Exam SC-300 topic 1 question 24 discussion

A is the answers, they are looking for you to invite the user to azure ad. Assume that unless stated otherwise, default config in Azure AD is set, so collaboration settings are already on. "By default, all users in your organization, including B2B collaboration guest users, can invite external users to B2B collaboration. If you want to limit the ability to send invitations, you can turn invitations on or off for everyone, or limit invitations to certain roles." https://docs.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure

This is the same question as 14. There you answer that "create a guest account" but here you all are saying "you need to configure collaboration settings". Think about it, if that would be the correct answer you shouldn't have it as an option on question number 14 but you have it there... It is A

https://learn.microsoft.com/en-us/powershell/module/azuread/new-azureadmsinvitation?view=azureadps-2.0 only invites the user but won't provide access to any resources. External collaboration settings have to be configured first.

The context of this question is terrible. Does the org already have B2B collaboration setup? If so, then A. But if no collaboration exists as yet, then B is required to setup before sending out invites (A). grrr.

https://learn.microsoft.com/pl-pl/training/modules/implement-manage-external-identities/13-configure-identity-providers Here you have why C is the proper answer: End-user experience With SAML/WS-Fed IdP federation, guest users sign in to their Microsoft Entra tenant with their own organizational account. When they access shared resources and are prompted to sign in, users are redirected to their identity provider. Upon successful sign-in, users are returned to their Microsoft Entra ID to access resources. If a Microsoft Entra session expires or becomes invalid, and the federated identity provider has SSO enabled, the user uses SSO. If the federated user's session is valid, the user is not prompted to sign in again. Otherwise, the user will be redirected to their identity provider for sign-in.

The best answer is A. Run the New-AzureADMSInvitation cmdlet. The New-AzureADMSInvitation cmdlet is used to invite a guest user to your Azure AD tenant. To use the New-AzureADMSInvitation cmdlet, you will need the contractor's email address and the name of the Azure AD application that you want to give them access to.

A. Run the New-AzureADMSInvitation cmdlet.

The wording say not "invite user" but "make sure you can invite user" therefore B

A. Run the New-AzureADMSInvitation cmdlet.

A is correct

In exam 29/Sep

Key words are: "You need to ensure that you can provide the contractor with access to App1." Which means you need to setup the following screen for @outlook account to work. Under collaboration settings. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/self-service- sign-up-user-flow#create-the-user-flow-for-self-service-sign-up

Question is asking the prerequisition of A, so I'll go for B.

I would go with A.

A is answer

B: By default all users can invite guest users. Too access to App1. Add applications to the self-service sign-up user flow under configure external collaboration settings.

A looks correct. By default all users can invite guest users, since the question doesn't state otherwise. A: is correct, since you just need to invite the user.