Chapter 2 of 4 · Microsoft SC-900
Capabilities of Microsoft Entra
Entra ID and identity types, authentication and MFA, Conditional Access, roles, governance and ID Protection.
- 4topics
- 23 minfast track
- 2diagrams and exhibits
- 25–30%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Entra ID and Identity TypesSC-900 Microsoft Entra ID: what it does, Free, P1, P2 and Governance editions, user, workload, device and external identities…6 min
- 2Authentication, MFA and Password ProtectionSC-900 Entra authentication: sign in methods, multifactor authentication factors, passwordless options, self service password…5 min
- 3Conditional Access and RolesSC-900 Conditional Access and roles: signals and decisions in policies, the P1 licence, report only mode, Entra roles and Azure…Diagram6 min
- 4Identity Governance, PIM and ID ProtectionSC-900 identity governance: entitlement management, access reviews, lifecycle workflows, Privileged Identity Management and Entra…Diagram6 min
About this chapter
What this chapter covers
This chapter covers Microsoft Entra, Microsoft's family of identity and access products, and in particular Microsoft Entra ID, the cloud identity service behind sign in to Microsoft 365 and Azure.
It carries about a quarter of the exam. The questions ask what each feature does, which licence it needs, and which feature fits a described problem.
How the topics fit together
The pages follow what happens to an identity over its life.
- Entra ID and identity types covers what Entra ID is, the kinds of identity it holds and how it connects to on premises directories.
- Authentication, MFA and password protection covers sign in methods, multifactor authentication and password protection.
- Conditional Access and roles covers access policies based on signals, and role based access control.
- Identity governance, PIM and ID Protection covers entitlement management, access reviews, Privileged Identity Management and risk detection.
Many questions are really about licences. Remember the order: Free has the basics, P1 adds Conditional Access, and P2 adds Identity Protection and Privileged Identity Management.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-900 question bank has 503 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.