ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam
Go to Exam

Exam AZ-305 topic 1 question 31 discussion

Actual exam question from Microsoft's AZ-305
Question #: 31
Topic #: 1
[All AZ-305 Questions]

A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft 365 and an Azure subscription.
Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS) and Azure AD Connect.
Contoso has a partnership with a company named Fabrikam. Inc. Fabrikam has an Active Directory forest and a Microsoft 365 tenant. Fabrikam has the same on- premises identity infrastructure components as Contoso.
A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource group in the Contoso subscription.
You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources
What should you recommend?

  • A. In the Azure AD tenant of Contoso. create cloud-only user accounts for the Fabrikam developers.
  • B. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
  • C. Configure an organization relationship between the Microsoft 365 tenants of Fabrikam and Contoso.
  • D. In the Azure AD tenant of Contoso, create guest accounts for the Fabnkam developers.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Zstefanovic at Sept. 1, 2022, 10:59 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Gowind
Highly Voted 2 years, 3 months ago
Selected Answer: D
Answer is correct: https://docs.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b Collaborate with any partner using their identities With Azure AD B2B, the partner uses their own identity management solution, so there is no external administrative overhead for your organization. Guest users sign in to your apps and services with their own work, school, or social identities. The partner uses their own identities and credentials, whether or not they have an Azure AD account. You don't need to manage external accounts or passwords. You don't need to sync accounts or manage account lifecycles.
upvoted 29 times
...
Snownoodles
Highly Voted 2 years, 3 months ago
Selected Answer: D
B2B, use own pasword, guest
upvoted 6 times
...
Thanveer
Most Recent 1 week, 2 days ago
Selected Answer: D
To ensure that the Fabrikam developers can use their existing credentials to access resources in the Contoso subscription and be assigned the Contributor role, you should create guest accounts for the Fabrikam developers in the Azure AD tenant of Contoso. So, the correct answer is D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers. This approach leverages Azure AD B2B (Business-to-Business) collaboration, allowing external users to access resources in your Azure AD tenant using their existing credentials. This way, the Fabrikam developers can use their existing credentials to access the resources in the Contoso subscription.
upvoted 1 times
...
SeMo0o0o0o
4 weeks, 1 day ago
Selected Answer: D
D is correct
upvoted 1 times
...
MeisAdriano
1 month, 2 weeks ago
Selected Answer: D
D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers. Here's why: Guest accounts in Azure AD (Azure B2B Collaboration): This allows external users (in this case, Fabrikam developers) to access resources in Contoso's Azure AD tenant using their existing credentials. The guest users can then be assigned the necessary roles (e.g., Contributor) to access the resource group.
upvoted 1 times
MeisAdriano
1 month, 2 weeks ago
Why the other options aren't suitable: A. Create cloud-only user accounts: This would require the Fabrikam developers to manage separate sets of credentials, which is not ideal as it does not meet the requirement of using their existing credentials. B. Configure a forest trust: While this might be a viable solution for on-premises resources, it complicates the cloud environment and doesn’t directly address the requirement of integrating with Azure AD and Microsoft 365. C. Configure an organization relationship between the Microsoft 365 tenants: This can facilitate collaboration features but doesn't grant the granular access control needed to assign specific Azure roles like Contributor. Using guest accounts simplifies access management and ensures that the Fabrikam developers can use their existing credentials securely and efficiently.
upvoted 1 times
...
...
23169fd
5 months, 3 weeks ago
Selected Answer: D
D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers. Explanation: Azure AD Guest Accounts: B2B Collaboration: Enables inviting users from external organizations (like Fabrikam) as guest users in your Azure AD tenant. Existing Credentials: Fabrikam developers can use their existing credentials to access resources in Contoso's Azure subscription. Role Assignment: You can assign the Contributor role to these guest accounts for the specific resource group.
upvoted 1 times
...
Toschu
1 year, 2 months ago
FYI: Since 2023 Q3 you would use cross tenant sync: https://learn.microsoft.com/en-us/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-overview Users are created as B2B/members instead of member type Guest
upvoted 4 times
Muffay
11 months, 1 week ago
I do not agree, as the question is about 2 seperate organizations. > Who should use? > Organizations that own multiple Microsoft Entra tenants and want to streamline intra-organization cross-tenant application access. > Cross-tenant synchronization is not currently suitable for use across organizational boundaries. Source: https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-overview#who-should-use
upvoted 1 times
...
...
Exams_Prep_2021
1 year, 2 months ago
Got this on Sept. 29, 2023
upvoted 3 times
...
lombri
1 year, 7 months ago
Selected Answer: D
Creating guest accounts, Fabrikam users can use their existing Azure AD credentials to authenticate and access resources in Contoso's subscription. This solution ensures that there is no need for any additional infrastructure, such as a forest trust or organization relationship, between the two companies.
upvoted 2 times
...
gvh
1 year, 7 months ago
Answer is D Moderator plase verify answer, name is written wrong of the company
upvoted 2 times
...
NotMeAnyWay
1 year, 8 months ago
Selected Answer: D
D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers. This solution allows Contoso to assign the necessary role to the Fabrikam developers while ensuring they can use their existing credentials to access resources. By creating guest accounts in Contoso's Azure AD tenant, you can establish a collaboration between the two organizations using Azure AD B2B (Business-to-Business). The guest accounts will enable Fabrikam developers to access the Contoso subscription with their existing credentials, providing a seamless and secure experience for cross-organization collaboration.
upvoted 2 times
...
johnD16
1 year, 8 months ago
Showed in exam 18.03.2023. correct passed 940/1000
upvoted 3 times
...
zellck
1 year, 9 months ago
Selected Answer: D
D is the answer. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b Azure Active Directory (Azure AD) B2B collaboration is a feature within External Identities that lets you invite guest users to collaborate with your organization. With B2B collaboration, you can securely share your company's applications and services with external users, while maintaining control over your own corporate data. Work safely and securely with external partners, large or small, even if they don't have Azure AD or an IT department.
upvoted 4 times
...
cp2323
1 year, 9 months ago
Selected Answer: D
Answer is correct
upvoted 1 times
...
jameslee
1 year, 9 months ago
compare external identities feature set at : https://learn.microsoft.com/en-us/azure/active-directory/external-identities/external-identities-overview#comparing-external-identities-feature-sets
upvoted 1 times
...
OPT_001122
1 year, 10 months ago
Selected Answer: D
D. In the Azure AD tenant of Contoso, create guest accounts for the Fabnkam developers. ans is correct Thanks to all who have mentioned the exam dates
upvoted 1 times
...
janvandermerwer
1 year, 10 months ago
Selected Answer: D
D - Devs won't have to change their passwords, using their own user credentials etc
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago