SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Which TWO of the following are types of identity in Microsoft Entra ID? (Select two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Synchronized identity
Options A and B are correct. Microsoft Entra ID supports two primary types of identity: synchronized identity (A) and cloud-only identity (B). A synchronized identity is created in an on-premises directory and synchronized to Entra ID. A cloud-only identity is created and managed entirely in Entra ID. Option C, Guest identity, is a type of external identity used for B2B collaboration, but it is not a primary identity type. Option D, Managed identity, is a service principal used for Azure resources to authenticate, not a user identity type. Option E, Hybrid identity, is a term for using both on-premises and cloud identities but is not a distinct identity type.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Synchronized identity
Why this is correct
User account synchronized from on-premises Active Directory.
- ✓
Cloud-only identity
Why this is correct
User account created directly in Microsoft Entra ID.
- ✗
Guest identity
Why it's wrong here
Guest identity is a type of external identity, but not a primary category.
- ✗
Managed identity
Why it's wrong here
Managed identity is for Azure resources, not user identities.
- ✗
Hybrid identity
Why it's wrong here
Hybrid identity is a scenario, not a type.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
External identity
External identity refers to a digital identity that originates from a source outside your organization, such as a social media account or another company's directory, and is used to grant access to your applications or resources.
Key term
Service principal
A service principal is an identity created for an application or automated tool to access cloud resources securely without using a human user account.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.