SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization is planning to implement Microsoft Entra ID for identity and access management. Which TWO capabilities are provided by Microsoft Entra ID?
⚠ Common exam trap
A common mix-up: candidates confuse Microsoft Entra ID (workforce identity) with Microsoft Entra External ID (customer identity) or assume that log analysis and MDM are part of Entra ID, when they belong to separate Azure services like Sentinel and Intune.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Identity governance (e.g., access reviews)
Microsoft Entra ID provides identity governance capabilities such as access reviews, which allow administrators to automate the process of reviewing and certifying user access to applications and groups. This ensures compliance and security by regularly validating that users have appropriate access rights. Single sign-on (SSO) is a core feature of Entra ID, enabling users to authenticate once and access multiple cloud applications without re-entering credentials, leveraging protocols like OAuth 2.0 and SAML 2.0.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
External identity management for customer-facing apps
Why it's wrong here
Microsoft Entra ID primarily manages identities for an organization's workforce and business partners through B2B collaboration. For direct customer-facing applications requiring self-service sign-up and sign-in for consumers, Microsoft Entra External ID (formerly Azure AD B2C) is the dedicated solution, offering distinct features for high-scale external identity management and branding customization.
- ✗
Security event log analysis
Why it's wrong here
While Microsoft Entra ID generates critical audit logs, sign-in logs, and provisioning logs detailing identity-related activities, its core function is not comprehensive security event log analysis. Dedicated Security Information and Event Management (SIEM) solutions like Microsoft Sentinel or log analytics platforms such as Azure Monitor are designed to ingest, correlate, and analyze these logs alongside data from other sources for advanced threat detection and incident response.
- ✓
Identity governance (e.g., access reviews)
Why this is correct
Microsoft Entra ID provides robust identity governance capabilities, which are crucial for managing and auditing the identity lifecycle and access to resources. This includes features like access reviews, enabling periodic verification of user access to groups and applications, and entitlement management, which automates access request workflows and lifecycle for internal and external users. These tools ensure that users have only the necessary access for their roles, enhancing security and compliance.
- ✗
Mobile device management (MDM)
Why it's wrong here
Mobile device management (MDM) is a core capability provided by Microsoft Intune, not Microsoft Entra ID directly. While Entra ID handles user and device registration, and enables conditional access policies based on device compliance, Intune is responsible for the actual configuration, security policy enforcement, application deployment, and overall lifecycle management of mobile devices. Entra ID acts as the identity provider, but Intune manages the device itself.
- ✓
Single sign-on (SSO) for cloud applications
Why this is correct
Microsoft Entra ID is a foundational component for enabling Single Sign-On (SSO) across thousands of pre-integrated Software as a Service (SaaS) applications and custom line-of-business applications. It acts as a centralized identity provider, allowing users to authenticate once with their organizational credentials and gain seamless access to multiple cloud services without re-entering their credentials. This significantly improves user experience and reduces password-related help desk calls by streamlining access management.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.