MS-900 Practice Question: Describe security, compliance, privacy, and trust in Microsoft 365
While preparing a Microsoft 365 adoption plan, a consultant is asked to give external partners controlled access to Teams and SharePoint resources. Microsoft security, identity, or compliance capability should it use?
⚠ Common exam trap
Many candidates confuse collaboration tools (Stream, Forms, Planner) with identity and access management capabilities, failing to recognize that only Microsoft Entra External ID (B2B collaboration) provides the necessary security and compliance controls for external partner access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra External ID / B2B collaboration
Microsoft Entra External ID (formerly Azure AD B2B collaboration) is the correct capability because it enables organizations to securely share Teams and SharePoint resources with external partners by inviting them as guest users. This feature uses identity federation to allow partners to authenticate with their own credentials, while enforcing conditional access policies and compliance controls. It directly addresses the requirement for controlled, compliant external access without exposing internal directories or requiring additional licenses for partners.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra External ID / B2B collaboration
Why this is correct
Microsoft Entra External ID, specifically B2B collaboration, offers a secure identity and access management framework for external guests or partners. It leverages Microsoft Entra ID's conditional access, multi-factor authentication, and compliance policies to enforce controlled access to directory resources and applications. This directly addresses the requirement for governed external collaboration without duplicating user accounts, making it the correct choice for an adoption plan.
- ✗
Microsoft Stream
Why it's wrong here
Microsoft Stream is a video hosting and streaming platform designed for enterprise content, with capabilities such as automatic transcription, channels, and in-organization sharing. However, it does not include any identity management or conditional access controls for external users; it simply stores and displays video files. Therefore, it cannot meet a requirement related to governing external identity access.
- ✗
Microsoft Forms
Why it's wrong here
Microsoft Forms is a lightweight tool for creating surveys, quizzes, and polls, with responses collected for analysis. It has no underlying directory service, no role-based access control for external identities, and no security policies such as MFA or conditional access. Thus, it is entirely unsuitable for any identity or compliance requirement in an adoption plan.
- ✗
Microsoft Planner
Why it's wrong here
Microsoft Planner is a task management application that helps teams organize and assign work using Kanban-style boards, and it inherits security from the connected Microsoft 365 group. But it does not provide any capability for external identity management, such as inviting guests, setting cross-tenant policies, or controlling authentication. So it fails to address the requirement of controlled guest or external identity access.
Go deeper
Related to this question
Learn chapter
External Sharing in SharePoint and OneDrive
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
Key term
Collaboration
Collaboration in Microsoft 365 refers to the integrated tools and services that enable people to work together in real time, share information, and coordinate tasks from anywhere.
About these practice questions
One of 794 original MS-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-900 exam.