SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company with Microsoft 365 wants employees to access corporate applications from their personal Android and iOS devices. The security team requires that these devices be enrolled in mobile device management (MDM) for compliance policies, and that company data can be selectively wiped from the device without affecting personal data. Which Microsoft Entra device identity type should they configure for these personal devices?
⚠ Common exam trap
It's easy for candidates to confuse 'Microsoft Entra joined' with 'Microsoft Entra registered' because both involve device identity, but Entra joined implies full organizational control and no selective wipe capability, making it unsuitable for BYOD scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra registered
Microsoft Entra registered is the correct device identity type for personal (BYOD) devices because it supports enrollment in MDM for compliance policies and enables selective wipe of company data without affecting personal data. This identity type registers the device with Entra ID without requiring organizational ownership, allowing users to access corporate applications while maintaining personal data separation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra registered
Why this is correct
Microsoft Entra registered devices are typically personal devices (Bring Your Own Device - BYOD) that users want to access corporate resources from. This identity type allows devices to be enrolled in Mobile Device Management (MDM) solutions like Microsoft Intune, enabling conditional access policies and selective wipe capabilities to protect organizational data without fully controlling the user's personal device.
- ✗
Microsoft Entra joined
Why it's wrong here
Microsoft Entra joined devices are exclusively organization-owned and fully managed by the organization. These devices are directly joined to Microsoft Entra ID, providing single sign-on (SSO) to cloud resources and enabling comprehensive management through tools like Microsoft Intune. This full management capability, including mandatory security configurations and software deployments, makes them unsuitable for personal devices where users expect privacy and control over their data.
- ✗
Microsoft Entra hybrid joined
Why it's wrong here
Microsoft Entra hybrid joined devices are organization-owned devices that are joined to an on-premises Active Directory Domain Services (AD DS) and simultaneously registered with Microsoft Entra ID. This configuration is common for organizations with existing on-premises infrastructure, allowing them to leverage both on-premises and cloud resources with unified identity. It provides a bridge for managing traditional domain-joined devices in a cloud-centric environment, but is not designed for personal BYOD scenarios.
- ✗
Microsoft Entra managed
Why it's wrong here
'Microsoft Entra managed' is not a recognized or valid device identity type within the Microsoft Entra ID ecosystem. The established device identity states are Microsoft Entra registered, Microsoft Entra joined, and Microsoft Entra hybrid joined, each serving distinct use cases for device management and access control. This option represents a non-existent category, making it an incorrect choice for describing how devices are identified in Entra ID.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Mobile device management
Mobile device management (MDM) is a security solution that allows IT administrators to enroll, configure, monitor, and enforce policies on smartphones, tablets, and other mobile devices used in an organization.
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.