Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A financial institution needs to implement a solution that allows its employees to prove their identity in a secure, privacy-preserving, and verifiable manner across different organizations and services, without relying on a central authority to store all their personal data. They want to issue digital credentials that users control. Which Microsoft Entra capability supports this requirement?
- AMicrosoft Entra Verified ID
- BMicrosoft Entra B2C
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Verified ID
Microsoft Entra Verified ID allows organizations to issue, hold, and verify digital credentials based on decentralized identity standards. This gives individuals control over their identity and enables secure, privacy-preserving verification without a central authority storing all personal data, directly matching the scenario.
Why the other options are wrong
- B. Microsoft Entra B2C manages customer identities for consumer-facing applications, not decentralized, verifiable credentials for employees.
- C. Microsoft Entra Domain Services provides managed domain services for legacy applications, unrelated to digital identity verification.
- D. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications, not decentralized identity solutions.
Microsoft Entra Verified ID
A decentralized identity solution that enables organizations to issue, hold, and verify digital credentials based on open standards, giving individuals control over their identity information.
- Decentralized identity (DID) solution
- Users control their digital credentials
- Secure, privacy-preserving identity verification
Memory trick: Verified ID: 'You own your digital passport, not the government'.