SC-300 External Identities and B2B Collaboration

Question 1

Which Azure AD feature allows an organization to invite users from external organizations to collaborate on internal resources without requiring them to have an Azure AD account?

Accepted Answer

Azure AD B2B collaboration

Answer

Azure AD B2B collaboration allows external users to sign in using their own credentials (social or corporate identity) and be granted access to the inviting organization's resources as guest users.

Question 2

When an external user accepts a B2B collaboration invitation, what type of account is created in the inviting organization's Azure AD tenant?

Accepted Answer

A guest user account (UserType = Guest)

Answer

B2B invited users are represented in the inviting tenant as guest accounts with UserType set to 'Guest,' which limits their default permissions compared to member accounts.

Question 3

Which Azure AD setting controls which external domains are allowed or blocked from receiving B2B collaboration invitations?

Accepted Answer

External collaboration settings: Allow/deny list for domains

Answer

The external collaboration settings in Azure AD include an allow/deny list where administrators can specify which external domains are permitted or blocked from B2B collaboration.

Question 4

A guest user in an Azure AD tenant tries to enumerate all users in the directory and receives a permission error. Why does this occur?

Accepted Answer

Guest users have restricted default permissions that prevent directory enumeration

Answer

By default, Azure AD guest accounts have limited directory permissions and cannot enumerate other users or groups, unlike member accounts which have broader read access.

Question 5

Which Azure AD External Identities feature allows a completely separate consumer-facing identity store with custom sign-up and sign-in flows using social identities like Google and Facebook?

Accepted Answer

Azure AD B2C

Answer

Azure AD B2C is a separate identity platform designed for consumer-facing applications that supports custom sign-up and sign-in experiences with social identity providers and local accounts.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 External Identities and B2B Collaboration