administrator role. This directly addresses the user request while adhering to the principle of least privilege, making it the most relevant concept for this scenario.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Whiteboard
Why it's wrong here
Microsoft Whiteboard provides a collaborative digital canvas for brainstorming and inking; it has no identity or credential management function. It would be the relevant concept when users need shared visual collaboration, not when they need to reset passwords without Global Administrator rights.
- ✓
Password Administrator
Why this is correct
Password Administrator grants scoped rights to reset passwords for non-administrators and other Password Administrators, without the tenant-wide control Global Administrator carries. This least-privilege role in Microsoft Entra ID satisfies the requirement to reset user passwords while avoiding excessive permissions.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms creates surveys, quizzes and polls, and stores responses; it exposes no directory permissions or password reset capability. It would be the relevant concept when the requirement is collecting structured user input, not delegating password reset to non-Global-Administrator roles.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is a video service for uploading, sharing and managing organisational video content; it holds no directory role or password-write capability. It would be the relevant concept when the requirement concerns enterprise video portals or meeting recordings, not delegated password reset.
Go deeper
Related to this question
Learn chapter
Azure AD Join vs Hybrid Azure AD Join vs Workplace Join
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
This MS-900 question is part of Courseiva's 794-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.