Which Azure service provides cloud-based identity and access management — handling user sign-in, MFA, and single sign-on to applications?
A.Microsoft Entra ID
Entra ID = the identity and access management service. Correct.
B.Azure Key Vault
Key Vault stores keys, secrets, and certificates — not user sign-in.
C.Microsoft Defender for Cloud
Defender for Cloud is a security posture/workload protection service, not an IdP.
D.Azure Active Directory Domain Services only
Entra Domain Services provides managed AD domain features — a different, narrower service.
Why this answer
Microsoft Entra ID (formerly Azure Active Directory) is Azure's cloud identity provider: user/device identity, authentication, MFA, SSO, conditional access. Key Vault is for secrets; Defender for Cloud is workload protection.
Correct answer: A · Last reviewed 2026-02-13
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Identity & Access practice session.
Practice Identity & Access