MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
Your company has implemented Microsoft Entra ID tenant restrictions to prevent data exfiltration. You need to ensure that external users from a partner organization can access a SharePoint Online site without being blocked by tenant restrictions. What should you do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the partner tenant ID to the AllowedTenants list in the tenant restrictions policy.
Tenant restrictions use the X-MS-Cloud-Extension header to block or allow access based on tenant IDs. To allow external users from a partner organization to access SharePoint Online, you must add the partner's tenant ID to the 'AllowedTenants' list in the tenant restrictions policy (Option A). Option B (Conditional Access) does not bypass tenant restrictions. Option C (Azure AD B2B) invites users but does not override tenant restrictions. Option D (cross-tenant access settings) controls inbound/outbound access but is separate from tenant restrictions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add the partner tenant ID to the AllowedTenants list in the tenant restrictions policy.
Why this is correct
Adding the partner tenant ID to the AllowedTenants list allows users from that tenant to access resources without being blocked.
- ✗
Create a Conditional Access policy to exclude partner users from tenant restriction evaluation.
Why it's wrong here
Conditional Access policies do not affect the tenant restriction header check.
- ✗
Configure Azure AD B2B collaboration and invite partner users as guests.
Why it's wrong here
B2B collaboration does not bypass tenant restrictions; the header is still evaluated.
- ✗
Configure cross-tenant access settings in Microsoft Entra ID to allow partner tenant.
Why it's wrong here
Cross-tenant access settings control inbound/outbound trust, not tenant restriction header evaluation.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Conditional access
Conditional access is a security framework that evaluates signals like user location, device health, and risk level to grant or block access to resources in real time.
About these practice questions
This MS-102 question is part of Courseiva's 241-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.