SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID for identity management. You need to ensure that users can sign in using their existing Facebook accounts without creating a separate Microsoft Entra ID account. What should you configure?
⚠ Common exam trap
Many candidates confuse Microsoft Entra External ID (B2C) with Microsoft Entra ID (Azure AD) itself, assuming social identity providers can be added directly to a standard tenant, but only an External ID tenant supports social identity federation without requiring a separate Microsoft Entra ID account.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a Microsoft Entra External ID tenant and add Facebook as an identity provider
Microsoft Entra External ID (formerly Azure AD B2C) is designed to allow external identities, such as social identity providers like Facebook, to authenticate users without requiring a separate Microsoft Entra ID account. By creating an External ID tenant and adding Facebook as an identity provider, you enable users to sign in using their existing Facebook credentials via OAuth 2.0 or OpenID Connect protocols.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure Microsoft Entra ID Protection
Why it's wrong here
Microsoft Entra ID Protection is a security feature focused on detecting, investigating, and remediating identity-based risks, such as compromised credentials or suspicious sign-in activities within a Microsoft Entra tenant. While vital for enhancing the security posture of user accounts, it does not provide the functionality to integrate external social identity providers like Facebook for user authentication in applications. Its purpose is risk management, not identity federation for consumer applications.
- ✓
Create a Microsoft Entra External ID tenant and add Facebook as an identity provider
Why this is correct
Microsoft Entra External ID (formerly Azure AD B2C) is a customer identity and access management (CIAM) solution specifically designed for managing consumer identities for customer-facing applications. By creating an External ID tenant, organizations can integrate various social identity providers, including Facebook, Google, and Microsoft accounts, allowing users to sign up and sign in using their existing social credentials. This capability directly addresses the requirement for enabling social login functionality for external users.
- ✗
Enable Microsoft Entra ID Domain Services
Why it's wrong here
Microsoft Entra ID Domain Services provides managed domain services, such as domain join, group policy, LDAP, and Kerberos/NTLM authentication, for cloud-based virtual machines and applications. It extends traditional Active Directory capabilities to the cloud for legacy workloads that require domain services. This service is entirely unrelated to enabling social identity provider integration for customer authentication in modern, consumer-facing applications.
- ✗
Configure Microsoft Entra ID Governance
Why it's wrong here
Microsoft Entra ID Governance focuses on managing and governing user access to resources, encompassing features like access reviews, entitlement management, and privileged identity management (PIM). Its primary role is to ensure that the right people have the right access to the right resources at the right time within an organization. This service does not facilitate the integration of external social identity providers for user authentication in applications.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Access token
A digital key that a computer system gives you to prove your identity and grant you permission to access specific resources or perform actions.
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.