Describe function and identity types of Microsoft Entra ID
Objective entra.function-identity-types sits in Describe capabilities of Microsoft Entra, which carries 28% of the SCI Fundamentals exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
Fabrikam licenses Microsoft Defender XDR to protect endpoints, email, apps, and identities. Which component draws on Microsoft Entra ID signals, alongside consumer and gaming data, to detect risky sign-ins for its employees?
The concept
A detection suite's components are told apart by the telemetry each one consumes. Two of them both watch accounts: one is fed by domain controller traffic inside a private network, the other learns from sign-in behavior across a very large consumer population. Match the data source described in the scenario to the component, rather than matching a word in the product name.
Why this answer
Microsoft Entra ID Protection uses learnings from organizations using Microsoft Entra ID, the consumer space with Microsoft Accounts, and gaming with Xbox to protect users, making it the correct match for cloud identity risk detection.
- AMicrosoft Defender for Identity watches domain controller traffic. It would be the answer if the account lived only in on-premises Active Directory.
- Correct: this is the component built on Microsoft Entra ID, Microsoft Account, and Xbox signal learnings.
- CMicrosoft Defender for Cloud Apps governs SaaS sessions and shadow IT discovery, not the sign-in itself.
- DPick Microsoft Defender Vulnerability Management when the question is about unpatched software or weak device configuration.
- EPhishing, malicious attachments and hostile links in mail are Microsoft Defender for Office 365 territory.
Now you: objective entra.function-identity-types questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
A Fabrikam employee signs into work apps with her organizational sign-in and separately signs into Xbox with a personal sign-in. Which pairing correctly names the two account types feeding Microsoft Entra ID Protection's risk detection?
Sample question 2 of 3
A security team wants to detect compromised accounts and malicious insider actions against their on-premises Active Directory by analyzing signals collected directly from that directory. Which capability should they deploy?
Sample question 3 of 3
Fabrikam wants to protect cloud user identities using intelligence gained from Microsoft's experience with consumer accounts and Xbox gaming, rather than from any on-premises directory signals. Which capability fits this requirement?
Full SCI Fundamentals question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.