SC-100 Certification Practice Question #152

Question

Your company has a Microsoft 365 ES subscription, an Azure subscription, on-premises applications, and Active Directory Domain Services (AD DS).
You need to recommend an identity security strategy that meets the following requirements:
✑ Ensures that customers can use their Facebook credentials to authenticate to an Azure App Service website
✑ Ensures that partner companies can access Microsoft SharePoint Online sites for the project to which they are assigned
The solution must minimize the need to deploy additional infrastructure components.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Customers authenticating with Facebook credentials to a public-facing App Service website is the textbook Azure AD B2C scenario — B2C is a CIAM service that federates to social identity providers such as Facebook without deploying additional infrastructure. Partner companies needing scoped access to SharePoint Online sites by assigned project map to Azure AD B2B with entitlement management access packages, which provision guest accounts and grant access to apps and SharePoint Online sites on a per-project, governed basis, again minimizing new infrastructure. The three AD Connect options (federation/AD FS, pass-through, password hash sync) are for synchronizing or federating an on-premises AD DS for the organization's own employees and would require extra infrastructure, so they are eliminated. Two Highly Voted comments (23 and 10 👍) plus several confirmations all agree with the displayed key and MS Learn, giving high confidence.

More SC-100 practice questions