SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID for identity management. You need to ensure that users can sign in using their existing social media accounts, such as Google or Facebook, while maintaining security and compliance with conditional access policies. What should you configure?
⚠ Common exam trap
Test-takers frequently confuse Microsoft Entra B2B collaboration (for business guest users) with Microsoft Entra External ID (which includes social identity providers for consumer-facing apps), leading candidates to incorrectly select option C.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Microsoft Entra External ID with social identity providers.
Microsoft Entra External ID (formerly Azure AD External Identities) allows you to configure social identity providers such as Google and Facebook as external identity sources. This enables users to sign in with their existing social media accounts while still being subject to your tenant's conditional access policies, ensuring security and compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Microsoft Entra Permissions Management.
Why it's wrong here
Microsoft Entra Permissions Management is a Cloud Infrastructure Entitlement Management (CIEM) solution designed to provide granular visibility and control over permissions across multi-cloud environments, including Azure, AWS, and GCP. Its purpose is to manage entitlements for human and non-human identities within cloud infrastructure, not to integrate social identity providers for application sign-in within Microsoft Entra ID.
- ✗
Deploy Microsoft Entra Verified ID.
Why it's wrong here
Microsoft Entra Verified ID is a decentralized identity solution that enables organizations to issue, verify, and present verifiable credentials. It focuses on privacy-preserving identity verification and trust frameworks, allowing users to control their digital identity. This technology is not designed for configuring social sign-in capabilities for applications, which is a function of identity provider integration.
- ✗
Configure Microsoft Entra B2B collaboration for guest users.
Why it's wrong here
Microsoft Entra B2B collaboration is primarily used for inviting external business partners or guest users who typically have organizational accounts (e.g., another Microsoft Entra tenant) or who can create a Microsoft account. While B2B can leverage social identity providers for guest sign-in, its core purpose is business-to-business federation and guest user management, not the direct configuration of social identity providers for consumer-facing applications or general social sign-in experiences.
- ✓
Configure Microsoft Entra External ID with social identity providers.
Why this is correct
Microsoft Entra External ID, formerly Azure AD B2C, is specifically designed to manage customer-facing applications and enable users to sign in using various identity providers, including social accounts like Google, Facebook, and Microsoft accounts. It provides robust capabilities for user flows, custom branding, and integration with applications, allowing organizations to configure social identity providers directly to facilitate seamless consumer access and apply conditional access policies.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.