Exam AZ-104 topic 2 question 110 discussion

Collaboration restrictions settings in Microsoft Entra (formerly Azure AD) are specifically designed to control which external domains can be invited as guests.

Correct Sign in to the Microsoft Entra admin center: Ensure you have the External Identity Provider Administrator role. Navigate to External Collaboration Settings: Go to Identity > External Identities > External collaboration settings. Set Up an Allowlist: Under Collaboration restrictions, select Allow invitations only to the specified domains (most restrictive).

The correct answer is D. From External collaboration settings, configure the Collaboration restrictions settings. Why others are wrong A. From Cross-tenant access settings, configure the Tenant restrictions settings Tenant restrictions are not used to control guest user invitations. Instead, they manage access to resources between tenants, such as accessing applications or services in another tenant. B. From Cross-tenant access settings, configure the Microsoft cloud settings Microsoft cloud settings in Cross-tenant access are used for configuring collaboration across Microsoft clouds, like Azure Government or Microsoft 365 Global. It does not restrict guest invitations to specific domains. C. From External collaboration settings, configure the Guest user access restrictions settings Guest user access restrictions settings manage what external guest users can access after they are invited (e.g., whether they can see the tenant directory or access groups). They do not restrict who can be invited.

D is corerct

D is correct answer.