SC-300 Certification Practice Question #83

Question

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1.

A contractor uses the credentials of user1@outlook.com.

You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com.

What should you do?

Accepted Answer

The contractor must sign in with their existing `user1@outlook.com` (a personal Microsoft account) rather than a new credential. That is exactly the Microsoft Entra B2B collaboration guest scenario: you invite the external email as a guest user, and authentication is handled by their own identity provider (the Microsoft account), with the object created as UserType=Guest in contoso.com and then granted access to App1. New-MgUser would create a standard member with brand-new contoso credentials — the contractor could not authenticate as user1@outlook.com. External collaboration settings only govern *who may invite* and policy, not the actual access grant. Adding a custom domain is irrelevant to a single external contractor. The Suggested Answer (C) matches MS Learn directly; there are no community votes recorded, but the documentation alignment is strong, so confidence is high.

More SC-300 practice questions