Exam MS-100 topic 4 question 26 discussion

Actual exam question from Microsoft's MS-100

Question #: 26
Topic #: 4

SIMULATION -
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.

Lab information -
Use the following login credentials as needed:
To enter your username, place your cursor in the Sign in box and click on the username below.
To enter your password, place your cursor in the Enter password box and click on the password below.
Microsoft 365 Username:
[email protected]
Microsoft 365 Password: xxxxxxxxxx
If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:

Lab Instance: 111111111 -
You plan to invite several guest users to access the resources in your organization.
You need to ensure that only guests who have an email address that uses the @contoso.com suffix can connect to the resources in your Microsoft 365 tenant.

Show Suggested Answer

Suggested Answer: See explanation below.
You need to add contoso.com as an allowed domain in the 'External collaboration settings'.
1. Go to the Azure Active Directory admin center.
2. Select Users then select 'User settings'.
3. Under External Users, select the 'Manage external collaboration settings'.
4. Under 'Collaboration restrictions', select the 'Allow invitations only to the specified domains (most restrictive)' option.
5. Under, Target Domains, type in the domain name 'contoso.com'
6. Click the Save button at the top of the screen to save your changes.
References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/allow-deny-list

by One111 at Dec. 27, 2022, 7:21 p.m.

Comments

Submit Cancel

Feyenoord

2 years, 3 months ago

Collaboration restrictions Deny invitations to the specified domains

upvoted 1 times

...

One111

2 years, 6 months ago

Task is to restrict access to resources, not to block invitations. My guess would be to create conditional-access policy targeted for all guests and all cloud apps.

upvoted 1 times

One111

1 year, 9 months ago

There is no option to allow guest with given suffix and block rest of the guests at conditional access policy. External setting gives you option block given domains,which cause no access.

upvoted 1 times

...