You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1. A contractor uses the credentials of [email protected]. You need to ensure that you can…

Question

Options

• AImplement Microsoft Entra Connect sync.
• BCreate a guest user account in contoso.com.
• CConfigure the External collaboration settings.
• DRun the New-MgUser cmdlet.

• B
  89% (16)
• C
  6% (1)
• D
  6% (1)

Explanation

Explanation

Creating a guest user account in contoso.com allows the contractor to be invited via Azure B2B collaboration, linking their existing [email protected] identity to your tenant without requiring a new set of credentials - they authenticate using their own Microsoft/personal account and are granted access to App1. Option A (Microsoft Entra Connect sync) is wrong because Connect sync is used to synchronize on-premises Active Directory identities to the cloud, not for inviting external users. Option C (External collaboration settings) controls whether guest invitations are allowed globally, but configuring this setting alone doesn't actually grant the contractor access - you still need to create the guest account. Option D (New-MgUser) creates a native member account in the tenant with new credentials, which would prevent the contractor from authenticating as [email protected].

Memory Tip: When an external user needs to keep their own credentials, think Guest = B2B. The word "Guest" is your signal - you're inviting someone in, not creating new credentials for them.

No community discussion yet for this question.