AZ-305 Design infrastructure solutions Practice Question
You are designing a solution to grant external partners access to specific Azure resources. The partners must authenticate using their own corporate credentials. You need to manage their access centrally. Which Microsoft Entra ID feature should you use?
⚠ Common exam trap
Candidates often confuse B2B collaboration (for external partners with existing corporate identities) with B2C (for customer-facing applications with social or local accounts), as both involve external users but serve fundamentally different scenarios.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID B2B collaboration
Microsoft Entra ID B2B collaboration is the correct choice because it allows external partners to authenticate using their own corporate credentials (via their home tenant or identity provider) while enabling centralized management of their access to Azure resources. B2B collaboration supports features like cross-tenant synchronization, conditional access policies, and entitlement management, making it ideal for granting granular, centrally managed access to external users without requiring them to create new accounts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID Domain Services
Why it's wrong here
Microsoft Entra ID Domain Services provides managed domain services such as LDAP, Kerberos, and NTLM for legacy on-premises applications that are migrated to Azure, but it does not provide any external identity or federation capabilities. It is designed to support lift-and-shift workloads that require domain join or classic authentication, not to grant partners access to cloud resources. Partner access requires a solution that supports external identities and trust relationships, which Domain Services does not offer.
- ✗
Microsoft Entra ID B2C
Why it's wrong here
Microsoft Entra ID B2C is a customer identity and access management (CIAM) service intended for end customers of consumer-facing applications, typically with self-service sign-up, social identity providers, and custom policies for branding and regulatory compliance. It is not appropriate for business-to-business partner access because B2C treats each partner as a consumer with its own user profile and password lifecycle, rather than leveraging the partner's existing corporate identity. In contrast, B2B collaboration allows partners to access your resources using their own Entra ID or other identity provider, without creating separate B2C tenant user accounts.
- ✓
Microsoft Entra ID B2B collaboration
Why this is correct
Microsoft Entra ID B2B collaboration is the correct choice because it allows external partners to use their own corporate identities (from any Microsoft Entra ID tenant, Microsoft account, or even Google/SAML/WS-Fed identity provider) to access your applications and resources. You invite the partner's users or enable self-service sign-up; they are represented as guest users in your Entra ID tenant, while their authentication is handled by their home organization. This preserves the partner's identity lifecycle and enables fine-grained conditional access policies, multi-factor authentication, and governance controls like access reviews, making it the standard for partner access scenarios.
- ✗
Microsoft Entra ID Connect
Why it's wrong here
Microsoft Entra ID Connect is an on-premises tool that synchronizes identities from your on-premises Active Directory to Microsoft Entra ID, enabling a hybrid identity model. It does not have any capability to invite external partners or to federate with partner identity providers; its sole purpose is to synchronize your own directory objects. Using Connect for partner access would be architecturally incorrect because it would require you to manually create and maintain partner accounts in your on-premises AD, defeating the purpose of external collaboration and introducing unnecessary administrative overhead.
Go deeper
Related to this question
About these practice questions
One of 795 original AZ-305 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.