MS-102 Practice Question: Implement and manage Microsoft Entra identity and access
You are implementing Microsoft Entra ID Governance. You need to automate the creation of guest user accounts when employees submit a request through the company's HR system. What should you use?
⚠ Common exam trap
Many exam-takers confuse Lifecycle Workflows with Access Reviews or ID Protection because all three fall under 'Identity Governance', but only Lifecycle Workflows provides the actual provisioning automation for HR-driven account creation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Lifecycle Workflows
Lifecycle Workflows (D) is the correct choice because it is the Microsoft Entra ID Governance feature designed to automate identity lifecycle processes, including the creation of guest user accounts triggered by events such as HR system submissions. It uses built-in or custom workflows with tasks like 'Create user' and 'Send email' to handle the entire provisioning flow without manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Verified ID
Why it's wrong here
Microsoft Entra Verified ID is a decentralized identity solution that issues and verifies verifiable credentials (VCs) signed by trusted issuers. It is designed to cryptographically prove claims about a person or entity—such as employment status or qualifications—without a central identity provider, and it does not include any provisioning or workflow engine. Therefore, while it could theoretically attest to an employee's identity, it cannot automatically create guest accounts in response to an HR system event, making it unsuitable for this requirement.
- ✗
Access Reviews
Why it's wrong here
Access Reviews in Microsoft Entra ID Governance are used for periodic recertification and attestation of existing access assignments, allowing administrators to confirm that users or guests still need their current permissions. They operate on already-provisioned identities and can remove or retain access based on reviewer decisions, but they have no capability to create new accounts or trigger identity lifecycle provisioning from external sources like an HR system. Because the requirement is automated account creation upon an employee request, Access Reviews address post-provisioning governance, not the provisioning action itself.
- ✗
Microsoft Entra ID Protection
Why it's wrong here
Microsoft Entra ID Protection is a risk-based security service that detects suspicious signals—such as anonymous IP addresses, impossible travel, or leaked credentials—and applies policies like requiring multi-factor authentication or blocking sign-in to mitigate identity risk. It continuously evaluates risk during authentication and can trigger remediation actions, but it lacks any identity provisioning or lifecycle management functions. Creating a guest account is an outbound provisioning task, which ID Protection is not designed to perform; its role begins only after an account exists and attempts to authenticate, so it cannot fulfill the HR-driven provisioning requirement.
- ✓
Lifecycle Workflows
Why this is correct
Lifecycle Workflows in Microsoft Entra ID Governance are specifically designed to automate identity lifecycle tasks, including the creation of guest user accounts. They can be configured with custom execution conditions or triggered programmatically via API, enabling integration with external systems like an HR system. This allows for the automated provisioning of guest accounts precisely when an employee request is submitted through the HR system, satisfying the need for automated, event-driven account creation.
Go deeper
Related to this question
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.