Exam SC-300 topic 1 question 73 discussion

Actual exam question from Microsoft's SC-300

Question #: 73
Topic #: 1

You work for a company named Contoso, Ltd. that has a Microsoft Entra tenant named contoso.com.

Contoso is working on a project with the following two partner companies:

• A company named A. Datum Corporation that has a Microsoft Entra tenant named adatum.com.
• A company named Fabrikam, Inc. that has a Microsoft Entra tenant named fabrikam.com.

When you attempt to invite a new guest user from adatum.com to contoso.com, you receive an error message.

You can successfully invite a new guest user from fabnkam.com to contoso.com.

You need to be able to invite new guest users from adatum.com to contoso.com.

What should you configure?

A. Guest invite settings
B. Verifiable credentials
C. Named locations
D. Collaboration restrictions

Show Suggested Answer

Suggested Answer: D 🗳️

by SFAY at Jan. 30, 2024, 11:21 a.m.

Comments

Submit Cancel

penatuna

Highly Voted 9 months, 4 weeks ago

Selected Answer: D

You can select “Allow invitations to be sent to any domain (most inclusive)” to allow guest invites to be sent to any domain. You can also select “Allow invitations only to the specified domains (most restrictive)”, and add adatum.com to it. OR you can check if “Deny invitations to the specified domains” is selected, and contoso.com is in there. However, you can find all of the above in Microsoft Entra admin centre | External Identities | External collaboration settings | Collaboration restrictions.

upvoted 7 times

penatuna

9 months, 4 weeks ago

You can use an allowlist or a blocklist to allow or block invitations to B2B collaboration users from specific organizations. For example, if you want to block personal email address domains, you can set up a blocklist that contains domains like Gmail.com and Outlook.com. Or, if your business has a partnership with other businesses like Contoso.com, Fabrikam.com, and Litware.com, and you want to restrict invitations to only these organizations, you can add Contoso.com, Fabrikam.com, and Litware.com to your allowlist. You can create either an allowlist or a blocklist. You can't set up both types of lists. By default, whatever domains aren't in the allowlist are on the blocklist, and vice versa. https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure https://learn.microsoft.com/en-us/entra/external-id/allow-deny-list

upvoted 1 times

...

avdan16

Highly Voted 11 months, 1 week ago

You need to add adatum.com to the list of domains on External Identities >> External Collab Settings >> Collaboration Restrictions >> Allow invitations only to the specified domains.

upvoted 6 times

...

d1e85d9

Most Recent 3 months, 3 weeks ago

Selected Answer: D

The correct answer is: D. Collaboration restrictions Explanation: Since you are unable to invite guest users from adatum.com but can invite users from fabrikam.com, this indicates that there is a restriction on external collaboration for certain domains. In Microsoft Entra ID (formerly Azure AD), Collaboration restrictions allow organizations to control which external domains can be invited as guest users. If adatum.com is blocked, you will see an error when attempting to invite users from that domain. To resolve this issue: Go to Microsoft Entra admin center. Navigate to External Identities > External collaboration settings. Under Collaboration restrictions, check if adatum.com is blocked and remove it from the restricted list. Thus, the correct setting to configure is Collaboration restrictions.

upvoted 1 times

...

bardock100

4 months, 1 week ago

Selected Answer: C

C) External Identities | External collaboration settings | Collaboration restrictions

upvoted 1 times

...

SFAY

11 months, 1 week ago

Selected Answer: D

Correct

upvoted 4 times

...