Nice question.

But 27% wrong answers! (242 out of 520). That's pretty amazing. Nearly half the people who replied don't know that security princials are listed in the sys.server_principals DMV (most of them preferring a non-existent DMV).