SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Microsoft Entra External ID

  Why this is correct

  Microsoft Entra External ID is the comprehensive solution for managing external identities and providing them secure access to your organization's applications and resources. It enables business-to-business (B2B) collaboration, allowing partners to use their existing corporate or social identities (e.g., Microsoft accounts, Google, federated SAML/WS-Fed providers) to sign in. This feature integrates external users directly into your Microsoft Entra tenant, facilitating seamless collaboration while maintaining administrative control over their access permissions.

• ✗

  Microsoft Entra Privileged Identity Management

  Why it's wrong here

  Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to important resources within an organization's own Microsoft Entra tenant. Its primary function is to provide just-in-time and just-enough access for privileged roles, reducing the risk associated with standing administrative permissions. PIM focuses exclusively on internal administrative roles and does not facilitate the initial provisioning or management of external user identities for general partner access.

• ✗

  Microsoft Entra Identity Protection

  Why it's wrong here

  Microsoft Entra Identity Protection is a security tool focused on detecting and remediating identity-based risks across an organization's users, including both employees and guests. It leverages machine learning to identify suspicious sign-in behaviors and compromised credentials, applying policies like requiring multi-factor authentication or blocking access. While it protects *all* identities, its core purpose is risk detection and response, not the initial establishment of external collaboration capabilities for partners.

• ✗

  Microsoft Entra Conditional Access

  Why it's wrong here

  Microsoft Entra Conditional Access allows organizations to enforce policies that evaluate specific conditions before granting access to resources. These policies can require multi-factor authentication, restrict access based on location, or mandate compliant devices for *existing* identities attempting to sign in. However, Conditional Access does not create or manage the external user accounts themselves; it only applies access controls to identities that have already been provisioned within the directory, including external users managed by External ID.