SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  A user from a partner organization is invited to access a SharePoint Online site.

  Why this is correct

  This scenario exemplifies Microsoft Entra B2B collaboration, where an organization extends access to its internal resources, such as a SharePoint Online site, to an external user from a partner organization. By inviting the partner user, a guest account is created in the inviting organization's Microsoft Entra tenant, allowing the external user to authenticate with their existing corporate credentials and securely access the shared resource. This facilitates secure inter-organizational cooperation.

• ✗

  An employee uses their Microsoft Entra ID to sign in to a third-party SaaS application.

  Why it's wrong here

  This describes a standard Single Sign-On (SSO) implementation for internal employees, leveraging Microsoft Entra ID as the identity provider for third-party SaaS applications. While it uses Microsoft Entra ID for authentication, it does not involve inviting external users or managing guest accounts for cross-organizational collaboration. Instead, it streamlines access for an organization's own workforce to applications outside its direct control.

• ✗

  Two internal departments share resources within the same tenant.

  Why it's wrong here

  Sharing resources between internal departments within the same Microsoft Entra tenant is a fundamental aspect of internal access management, not B2B collaboration. All users involved are employees of the same organization, with their identities already managed within the single Microsoft Entra directory. This process relies on internal group memberships, permissions, and access policies, without the need for external identity federation or guest accounts.

• ✓

  A vendor employee uses their own work email to access a Power BI dashboard shared by your company.

  Why this is correct

  This is a prime example of Microsoft Entra B2B collaboration, enabling secure sharing of specific resources like a Power BI dashboard with external vendor employees. When the vendor employee is invited, a guest user object is provisioned in the inviting company's Microsoft Entra tenant, allowing them to authenticate using their existing work email and access the shared content while maintaining the inviting organization's security policies.

• ✗

  Customers use their Facebook accounts to sign in to a company's web application.

  Why it's wrong here

  This scenario describes Microsoft Entra B2C (Business-to-Consumer), which is designed for managing customer identities and access to consumer-facing applications. B2C allows customers to sign in using social identity providers like Facebook or by creating local accounts. This differs fundamentally from B2B, which focuses on inviting users from other organizations' directories for business collaboration, rather than managing individual consumer accounts.

Go deeper

Related to this question