SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  B2B collaboration

  Why it's wrong here

  Microsoft Entra B2B collaboration is designed for inviting external users, such as partners or customers, to access an organization's resources using their own identities. While it provides a form of single sign-on for these guest users within the inviting tenant, its primary function is external user management, not establishing a single sign-on experience for the company's own internal employees across their suite of applications.

• ✗

  Identity Protection

  Why it's wrong here

  Microsoft Entra ID Protection is a security feature focused on detecting, investigating, and remediating identity-based risks within an organization. It analyzes sign-in attempts and user behavior to identify potential compromises, such as leaked credentials or unusual sign-in locations, and can enforce automated responses like requiring multi-factor authentication. Its role is entirely about risk detection and mitigation, not enabling or configuring single sign-on for applications.

• ✓

  App registration and SSO configuration

  Why this is correct

  App registration in Microsoft Entra ID is the essential process for integrating an application to use Entra ID as its identity provider. By registering an application, administrators define how users authenticate, grant necessary permissions, and configure single sign-on (SSO) protocols like OpenID Connect or SAML. This direct integration enables users to access the registered application seamlessly using their existing Entra ID credentials without re-entering them, thereby providing a unified SSO experience.

• ✗

  Conditional Access

  Why it's wrong here

  Microsoft Entra Conditional Access policies are used to enforce specific access requirements *after* a user has successfully authenticated. These policies evaluate various signals, such as user location, device compliance, or sign-in risk, to determine if additional controls like multi-factor authentication or device restrictions are needed before granting access to an application. While crucial for security, Conditional Access does not establish or configure the single sign-on mechanism itself; it merely governs the conditions under which that SSO access is permitted.

Go deeper

Related to this question