AZ-204 Implement Azure security Practice Question
Which THREE components are required to implement Azure AD B2C custom policies for sign-up and sign-in? (Choose three.)
⚠ Common exam trap
Watch out — candidates often confuse the Azure AD B2C tenant (which is required) with an Azure AD tenant for employee identities (Option B), or they mistakenly think an Azure subscription is a direct component of the policy implementation rather than a prerequisite for tenant creation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A user journey definition
A user journey definition is a core component of an Azure AD B2C custom policy. It orchestrates the sequence of technical profiles and orchestration steps that define the sign-up and sign-in experience, including self-asserted pages, multifactor authentication, and validation. Without a user journey, the policy cannot specify the flow of claims exchanges and user interactions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A user journey definition
Why this is correct
A user journey definition is a core component within Azure AD B2C custom policies, specifically part of the Identity Experience Framework (IEF). It meticulously defines the sequence of orchestration steps a user must complete for a specific task, such as sign-up, sign-in, or profile editing. These journeys dictate the flow of claims and interactions with various technical profiles, making them indispensable for defining the user's authentication and authorization path.
- ✗
An Azure AD (Microsoft Entra ID) tenant for employee identities
Why it's wrong here
An Azure AD (Microsoft Entra ID) tenant for employee identities is not required because Azure AD B2C operates within its own dedicated B2C tenant. This B2C tenant is specifically designed to manage external consumer identities and is distinct from a standard Azure AD tenant used for an organization's internal employees. While both are Microsoft Entra services, a B2C implementation does not depend on or utilize an existing employee-focused Azure AD tenant.
- ✗
An Azure subscription
Why it's wrong here
An Azure subscription is not strictly required for the creation or core functionality of an Azure AD B2C tenant itself. While an Azure subscription is typically linked for billing purposes and to manage other Azure resources that integrate with B2C, the B2C tenant can be provisioned and managed independently. Its fundamental operations and configuration are handled directly through the Azure portal or PowerShell, separate from subscription-bound resource deployments.
- ✓
A trust framework policy (XML)
Why this is correct
A trust framework policy, expressed as an XML file, is absolutely fundamental for implementing custom user flows in Azure AD B2C. These policies define the entire identity experience, encompassing elements like claims schemas, technical profiles for interacting with various identity providers or external systems, and the orchestration steps (user journeys). Without these XML-based policies, advanced B2C scenarios requiring custom logic, branding, or integration cannot be configured or deployed.
- ✓
A relying party application registration
Why this is correct
A relying party application registration is essential because it represents the client application that will delegate its authentication and authorization processes to Azure AD B2C. This registration defines critical parameters such as the application ID, redirect URIs where B2C should send tokens, and API permissions. Without this registration, the application cannot initiate an authentication request with B2C, nor can it securely receive and validate identity tokens or access tokens from the B2C tenant.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-204 question from scratch — 881 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.