MS-700 · Question #30
Litware, Inc. is an international manufacturing company that has 4,000 users. The company has the following four departments: IT, HR, R&D, Sales. Physical locations: Litware has two main offices…
The correct answer is A. From the Azure Active Directory admin center, modify the External collaboration settings to include fabrikam.com only. To restrict external collaboration to a specific domain (fabrikam.com) at an organizational level for all Microsoft 365 services, you should configure Azure AD external collaboration settings.
Question
Exhibit
Options
- AFrom the Azure Active Directory admin center, modify the External collaboration settings to include fabrikam.com only.
- BFrom the Microsoft 365 admin center, modify the Office 365 groups settings.
- CFrom the external access settings in the Microsoft Teams admin center, add fabrikam.com to the allowed list of domains.
- DFrom the Microsoft Teams admin center, turn off org-wide guest access and manually add guest users from fabrikam.com to teams.
How the community answered
(23 responses)- A74% (17)
- B9% (2)
- C4% (1)
- D13% (3)
Why each option
To restrict external collaboration to a specific domain (fabrikam.com) at an organizational level for all Microsoft 365 services, you should configure Azure AD external collaboration settings.
Azure AD external collaboration settings control guest access and collaboration with external domains for the entire Microsoft 365 tenant, including Teams, SharePoint, and other services. By configuring these settings to allow only fabrikam.com, you enforce the requirement at the foundational identity layer, ensuring consistency across all collaboration tools.
Modifying Office 365 Groups settings in the Microsoft 365 admin center might have some external sharing controls, but Azure AD external collaboration settings provide a more comprehensive and tenant-wide control for domain restriction.
External access settings in the Microsoft Teams admin center primarily control federated communication (one-to-one chat and calling) with other organizations and guest access specifically for Teams, but Azure AD settings are more encompassing for overall tenant collaboration and guest user creation.
Turning off org-wide guest access and manually adding users is inefficient and doesn't explicitly restrict to only fabrikam.com at a policy level for new guest additions. This is a manual operational task, not a policy enforcement.
Concept tested: Azure AD B2B collaboration settings for external domain restriction
Source: https://learn.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-overview
Topics
Community Discussion
No community discussion yet for this question.
