SC-900 Practice Question: Describe the capabilities of Microsoft security solutions
Your organization uses Microsoft Entra ID for identity management. You need to implement a solution that allows users to sign in using their social media accounts, such as Google or Facebook. What should you configure?
⚠ Common exam trap
A common mix-up: candidates confuse 'External identities (B2B) with social identity providers' with 'B2C' or think that passwordless methods like Authenticator can be used to bring in external social users, when in fact Authenticator only works for users already in the Entra ID tenant.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
External identities (B2B) with social identity providers
External identities (B2B) in Microsoft Entra ID allow you to configure social identity providers (e.g., Google, Facebook) as federation sources. This enables users to sign in with their existing social accounts by leveraging OAuth 2.0 and OpenID Connect protocols, without needing to create a separate Microsoft account.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Authenticator app for passwordless sign-in
Why it's wrong here
The Microsoft Authenticator app is an authentication method primarily used for multi-factor authentication (MFA) or passwordless sign-in for users whose identities are managed directly by Microsoft Entra ID or federated through it. It serves as a credential provider for an existing Entra ID account, not as a mechanism to integrate or federate with external social identity providers like Google or Facebook to allow their users to sign in.
- ✗
Privileged Identity Management
Why it's wrong here
Privileged Identity Management (PIM) is a feature within Microsoft Entra ID Governance designed to manage, control, and monitor access to important resources and roles within an organization. Its primary function is to provide just-in-time and just-enough access for privileged roles, enhancing security by reducing standing access. PIM does not facilitate the initial integration of external social identity providers or enable users from those providers to sign in to an organization's resources.
- ✓
External identities (B2B) with social identity providers
Why this is correct
Microsoft Entra External ID, specifically its B2B collaboration capabilities, is the correct solution for enabling external users to access an organization's resources using their existing social identity provider accounts. This feature allows organizations to invite guests who can then sign in using their Google, Facebook, or other configured social accounts, federating these external identities with the inviting Microsoft Entra tenant. It streamlines access for partners and customers without requiring them to create new credentials.
- ✗
Self-service password reset
Why it's wrong here
Self-service password reset (SSPR) is a Microsoft Entra ID feature that allows users to reset their own passwords for their Microsoft Entra accounts without administrator assistance. While it enhances user experience and reduces help desk calls, SSPR is exclusively for managing passwords of existing Entra ID identities. It has no functionality related to enabling external users to sign in using social media accounts or integrating external identity providers for authentication.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.