SC-900 Practice Question: Describe the concepts of security, compliance, and identity

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Privileged Identity Management

  Why it's wrong here

  Privileged Identity Management (PIM) is a service within Microsoft Entra ID that enables organizations to manage, control, and monitor access to important resources. It provides just-in-time (JIT) and just-enough-access (JEA) for privileged roles, reducing the window of opportunity for malicious actors. PIM focuses on internal administrative roles and resource access within the tenant, not on federating with external social identity providers for customer authentication.

• ✗

  Identity Protection

  Why it's wrong here

  Microsoft Entra ID Protection is a security module that automates the detection and remediation of identity-based risks. It leverages machine learning to identify suspicious activities, such as impossible travel, leaked credentials, or unfamiliar sign-in properties, and can trigger automated responses like multi-factor authentication prompts or password resets. This service is focused on securing existing user identities from compromise, rather than onboarding new external identities via social providers.

• ✓

  External ID

  Why this is correct

  Microsoft Entra External ID is the correct solution for managing external users, including customers, partners, and other guests, who need to access an organization's applications. It provides the capability to configure various identity providers, such as social accounts (e.g., Google, Facebook), enterprise accounts, or local accounts, allowing external users to sign in using their preferred credentials. This service is specifically designed to facilitate secure and seamless access for customer-facing applications by leveraging external identity sources.

• ✗

  Conditional Access

  Why it's wrong here

  Conditional Access is a powerful policy engine within Microsoft Entra ID that enforces access controls based on specific conditions evaluated during a sign-in attempt. It allows administrators to define policies that require multi-factor authentication, compliant devices, or specific locations before granting access to applications or data. While crucial for security, Conditional Access focuses on how users access resources under certain conditions, not on integrating or enabling external social identity providers for user authentication.

Go deeper

Related to this question