SC-900 Describe the capabilities of Microsoft Entra Practice Question
You need to implement a solution that allows users to access cloud applications without entering a password, using Windows Hello for Business. Which Microsoft Entra feature integrates with Windows Hello for Business?
⚠ Common exam trap
Candidates often confuse the authentication method (Windows Hello for Business) with the underlying identity provider (Microsoft Entra ID), mistakenly selecting FIDO2 security keys or Microsoft Authenticator as the integrating feature instead of recognizing that Microsoft Entra ID is the core directory service that stores the credential and validates the authentication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID
Windows Hello for Business integrates with Microsoft Entra ID (formerly Azure AD) to enable passwordless authentication. When a user enrolls a device with Windows Hello for Business, the biometric or PIN credential is bound to the device's TPM and linked to the user's identity in Microsoft Entra ID, allowing seamless access to cloud applications without a password.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Conditional Access
Why it's wrong here
Conditional Access is a policy evaluation engine within Microsoft Entra ID that enforces specific requirements for accessing resources. While it can be configured to mandate the use of Windows Hello for Business as an authentication strength, Conditional Access itself does not provide the underlying identity service or the mechanism for users to provision and manage their Windows Hello for Business credentials. It acts as a control plane, not the identity provider or the credential management system.
- ✓
Microsoft Entra ID
Why this is correct
Microsoft Entra ID is the cloud-based identity and access management service that directly supports and integrates with Windows Hello for Business. It serves as the identity provider where users register their Windows Hello for Business credentials, such as biometrics or PINs, which are securely tied to their Entra ID account. This deep integration allows users to seamlessly sign in to Windows devices and access Entra ID-protected resources using their robust Windows Hello for Business credentials.
- ✗
FIDO2 security keys
Why it's wrong here
FIDO2 security keys represent a distinct, hardware-based authentication method designed to provide strong, phishing-resistant multi-factor authentication. While these keys are supported by Microsoft Entra ID and offer excellent security, they are physical external devices, typically USB or NFC, and are fundamentally separate from Windows Hello for Business. Windows Hello for Business leverages built-in device biometrics (like fingerprint or facial recognition) or a PIN, which are integrated directly into the operating system and device hardware.
- ✗
Microsoft Authenticator
Why it's wrong here
The Microsoft Authenticator app is a mobile application primarily utilized for multi-factor authentication (MFA), passwordless phone sign-in, and generating time-based one-time passwords (TOTP). It operates on a smartphone, providing an additional or alternative authentication factor separate from the user's primary device sign-in. In contrast, Windows Hello for Business is an integrated feature of the Windows operating system that uses biometrics or a PIN directly on the device for primary sign-in and access to resources, making it distinct from a mobile app-based authenticator.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.