Exam SC-300 topic 1 question 5 discussion

Yes/Yes/No - @Reyrain - I replicated this in my lab as well, but don't have the requirement to have the domain "checked". User1 didn't accept the invitation, but their domain is in the allowed list so once they do, they'll be able to gain access to the Ent App. User2 probably accepted the invitation before the domain restriction was put into place so they should be able to access it as well. User3's domain is not allowed, so the invite will not be sent to them and they won't be able to access SharePoint.

YES YES - inv already accepted No

About User3, the question is very confusing. If invitations can only be sent to outlook.com, why ask if "User3 can accept the invitation and gain access to the SharePoint site" WHAT INVITATION? if the invitation was blocked, and he did not receive any invitation, there is no invitation to accept. Also in the collaboration settings, it is only ticked for "Target Domains" and not ticked in the box for "outlook.com", is that why User3 received the invitation?

About the user3: "This list works independently from OneDrive for Business and SharePoint Online allow/block lists. If you want to restrict individual file sharing in SharePoint Online, you need to set up an allow or blocklist for OneDrive for Business and SharePoint Online. For more information, see Restricted domains sharing in SharePoint Online and OneDrive for Business." https://learn.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure and "If you have enrolled in the SharePoint and OneDrive integration with Azure AD B2B, invitations in SharePoint are also subject to any domain restrictions configured in Azure Active Directory." https://learn.microsoft.com/en-us/sharepoint/restricted-domains-sharing?redirectSourcePath=%252farticle%252frestricted-domains-sharing-in-sharepoint-online-and-onedrive-for-business-5d7589cd-0997-4a00-a2ba-2320ec49c4e9

Answer: YYN

Ans: Yes, because only [email protected] will received the invitation as per ext collaboration. Ans: Yes, User2 already accept the invitation to access the enterprise the app. Ans: User3 is not mentioned in user list and domain is also not there.

YES YES No

YES YES NO

Is it just me or we can’t see the email the invitation was sent ? Because of the [email protected]. It kind of screws the question…. :(((

Yes, yes, No. Those who are confuse at 3rd by assuming that sharepoint n onedrive work different then B2B, please check the link https://learn.microsoft.com/en-us/sharepoint/sharepoint-azureb2b-integration

This scenario DOES NOT state that the Outlook.com domain restriction for guest invitations was enabled after User2 in the fabrikam domain already accepted the guest invitation. Soooo once the setting to allow only Outlook.com domain guest invitations is enabled in the tenant shouldn't that prevent the fabrikam.com domain guest users from accessing content? This seems like a security glitch to me...

This came in the exam today- 15.01.2023. I answered Y/Y/Y. I was a bit confused with the 3rd question. Mostly it should have been No.

Yes, Yes, No Checked in my tenant

this came out with some tweaks to the question and answers.

User2 can access the application because they're already a guest user, so the @outlook.com domain only does not apply.

YES YES No

I think User3 CAN accept the invitation and gain access to the sharepoint site "This list works independently from OneDrive for Business and SharePoint Online allow/block lists. If you want to restrict individual file sharing in SharePoint Online, you need to set up an allow or deny list for OneDrive for Business and SharePoint Online" https://docs.microsoft.com/en-us/azure/active-directory/external-identities/allow-deny-list check in my LAB...