AZ-104 Question 14
Single answerYou are the Azure Administrator for Contoso. A project requires collaboration with an external partner who has their own Azure AD tenant. The team wants to grant the external partner secure access to an internal SharePoint Online site using their existing Microsoft 365 credentials. Which approach should you implement?
- A
Invite the partner as a guest B2B collaboration user in your Azure AD
- B
Create separate standard user accounts for the partner in your Azure AD tenant
- C
Enable Azure AD Domain Services and share the domain controller with the partner
- D
Configure multi-factor authentication in your own tenant for the partner’s accounts
Show answer and explanation
Correct answer: A
Explanation
Using B2B collaboration in Azure AD is the most efficient method to allow external users to access internal resources with their existing credentials. It provides a secure and seamless way to invite external identities without duplicating user accounts.
- A. Correct.
Inviting external users as guest B2B collaboration users allows them to authenticate with their existing Azure AD credentials without creating separate accounts in your tenant.
- B. Incorrect.
Creating separate standard user accounts in your tenant for the partner introduces unnecessary overhead and duplicates their existing credentials.
- C. Incorrect.
Enabling Azure AD Domain Services and sharing the domain is unrelated to granting direct external access. It’s used when you need legacy authentication or domain-join services, not one-time external collaboration.
- D. Incorrect.
Configuring MFA in your own tenant does not address how the external partner will authenticate with their own credentials. It only provides an additional security layer in your environment.