External Identities and B2B Collaboration Flashcards
6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 External Identities and B2B Collaboration flashcards as text
Which Azure AD feature allows bulk invitation of multiple guest users by uploading a CSV file?
Answer: Bulk invite users feature in the Azure portal
The 'Bulk invite users' feature in the Azure portal allows administrators to upload a CSV file with external user email addresses and redirect URLs to send multiple B2B invitations simultaneously.
What is the 'redemption order' in Azure AD B2B collaboration?
Answer: The sequence of identity providers Azure AD tries when a guest user redeems an invitation
The redemption order defines the sequence of identity providers—such as Azure AD, Microsoft account, email OTP—that Azure AD attempts to use when a guest user redeems their collaboration invitation.
An organization has configured SAML/WS-Fed federation with a partner organization that uses a non-Azure identity provider. What is the benefit of this configuration?
Answer: Partner users can sign in to the host tenant using their existing corporate SSO credentials without needing a Microsoft account
SAML/WS-Fed direct federation allows partner users to authenticate using their existing corporate identity provider, providing a seamless SSO experience without requiring Microsoft account creation.
Which Azure AD report helps administrators identify guest accounts that have not signed in for an extended period, enabling cleanup of stale external identities?
Answer: Azure AD Sign-in logs filtered by UserType = Guest with last sign-in date
Filtering Azure AD Sign-in logs or using the 'All users' blade with UserType = Guest and last sign-in date allows administrators to identify inactive guest accounts for review and removal.
Which Azure AD External Identities setting, when enabled, allows users in the tenant to invite guests without needing an administrator role?
Answer: Member users can invite: Yes
Setting 'Member users can invite' to 'Yes' in External collaboration settings allows non-administrator member users to send B2B invitations to external collaborators.
What is the default permission level of a newly invited B2B guest user compared to a member user in Azure AD?
Answer: Guest users have restricted permissions and cannot enumerate users, groups, or applications by default
By default, B2B guest accounts have a limited permission set that restricts directory enumeration such as listing users, groups, and applications, unlike member accounts which have broader read access.