SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company runs a consumer-facing e-commerce website and wants to allow customers to sign in using their existing social media accounts such as Google, Facebook, or LinkedIn. Which Microsoft Entra ID solution should they implement?
⚠ Common exam trap
A common mix-up: candidates confuse B2B with B2C, assuming 'External ID' covers all external users, but B2B strictly targets organizational partners (e.g., using their work accounts) while B2C is for consumer social logins.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra External ID (B2C)
Microsoft Entra External ID (B2C) is the correct solution because it is specifically designed for consumer-facing applications, allowing customers to sign in using social identity providers (IdPs) like Google, Facebook, and LinkedIn via OAuth 2.0 and OpenID Connect protocols. It provides a customizable authentication experience for external users, distinct from B2B which targets organizational collaboration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra External ID (B2C)
Why this is correct
Microsoft Entra External ID (B2C) is specifically engineered to manage customer identities for consumer-facing applications and services, such as an e-commerce website. It enables users to sign up and sign in using their preferred social identity providers, such as Google, Facebook, or Apple, or by creating a local account. This service provides highly customizable user experiences for registration, sign-in, and profile management, scaling to millions of users while integrating seamlessly with your platform.
- ✗
Microsoft Entra External ID (B2B)
Why it's wrong here
Microsoft Entra External ID (B2B) collaboration is designed for inviting external users from other organizations to access internal applications and resources within your Microsoft Entra tenant. These guest users typically sign in with their existing organizational identities, such as another Microsoft Entra account, or a Microsoft account, rather than social identities for consumer applications. It facilitates secure collaboration with business partners but is not intended for managing a large volume of individual consumer identities for public-facing services.
When this WOULD be correct
A company needs to enable external partners (e.g., vendors, suppliers) to access internal applications using their own corporate credentials or social accounts. The question would specify 'partner access' rather than 'customer sign-in'.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is a security feature focused on detecting and mitigating identity-based risks within an existing Microsoft Entra tenant. It analyzes sign-in and user behavior to identify anomalies like impossible travel, sign-ins from infected devices, or leaked credentials, then automates responses such as requiring multi-factor authentication or password resets. This service enhances the security posture of existing user accounts but does not facilitate the federation of new external consumer identities for an application.
When this WOULD be correct
A question asking which Microsoft Entra solution helps detect and block compromised accounts or risky sign-ins for an organization's internal users would make Identity Protection the correct answer.
- ✗
Microsoft Entra Conditional Access
Why it's wrong here
Microsoft Entra Conditional Access is a policy engine that enforces access controls based on various signals and conditions after a user has authenticated. It allows administrators to define granular policies that determine whether a user can access a resource based on factors like user group membership, location, device compliance, or sign-in risk. While crucial for securing access, it does not provide the underlying identity management or federation capabilities required for onboarding external consumers to an e-commerce platform.
When this WOULD be correct
A company wants to enforce multi-factor authentication for all users accessing a sensitive internal application based on sign-in risk level. Conditional Access would be the correct solution to apply such policies.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The SC-900 exam frequently reuses these exact scenarios with slightly different constraints.
✓Microsoft Entra External ID (B2C)Correct answer▾
Why this is correct
Microsoft Entra External ID (B2C) is specifically engineered to manage customer identities for consumer-facing applications and services, such as an e-commerce website. It enables users to sign up and sign in using their preferred social identity providers, such as Google, Facebook, or Apple, or by creating a local account. This service provides highly customizable user experiences for registration, sign-in, and profile management, scaling to millions of users while integrating seamlessly with your platform.
✗Microsoft Entra External ID (B2B)Wrong answer — click to see why▾
Why this is wrong here
B2B is designed for business-to-business collaboration, allowing external partners to access internal resources, not for consumer-facing identity management with social identity providers.
★ When this WOULD be the correct answer
A company needs to enable external partners (e.g., vendors, suppliers) to access internal applications using their own corporate credentials or social accounts. The question would specify 'partner access' rather than 'customer sign-in'.
Why candidates choose this
Candidates may confuse 'External ID' as a single solution and overlook the B2C vs B2B distinction, or assume social login is only for B2B scenarios.
✗Microsoft Entra Identity ProtectionWrong answer — click to see why▾
Why this is wrong here
Microsoft Entra Identity Protection is a security tool for detecting and responding to identity risks, not for enabling social identity federation for consumer sign-in.
★ When this WOULD be the correct answer
A question asking which Microsoft Entra solution helps detect and block compromised accounts or risky sign-ins for an organization's internal users would make Identity Protection the correct answer.
Why candidates choose this
Candidates may confuse identity protection with authentication solutions, thinking it manages external identities, or they may overestimate its role in sign-in processes.
✗Microsoft Entra Conditional AccessWrong answer — click to see why▾
Why this is wrong here
Microsoft Entra Conditional Access is a policy engine for enforcing access controls based on signals like user location or device state, not a solution for enabling social identity federation for external customers.
★ When this WOULD be the correct answer
A company wants to enforce multi-factor authentication for all users accessing a sensitive internal application based on sign-in risk level. Conditional Access would be the correct solution to apply such policies.
Why candidates choose this
Candidates may confuse Conditional Access as a general identity solution, thinking it can handle external identity scenarios, or they may overestimate its scope beyond access control policies.
Analysis generated from the official SC-900blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Collaboration
Collaboration in Microsoft 365 refers to the integrated tools and services that enable people to work together in real time, share information, and coordinate tasks from anywhere.
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.