AB-900 Certification Practice Question #3

Question

Your organization has a Microsoft 365 E5 subscription.
You need to ensure that a third-party cloud service can authenticate to Microsoft Entra.
What should you configure?

Accepted Answer

To let a non-Microsoft cloud service authenticate to Microsoft Entra, you create an **app registration**, which provisions an application (client) ID plus a client secret or certificate and a defined permission set — the standard way an external SaaS or automation obtains OAuth tokens from Entra. MFA and Conditional Access govern how *people* sign in, and a Microsoft 365 Copilot connector only brings external content into Microsoft Search, so none establishes service-to-Entra authentication. The Suggested Answer and a unanimous community vote both land on D.

More AB-900 practice questions