SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID for identity management. You need to allow external partners to access a specific SharePoint Online site without requiring them to have a Microsoft Entra ID account in your tenant. Which feature should you use?
⚠ Common exam trap
Candidates often confuse Microsoft Entra B2B collaboration with Microsoft Entra B2C, assuming both are for external users, but B2C is for customer-facing apps with self-service sign-up, while B2B is for granting access to business partners with existing identities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Microsoft Entra B2B collaboration to invite partners as guest users.
Microsoft Entra B2B collaboration is the correct feature because it allows you to invite external partners as guest users who can access resources like SharePoint Online using their own identity (e.g., a Microsoft account or a corporate account from another identity provider) without requiring a separate Microsoft Entra ID account in your tenant. This leverages the B2B collaboration protocol, which uses SAML/WS-Federation or OIDC for federation, enabling seamless access while maintaining centralized access control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use Microsoft Entra B2B collaboration to invite partners as guest users.
Why this is correct
Microsoft Entra B2B collaboration is the specific feature designed for securely sharing applications and resources with external users from other organizations. It enables partners to use their own corporate or social identities (e.g., Microsoft accounts, Google IDs) to authenticate, rather than requiring them to create new credentials in your tenant. Upon invitation, these partners are represented as guest user objects in your Microsoft Entra ID, allowing for granular access control to specified resources.
- ✗
Set up identity protection to allow external access.
Why it's wrong here
Microsoft Entra ID Protection is a security tool focused on detecting, investigating, and remediating identity-based risks, such as compromised credentials or suspicious sign-in activities. While crucial for securing identities and enforcing conditional access policies, it does not provide the mechanism to *grant* or *enable* external access to organizational resources. Its role is to protect existing access, not to establish it for new external users.
- ✗
Configure Microsoft Entra B2C for the partners.
Why it's wrong here
Microsoft Entra B2C (Business-to-Consumer) is an identity and access management service specifically designed for managing customer identities when building consumer-facing applications. It allows customers to sign up and sign in using local accounts or social identity providers, but it is not intended for managing business-to-business relationships or inviting partners from other organizations to access internal resources. B2C creates a separate directory for consumer accounts, distinct from your corporate tenant.
- ✗
Create guest user accounts for each partner.
Why it's wrong here
While inviting external partners does result in the creation of guest user accounts within your Microsoft Entra ID tenant, simply stating "create guest user accounts" misses the crucial underlying mechanism. The process of securely inviting, authenticating, and managing these external identities, allowing them to use their own credentials from their home directory, is specifically facilitated by Microsoft Entra B2B collaboration. B2B collaboration is the feature that orchestrates the secure external access and lifecycle of these guest accounts.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
B2B collaboration
B2B collaboration is a feature in Microsoft Entra ID that lets organizations securely share access to their apps and resources with external business partners using their own identity systems.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.