Home › Azure AZ-900 › cloudcomputing › azurearchitecture › Which Azure identity service is the cloud-based …
Which Azure identity service is the cloud-based directory used to sign in to Azure, Microsoft 365, and federated third-party SaaS apps?
AMicrosoft Entra Domain Services (the managed domain controller offering)
BMicrosoft Entra ID (formerly Azure Active Directory)
CAzure Local Identity Manager, which only runs on-premises
DAzure Active Directory B2C, which is only for customer-facing app sign-ins
Answer & Solution
Correct answer: B. Microsoft Entra ID (formerly Azure Active Directory)
Microsoft Entra ID (the rebranded Azure AD) is the primary cloud directory for workforce identity, signing users in to Azure portal, M365, and federated SaaS apps. Entra Domain Services is a separate managed AD DS offering for legacy NTLM/LDAP workloads. B2C is the customer-identity variant. "Local Identity Manager" isn't an Azure service.
Related questions
Which statement about Azure region pairs is correct?Which Azure access-control mechanism grants permissions by assigning users, groups, or serWhich Azure Storage redundancy option provides the HIGHEST durability by replicating data A virtual network (VNet) in one Azure region needs to communicate privately with a VNet inWhich Azure networking service provides a dedicated, private connection between an on-premAn Azure Virtual Machine Scale Set is best used when you need to:Which statement about the Azure resource hierarchy is correct?Which statement about an Availability Zone (AZ) in Azure is correct?