Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureMedium
A global media company is designing a Zero Trust architecture for its content creation and distribution platform. They frequently collaborate with external partners, freelancers, and vendors who need temporary, secure access to specific project files and collaboration tools hosted in Azure. The company requires that these external users authenticate using their existing corporate identities (e.g., from their own Google Workspace or Microsoft 365 tenants) and that their access is governed by the media company's Conditional Access policies. Which Azure AD feature is BEST suited to manage this external collaboration securely within a Zero Trust framework?
- AAzure AD Domain Services
- BAzure AD Application Proxy
- CAzure AD B2C (Business to Consumer)
- DAzure AD B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD B2B Collaboration
Azure AD B2B Collaboration allows organizations to securely invite external users (guests) to their Azure AD tenant, enabling them to sign in with their own identities (e.g., Google, Microsoft 365, or any email). These guest accounts can then be managed and subjected to the host organization's Conditional Access policies, perfectly aligning with the need for secure, governed external access in a Zero Trust model.
Why the other options are wrong
- A. Azure AD Domain Services provides managed domain services for cloud-based VMs and applications, primarily for legacy directory-aware workloads, and is not for managing external user collaboration.
- B. Azure AD Application Proxy provides secure remote access to on-premises web applications. It is not designed for managing external user identities or collaboration workflows.
- C. Azure AD B2C is for managing customer (consumer) identities for applications, not for business-to-business collaboration with external corporate identities.
Azure AD B2B Collaboration
A feature of Azure Active Directory that enables secure sharing of applications and resources with external users from any organization, while maintaining control over corporate data.
- External users sign in with their own identities.
- Managed as guest users in the host tenant.
- Supports Conditional Access policies for guest access.
Memory trick: B2B: Bring Your Own Identity, Get Our Access Control.