Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

External Identities and B2B Collaboration Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 External Identities and B2B Collaboration flashcards as text

  1. What is the purpose of Cross-Tenant Access Settings in Azure AD External Identities?

    Answer: To control inbound and outbound B2B collaboration and trust settings with specific partner tenants

    Cross-Tenant Access Settings allow organizations to configure per-tenant trust policies for inbound and outbound B2B collaboration, controlling who can be invited and what MFA claims are trusted.

  2. An organization wants to trust the MFA claims from a partner tenant so that partner users are not re-challenged for MFA when accessing the organization's resources. Where is this configured?

    Answer: Cross-Tenant Access Settings > Inbound trust settings > Trust MFA from Azure AD tenants

    Inbound trust settings in Cross-Tenant Access Settings allow administrators to trust MFA claims from a specific partner tenant, preventing redundant MFA challenges for already-authenticated partner users.

  3. What happens when an administrator enables the 'Self-service sign-up' user flow for an application in Azure AD External Identities?

    Answer: External users can create a guest account by signing up through the application without an invitation

    Self-service sign-up user flows allow external users to discover and register for access to an application independently, creating a guest account through a guided sign-up experience.

  4. Which identity provider can be configured in Azure AD External Identities to allow external users to sign in using their Google accounts?

    Answer: Google federation (direct federation)

    Azure AD External Identities supports Google federation as a social identity provider, allowing users with Google accounts to sign into the tenant's applications as B2B guests.

  5. What is the purpose of the 'Email one-time passcode' feature in Azure AD External Identities?

    Answer: It provides a fallback authentication method for external users who cannot use other identity providers

    Email one-time passcode provides a fallback mechanism for B2B guest users who don't have an Azure AD account, Microsoft account, or supported social identity, sending a temporary code to their email for authentication.

  6. An administrator needs to restrict external B2B guest users from having access to the Azure AD administrative portals. Which approach accomplishes this?

    Answer: Configure a Conditional Access policy that blocks guest users from accessing the Azure portal and admin center

    A Conditional Access policy scoped to guest user accounts and targeting the Microsoft Azure Management cloud app can block external users from accessing administrative portal interfaces.