SC-300 Certification Practice Question #17

Question

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1.

A contractor uses the credentials of user1@outlook.com.

You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com.

What should you do?

Accepted Answer

The contractor authenticates with an existing external identity (user1@outlook.com), which is the B2B collaboration scenario — invite the external account as a guest and grant it access to App1. New-MgInvitation (Microsoft.Graph.Identity.SignIns) creates exactly that invitation and is the v1.0 replacement for the deprecated New-AzureADMSInvitation. Entra Connect sync only synchronizes on-premises AD accounts (not a personal Microsoft/Outlook account), adding a custom domain name does not provide application access, and Application Proxy publishes internal web apps externally rather than granting a guest sign-in. Suggested Answer, Most Voted, and MS Learn all converge on D.

More SC-300 practice questions