SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Microsoft Entra External ID

  Why this is correct

  Microsoft Entra External ID is the comprehensive solution for managing all external identities, including customers, partners, and citizens, across various applications. It specifically supports integrating social identity providers like Google, Facebook, and Microsoft accounts, as well as enterprise identity providers, allowing users to sign in to your applications using their existing credentials. This capability is crucial for consumer-facing applications that require flexible and convenient sign-up and sign-in experiences without creating new accounts.

• ✗

  Microsoft Entra B2B collaboration

  Why it's wrong here

  Microsoft Entra B2B collaboration is primarily designed for inviting external business partners to access your organization's resources, such as applications and documents, using their existing corporate or Microsoft accounts. While it facilitates external access, its core function is to enable secure collaboration with other organizations, not to integrate social identity providers like Facebook or Google for consumer-facing applications. It focuses on partner identities, not general public social identities.

• ✗

  Conditional Access policies

  Why it's wrong here

  Conditional Access policies in Microsoft Entra ID are security tools used to enforce specific access requirements after a user has attempted to authenticate. These policies evaluate various conditions, such as user location, device compliance, or sign-in risk, to determine whether access should be granted, blocked, or require additional authentication steps like multi-factor authentication. They do not, however, provide the mechanism for integrating or managing external identity providers like social accounts; their function is solely to control how authenticated users access resources.

• ✗

  Privileged Identity Management

  Why it's wrong here

  Microsoft Entra Privileged Identity Management (PIM) is a service focused on managing, controlling, and monitoring access to important resources within an organization by providing just-in-time and time-bound access to privileged roles. It helps mitigate the risks associated with excessive, unnecessary, or misused access permissions by requiring activation for elevated roles. PIM is specifically designed for internal administrative roles and does not facilitate the integration of external social identity providers for user authentication in applications.

Go deeper

Related to this question