SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID. You need to grant external partners limited access to a SharePoint site for 30 days. After 30 days, access should automatically expire. Which Microsoft Entra feature should you use?
⚠ Common exam trap
A common mix-up: candidates confuse entitlement management (which handles time-bound resource access) with access reviews (which handle periodic recertification) or B2B guest accounts (which provide identity but not automatic expiration).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra entitlement management
Microsoft Entra entitlement management allows you to create access packages that grant external users time-limited access to resources like SharePoint sites. By configuring an access package with a 30-day expiration policy, access is automatically revoked when the policy expires, meeting the requirement exactly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra access reviews
Why it's wrong here
Microsoft Entra access reviews are designed to periodically evaluate who has access to specific resources and whether that access is still appropriate. While reviews can lead to access removal decisions, they are a process of human or automated review and decision-making, not a mechanism for automatically expiring access grants at the time they are initially provisioned. They ensure ongoing compliance rather than time-bound access.
- ✗
Microsoft Entra B2B guest user accounts
Why it's wrong here
Microsoft Entra B2B guest user accounts facilitate secure collaboration with external partners by inviting them into your directory. These accounts are primarily for identity federation and do not inherently include a built-in feature for automatically expiring their access to resources after a set duration. Managing their lifecycle typically requires manual intervention or integration with other identity governance tools.
- ✓
Microsoft Entra entitlement management
Why this is correct
Microsoft Entra entitlement management is the correct solution as it allows organizations to manage identity and access lifecycle for both internal and external users at scale. It enables the creation of 'access packages' that bundle resources and define policies, including explicit expiration dates for assignments. When access is granted via an access package, it is automatically revoked upon the specified expiration, ensuring time-limited access.
- ✗
Microsoft Entra Conditional Access
Why it's wrong here
Microsoft Entra Conditional Access policies enforce specific controls during a user's sign-in attempt based on various conditions such as user location, device compliance, or sign-in risk. These policies determine *if* and *how* a user can access a resource at the point of authentication. However, Conditional Access does not provide functionality to automatically expire an access grant itself; it's a real-time access decision engine, not an access lifecycle management tool.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.