SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Which TWO of the following are Microsoft Entra ID editions that include Identity Protection? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID P2
Identity Protection is available in Azure AD Premium P2 and Microsoft Entra ID Governance (which includes P2 features). Free and P1 do not include Identity Protection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra External ID
Why it's wrong here
Microsoft Entra External ID is a distinct offering primarily designed for managing external identities, such as business-to-business (B2B) collaboration users and business-to-consumer (B2C) customers. While it provides robust identity management for these external scenarios, it does not inherently include advanced internal identity protection features like risk-based sign-in detection or automated remediation for an organization's internal workforce. Identity Protection is a premium feature focused on an organization's own user accounts.
- ✗
Microsoft Entra ID Free
Why it's wrong here
The Microsoft Entra ID Free edition provides fundamental identity and access management capabilities, including basic user and group management, single sign-on (SSO) for cloud applications, and multi-factor authentication (MFA) enforcement. However, this entry-level tier lacks advanced security features such as Microsoft Entra Identity Protection, which offers sophisticated risk detection and automated responses to identity-based threats. Identity Protection requires a higher-tier license due to its intelligent analytics and remediation capabilities.
- ✗
Microsoft Entra ID P1
Why it's wrong here
Microsoft Entra ID P1 includes essential enterprise-grade identity features like Conditional Access, hybrid identity capabilities, and advanced group management. While Conditional Access allows organizations to enforce policies based on various conditions, it does not incorporate the real-time risk detection and automated remediation provided by Microsoft Entra Identity Protection. Identity Protection, with its machine learning-driven risk analysis, is exclusively available in the P2 and higher editions.
- ✓
Microsoft Entra ID P2
Why this is correct
Microsoft Entra ID P2 is the premium edition that fully integrates Microsoft Entra Identity Protection, providing advanced capabilities for detecting, investigating, and remediating identity-based risks. This includes risk-based Conditional Access policies, automated remediation actions like requiring MFA or password resets, and comprehensive reporting on risky users and sign-ins. P2 also encompasses other advanced features such as Privileged Identity Management (PIM) and entitlement management.
- ✓
Microsoft Entra ID Governance
Why this is correct
Microsoft Entra ID Governance is a comprehensive identity governance solution that builds upon the capabilities of Microsoft Entra ID P2. As such, it inherently includes all features available in Entra ID P2, including the robust Microsoft Entra Identity Protection. This means organizations leveraging ID Governance benefit from advanced risk detection, automated remediation, and risk-based access policies, alongside identity lifecycle management, access reviews, and entitlement management for a holistic security and compliance posture.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Identity protection
Identity protection is the set of policies, technologies, and practices used to secure digital identities and prevent unauthorized access to systems and data.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.