Microsoft Certified: Azure Solutions Architect Expert Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C. Use Azure AD entitlement management to govern external users. Explanation: Azure AD Entitlement Management: Facilitates collaboration with external users by automating the request and approval process for access to resources. Allows you to manage access packages that include the required permissions for external users, ensuring they can access App1. External users can use their existing credentials to sign in and access resources in the Contoso Azure AD tenant.

• 3

  Why Not Other Options: A. Configure the Azure AD provisioning service: More relevant for user lifecycle management and not specifically for cross-tenant access. B. Enable Azure AD pass-through authentication and update the sign-in endpoint: Pass-through authentication is designed for on-premises authentication and doesn't directly facilitate cross-tenant SSO. D. Configure Azure AD join: This is typically used for joining devices to Azure AD, not for enabling cross-tenant user access.

• Chose C2

  I would vote for C as per below Entitlement management uses Microsoft Entra business-to-business (B2B) to share access so you can collaborate with people outside your organization. With Microsoft Entra B2B, external users authenticate to their home directory, but have a representation in your directory. The representation in your directory enables the user to be assigned access to your resources. https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-external-users