AZ-900 Practice Question 17: Microsoft Entra ID
Microsoft Azure Fundamentals (AZ-900) · Test 2 · question 7 of 10
A company wants one cloud identity per employee that signs them in to Microsoft 365, to the Azure portal, and to the SaaS applications the business subscribes to. Which Azure service provides that directory?
Show answer and explanation
Answer:
Microsoft Entra ID (formerly Azure Active Directory) is the foundational Microsoft Entra product: a cloud-based identity and access management service that provides authentication, policy enforcement, and protection for users, devices, apps, and resources. If you already subscribe to Microsoft 365 or Azure you are already using it, because every such tenant is a Microsoft Entra tenant, which is why one identity signs a user in to all three surfaces named in the stem.
Option B, Microsoft Entra Domain Services, is a managed domain offering group policy, LDAP, and Kerberos/NTLM authentication. It exists for legacy applications lifted into the cloud that cannot use modern authentication, and it is an add-on to a directory rather than the directory itself. Option C, Azure Key Vault, safeguards secrets, keys, and certificates used by applications; it stores no user accounts. Option D, Microsoft Defender for Cloud, assesses security posture and protects workloads; it reports on identity risks but does not hold the identities.
Reference: What is Microsoft Entra?