Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A financial institution needs to implement a solution that allows its employees to prove their identity using digital credentials issued by trusted organizations, reducing reliance on traditional usernames and passwords for certain high-assurance scenarios. This system should enable users to securely present verifiable claims about themselves. Which Microsoft Entra capability aligns with this requirement?
- AMicrosoft Entra Verified ID
- BMicrosoft Entra Password Protection
- CMicrosoft Entra Domain Services
- DMicrosoft Entra Identity Governance
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Verified ID
Microsoft Entra Verified ID allows organizations to issue, hold, and verify digital credentials based on open standards, enabling users to prove their identity and verifiable claims securely without sharing sensitive underlying data, which is ideal for high-assurance scenarios and reducing password reliance.
Why the other options are wrong
- B. Password Protection prevents weak/compromised passwords, not for verifiable digital credentials.
- C. Domain Services provides managed AD services, unrelated to verifiable digital credentials.
- D. Identity Governance manages access lifecycle and privileged roles, not decentralized identity verification.
Microsoft Entra Verified ID
A decentralized identity solution that allows organizations to issue and verify digital credentials (Verified IDs) based on open standards, empowering individuals to control their digital identity and prove claims securely.
- Enables self-sovereign identity principles.
- Uses verifiable credentials to prove claims without sharing excessive data.
- Reduces reliance on traditional identity verification methods.
- Enhances privacy and security in identity interactions.
Memory trick: Verified ID: Your identity, your proof, your control.