SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company wants to allow external business partners to access a specific SharePoint Online site using their own corporate identities (such as Google or Facebook accounts). The company also needs to enforce multi-factor authentication (MFA) for these external users. Which Microsoft Entra capability should the administrator configure?
⚠ Common exam trap
It's easy for candidates to confuse Microsoft Entra Connect (which handles hybrid identity sync) with External Identities (which handles guest user access), or they assume Identity Protection or PIM can be used to grant external access, when they are security monitoring and privilege management tools respectively.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra External Identities (B2B collaboration)
Microsoft Entra External Identities (B2B collaboration) allows you to invite external users (including those with social identities like Google or Facebook) to access your organization's resources using their own identities. It supports conditional access policies, including the enforcement of multi-factor authentication (MFA) for guest users, which meets both requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Connect
Why it's wrong here
Microsoft Entra Connect is a crucial tool for hybrid identity scenarios, synchronizing user accounts, groups, and contacts from an on-premises Active Directory Domain Services (AD DS) environment to Microsoft Entra ID. Its primary function is to ensure a consistent identity experience for *internal* users across cloud and on-premises resources. It does not, however, provide mechanisms for inviting external business partners or federating with their external identity providers for collaboration purposes.
- ✓
Microsoft Entra External Identities (B2B collaboration)
Why this is correct
B2B collaboration allows you to invite external users to your tenant using their own identities (e.g., Google, Facebook, or any Microsoft Entra ID tenant). Combined with Conditional Access, you can enforce MFA for those guest users.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is a security feature focused on detecting and remediating identity-based risks within your tenant. It analyzes sign-in and user behavior to identify anomalies such as impossible travel, leaked credentials, or unfamiliar sign-in properties, triggering automated responses like MFA enforcement or password resets. While vital for securing existing identities, it does not facilitate the initial invitation or authentication of external users from their own identity providers.
- ✗
Microsoft Entra Privileged Identity Management (PIM)
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to important resources within Microsoft Entra ID, Azure, and other Microsoft Online Services. It enables just-in-time (JIT) and just-enough-administration (JEA) access for *privileged roles*, requiring users to activate their elevated permissions for a limited time. PIM's purpose is to reduce the risk associated with standing administrative access, not to onboard or authenticate external users for general collaboration.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
MFA
Multi-Factor Authentication (MFA) is a security method that requires a user to verify their identity using two or more different types of evidence, such as a password plus a code from a phone, before they can access an account or system.
Key term
Authentication
Authentication is the process of verifying that someone or something is who or what it claims to be before granting access to a system or resource.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.