SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization wants to use Microsoft Entra Verified ID to issue digital credentials to employees. Which Microsoft Entra service provides the ability to issue and verify verifiable credentials?
⚠ Common exam trap
Candidates often confuse 'Verified ID' with other identity governance or security services like Entitlement Management or Identity Protection, but only Verified ID directly handles the issuance and verification of verifiable credentials using decentralized identity standards.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Verified ID
Microsoft Entra Verified ID is the specific service designed to issue and verify verifiable credentials based on decentralized identity standards such as W3C Verifiable Credentials and Decentralized Identifiers (DIDs). It enables organizations to create, issue, and cryptographically verify digital credentials without relying on a central authority, aligning with the scenario described.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Entitlement Management
Why it's wrong here
Microsoft Entra Entitlement Management is a governance feature designed to manage the lifecycle of access to groups, applications, and SharePoint sites for both internal and external users. It automates access requests, approvals, reviews, and expiration through self-service access packages. This service focuses on managing *who has access to what resources* within an organization, rather than issuing or verifying decentralized identity credentials.
- ✓
Microsoft Entra Verified ID
Why this is correct
Microsoft Entra Verified ID is the dedicated service for implementing decentralized identity and managing verifiable credentials (VCs). It enables organizations to issue digital attestations, such as proof of employment or qualifications, to individuals, who then hold these VCs in a digital wallet. This service facilitates a trust framework where issuers can attest to facts about a user, and verifiers can cryptographically confirm the authenticity of these credentials without relying on a central authority, directly addressing the need for verifiable identity proofs.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is a security tool focused on detecting and remediating identity-based risks within an organization. It analyzes sign-in and user behavior data to identify anomalous activities, such as impossible travel or leaked credentials, and can automatically enforce conditional access policies based on risk levels. Its primary function is to safeguard user identities from compromise by detecting threats, not to issue or manage verifiable identity documents.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is a service that manages, controls, and monitors access to important resources in Microsoft Entra ID, Azure, and other Microsoft Online Services. It provides just-in-time (JIT) access to privileged roles, requiring users to activate roles for a limited time and often necessitating approval workflows. PIM's core purpose is to minimize the attack surface by reducing the number of permanent administrators and enforcing the principle of least privilege, which is distinct from issuing verifiable credentials.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Organization
An Organization is a top-level container in Google Cloud that represents your company or entities and serves as the root node for all your cloud resources, policies, and access control.
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.