SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company wants to allow external customers to sign in to their custom web application using their own social identities, such as Google or Facebook. They also need to support self-service registration and custom branding for the sign-in pages. Which Microsoft Entra External ID solution should they use?
⚠ Common exam trap
A common mix-up: candidates confuse B2B collaboration (for external partners) with B2C (for external customers), mistakenly thinking B2B can handle social identities and self-service registration, but B2B lacks those capabilities and is designed for federated business accounts.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID B2C
Microsoft Entra ID B2C (Business-to-Consumer) is the correct solution because it is specifically designed for external customer identity and access management, supporting social identity providers (Google, Facebook, etc.) via OAuth 2.0 and OpenID Connect, self-service registration, and full customization of sign-in pages (branding, HTML, CSS). This aligns exactly with the requirements for a customer-facing web application with social sign-in and custom branding.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID B2B collaboration
Why it's wrong here
Microsoft Entra ID B2B collaboration is designed for inviting external users, typically partners or vendors, to access your organization's internal applications and resources. These external users sign in with their existing work, school, or Microsoft accounts, not social identities for a custom web application. It focuses on secure collaboration with specific external entities rather than broad customer registration for a public-facing service.
- ✓
Microsoft Entra ID B2C
Why this is correct
Microsoft Entra ID B2C is specifically engineered for customer identity and access management (CIAM), enabling external customers to sign up and sign in to your custom web and mobile applications. It supports a wide array of identity providers, including social accounts like Google and Facebook, as well as local accounts. B2C provides a highly customizable, branded experience for customer registration, sign-in, and profile management, making it ideal for this scenario.
- ✗
Microsoft Entra ID guest accounts
Why it's wrong here
Microsoft Entra ID guest accounts are a component of B2B collaboration, representing external users within your tenant to grant them access to internal resources such as SharePoint sites or Teams. While guests can use various identity types, including Microsoft accounts, their primary purpose is for invited individuals to collaborate on organizational resources. They are not intended for large-scale, self-service customer registration with diverse social identities for a custom web application.
- ✗
Managed identities
Why it's wrong here
Managed identities provide an identity for Azure services to authenticate to other Azure services securely, eliminating the need for developers to manage credentials. These identities are used by Azure resources themselves, such as virtual machines or Azure Functions, to access services like Azure Key Vault or Azure Storage. This feature is entirely unrelated to external human users signing into a custom web application.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Identity and access management
Identity and access management (IAM) is the security discipline that ensures the right individuals access the right resources at the right times for the right reasons.
Key term
Access token
A digital key that a computer system gives you to prove your identity and grant you permission to access specific resources or perform actions.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.