SC-300 External Identities and B2B Collaboration 2

Question 1

What is the purpose of Cross-Tenant Access Settings in Azure AD External Identities?

Accepted Answer

To control inbound and outbound B2B collaboration and trust settings with specific partner tenants

Answer

Cross-Tenant Access Settings allow organizations to configure per-tenant trust policies for inbound and outbound B2B collaboration, controlling who can be invited and what MFA claims are trusted.

Question 2

An organization wants to trust the MFA claims from a partner tenant so that partner users are not re-challenged for MFA when accessing the organization's resources. Where is this configured?

Accepted Answer

Cross-Tenant Access Settings > Inbound trust settings > Trust MFA from Azure AD tenants

Answer

Inbound trust settings in Cross-Tenant Access Settings allow administrators to trust MFA claims from a specific partner tenant, preventing redundant MFA challenges for already-authenticated partner users.

Question 3

What happens when an administrator enables the 'Self-service sign-up' user flow for an application in Azure AD External Identities?

Accepted Answer

External users can create a guest account by signing up through the application without an invitation

Answer

Self-service sign-up user flows allow external users to discover and register for access to an application independently, creating a guest account through a guided sign-up experience.

Question 4

Which identity provider can be configured in Azure AD External Identities to allow external users to sign in using their Google accounts?

Accepted Answer

Google federation (direct federation)

Answer

Azure AD External Identities supports Google federation as a social identity provider, allowing users with Google accounts to sign into the tenant's applications as B2B guests.

Question 5

What is the purpose of the 'Email one-time passcode' feature in Azure AD External Identities?

Accepted Answer

It provides a fallback authentication method for external users who cannot use other identity providers

Answer

Email one-time passcode provides a fallback mechanism for B2B guest users who don't have an Azure AD account, Microsoft account, or supported social identity, sending a temporary code to their email for authentication.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 External Identities and B2B Collaboration 2