AZ-900 Describe Azure management and governance Practice Question
What is the purpose of Azure Active Directory B2C?
⚠ Common exam trap
Watch out — candidates often confuse Azure AD B2C with Azure AD, assuming both are for employee identity, when Azure AD B2C is exclusively for customer-facing identity management with social login support.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
To provide customer identity management for consumer-facing applications
Azure Active Directory B2C (Business-to-Consumer) is a customer identity access management (CIAM) solution designed specifically for external-facing applications. It allows developers to manage customer sign-up, sign-in, and profile management using social identity providers (e.g., Google, Facebook) or local accounts, while keeping customer identities isolated from the organization's employee directory (Azure AD). This directly supports consumer-facing applications, not internal employee access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
To manage employee identities and corporate application access
Why it's wrong here
This option is incorrect. Azure AD B2C is not designed for employee identities or corporate application access. Employee identity management is the core purpose of Azure AD (now Microsoft Entra ID), which provides single sign-on, multi-factor authentication, and conditional access for internal users within an organization's tenant. In contrast, Azure AD B2C is a separate customer identity and access management (CIAM) service that manages external consumer identities for customer-facing applications, and it does not integrate with internal workforce identity infrastructure.
- ✓
To provide customer identity management for consumer-facing applications
Why this is correct
This option is correct. Azure AD B2C is Microsoft's customer identity and access management (CIAM) service, specifically built for consumer-facing applications. It allows end users to sign up, sign in, and manage profiles using local accounts (email/password) or social identity providers like Google, Facebook, and Apple, and it issues tokens that applications can use without requiring a workforce directory. This makes it the right choice for authenticating external customers, not internal employees or services.
- ✗
To replicate on-premises Active Directory to Azure
Why it's wrong here
This option is incorrect. Replicating on-premises Active Directory to Azure is not a role for Azure AD B2C. Directory synchronization between on-premises AD and cloud is handled by Azure AD Connect or, for managed domain scenarios, by Azure AD Domain Services. Azure AD B2C is exclusively focused on consumer identity management in the cloud; it does not perform replication of existing AD objects, schema, or password hashes from an on-premises environment.
- ✗
To manage service-to-service authentication using managed identities
Why it's wrong here
This option is incorrect. Service-to-service authentication using managed identities is a capability of Azure AD (Microsoft Entra ID) for Azure resources, not Azure AD B2C. Managed identities provide automatically managed service principals that give applications a secure way to authenticate to Azure services without storing credentials. B2C instead authenticates human customers in a separate tenant and is architecturally isolated from Azure resource access, so it cannot be used for machine-to-machine service authentication.
Go deeper
Related to this question
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.