SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Support for social identity providers like Google

  Why this is correct

  Microsoft Entra External ID, specifically through its Azure AD B2C capabilities, enables organizations to allow customers and consumers to sign up and sign in to applications using their existing social accounts, such as Google, Facebook, or Microsoft accounts. This feature simplifies the user experience by leveraging familiar identity providers, reducing the need for users to create and manage new credentials. It integrates these external identities seamlessly into the application's authentication flow, providing a flexible and user-friendly access method.

• ✗

  Mobile device management

  Why it's wrong here

  Mobile device management (MDM) is a core capability of Microsoft Intune, a separate service within Microsoft Endpoint Manager, not Microsoft Entra External ID. Intune focuses on securing and managing mobile devices, such as smartphones and tablets, by enforcing policies, deploying applications, and ensuring device compliance. While Microsoft Entra ID provides the identity foundation for Intune, External ID itself does not directly offer device management functionalities for corporate or personal devices.

• ✓

  Collaboration with external users from partner organizations

  Why this is correct

  Microsoft Entra External ID facilitates secure collaboration with external users from partner organizations through its Business-to-Business (B2B) collaboration features. This capability allows organizations to invite guest users from other Microsoft Entra tenants or any email address to access internal applications and resources, while maintaining control over their access permissions. It streamlines the process of sharing resources with external partners without requiring them to create new accounts within the host organization's directory.

• ✗

  On-premises server monitoring

  Why it's wrong here

  On-premises server monitoring is primarily handled by services like Azure Monitor and Log Analytics, which collect, analyze, and act on telemetry data from various sources, including on-premises servers. Microsoft Entra External ID is an identity and access management solution focused on external user identities, not infrastructure monitoring or operational health of servers. Its scope is entirely distinct from the tools designed for performance, security, and availability monitoring of physical or virtual server infrastructure.

• ✗

  Identity risk detection

  Why it's wrong here

  Identity risk detection is a specialized capability provided by Microsoft Entra ID Protection, which is an advanced feature set within Microsoft Entra ID, not directly by External ID. Microsoft Entra ID Protection continuously monitors for suspicious activities, such as anomalous sign-ins, leaked credentials, or impossible travel scenarios, to identify and remediate identity-based risks. While External ID manages external identities, the sophisticated risk analysis and automated remediation are handled by Identity Protection.

Go deeper

Related to this question