MS-900 Describe Microsoft 365 apps and services Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Configure SharePoint Online external sharing and invite partners as authenticated users

  Why this is correct

  Configuring SharePoint Online external sharing with authenticated guests is the appropriate Microsoft 365 pattern. This leverages Microsoft Entra ID Business-to-Business (B2B) collaboration, generating a one-time invitation that creates a guest identity in the tenant. Administrators can then grant granular permissions to specific SharePoint sites, document libraries, or files, ensuring partners are authenticated and access is auditable. External sharing must be enabled at the tenant and site collection level, and partners receive the SharePoint site link to access resources.

• ✗

  Create an Azure AD B2C tenant for partners

  Why it's wrong here

  Azure AD B2C is a customer identity access management service designed for consumer-facing applications, letting users sign in with social or local accounts. Partner organizations are business-to-business relationships, not consumer identities; adding partners to B2C would require building a custom identity experience and would not tie into the enterprise governance, conditional access, or compliance features of your existing Microsoft Entra ID tenant. Additionally, SharePoint Online external sharing relies on Microsoft Entra B2B, not B2C, so a B2C tenant would not provide the needed authentication or authorization context for SharePoint site access.

• ✗

  Use anonymous sharing links for the site

  Why it's wrong here

  Anonymous sharing links, also known as 'Anyone with the link' links, bypass authentication entirely, meaning anyone who obtains the URL can access the files without signing in. This severely weakens security because you lose the ability to revoke access per user, audit who accessed the resource, or enforce conditional access and data loss prevention policies. For a controlled partner collaboration scenario, authenticated access is required to maintain visibility and compliance, so anonymous links are unsuitable.

• ✗

  Add partners as guests in Microsoft Teams and share the site from Teams

  Why it's wrong here

  Adding partners as guests in Microsoft Teams creates a guest user in Microsoft Entra B2B and gives them access to the Teams workspace, including the team's associated SharePoint site via the Files tab. However, this does not supply direct, explicit permissions to a different SharePoint site that you might need to share, and it may inadvertently expose other team content. The proper method to give partners access to a specific SharePoint site is to use site-level external sharing invitations, which allow direct control over site collection permissions without relying on the Teams interface as an intermediary.

Go deeper

Related to this question