SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Azure Active Directory Domain Services

  Why it's wrong here

  Azure Active Directory Domain Services provides managed domain services, like domain join, group policy, and LDAP, primarily for virtual machines running in Azure that require traditional domain controller functionality. It is designed to support lift-and-shift of on-premises applications to Azure without deploying and managing domain controllers, not for federating external users with social identity providers to access cloud applications.

• ✗

  Microsoft Entra B2C

  Why it's wrong here

  Microsoft Entra B2C is specifically designed for customer-facing applications, enabling organizations to build custom, branded identity experiences for their consumers. It creates a separate directory for these customer identities, allowing them to sign up and sign in using local accounts or various social identity providers. While it supports social identities, its primary use case is managing identities for your customers accessing your applications, not for general external partner collaboration within your primary Entra ID tenant.

• ✗

  Microsoft Entra B2B collaboration

  Why it's wrong here

  Microsoft Entra B2B collaboration allows you to invite guest users from other organizations into your Microsoft Entra ID tenant to access your applications and resources. These guest users typically sign in with their existing Microsoft Entra ID accounts from their home tenants or with a Microsoft account. It does not natively support direct sign-in for external users using arbitrary social identity providers like Google or Facebook unless those providers are already federated by the guest user's home tenant or linked to a Microsoft account.

• ✓

  External Identities (social identity providers)

  Why this is correct

  External Identities is the overarching capability within Microsoft Entra ID that enables secure interaction with external users. Specifically, the social identity providers feature allows external users to sign in to your Microsoft Entra ID-protected applications using their existing credentials from popular social accounts like Google, Facebook, LinkedIn, or Amazon. This eliminates the need for external users to create a new account or have an existing Microsoft Entra ID or Microsoft account, streamlining access for a broad range of external collaborators.

Go deeper

Related to this question