AZ-305 Practice Question: Design identity, governance, and monitoring solutions
A company uses Microsoft Entra ID and wants to allow users to sign in using their existing personal Microsoft accounts, Google, and Facebook identities. They also need custom sign-up and sign-in flows with collection of specific user attributes. Which Microsoft Entra ID feature should they use?
⚠ Common exam trap
Watch out — candidates often confuse Entra ID B2B with B2C, assuming B2B can handle consumer identities and custom sign-up flows, but B2B is strictly for business partner collaboration and lacks the user flow customization and social identity provider support that B2C provides.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID B2C
Microsoft Entra ID B2C (Business-to-Consumer) is the correct choice because it is specifically designed to support external identity providers like personal Microsoft accounts, Google, and Facebook, and it provides a customizable policy framework (user flows) for sign-up and sign-in that can collect custom user attributes. Unlike B2B, which focuses on business partner collaboration, B2C allows you to define attribute collection during registration via built-in or custom policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID B2B
Why it's wrong here
Microsoft Entra ID B2B is designed for B2B collaboration, allowing you to share your enterprise applications with external business partners as guest users. While it can accept identity providers like Google or Facebook as guest identities, that is a secondary capability for enabling partner access, not for building a consumer-facing sign-up/sign-in experience. B2B does not provide customizable user journeys, custom attributes on self-service sign-up, or the Identity Experience Framework policies that B2C offers, making it the wrong choice for allowing external customers to register with their own social credentials.
- ✓
Microsoft Entra ID B2C
Why this is correct
Microsoft Entra ID B2C is the correct solution because it is a Customer Identity and Access Management (CIAM) service built specifically to handle consumer identities at scale. It natively supports multiple identity providers, including Microsoft, Google, and Facebook, and provides self-service sign-up/sign-in user flows. With the Identity Experience Framework, you can define custom policies that collect custom attributes, perform API-based validation, and create fully branded, tailored registration journeys for customers, which is exactly what this company needs.
- ✗
Microsoft Entra ID Identity Protection
Why it's wrong here
Microsoft Entra ID Identity Protection is a risk-assessment engine that monitors sign-ins and identity usage for suspicious patterns such as impossible travel, leaked credentials, and unfamiliar sign-in properties. It is designed to trigger adaptive responses like requiring MFA or password changes, not to federate external identity providers. Identity Protection operates on identities that already exist in Entra ID; it cannot process a consumer's sign-up flow or accept a social identity provider like Google or Facebook as a catalog of customer identities.
- ✗
Microsoft Entra ID Conditional Access
Why it's wrong here
Microsoft Entra ID Conditional Access is a policy-based control plane that evaluates conditions such as user location, group membership, device compliance, and sign-in risk to enforce access decisions like block or allow with MFA. It is an authorization tool that works after an identity is established; it does not create, manage, or integrate external identity providers. While you could apply Conditional Access policies to B2C custom policies later, it is not a mechanism for allowing users to sign up via social identity providers, so it cannot satisfy the stated requirement.
Go deeper
Related to this question
About these practice questions
One of 212 original AZ-305 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.