Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureMedium
A global manufacturing company is implementing a Zero Trust strategy. They have recently acquired a smaller company with its own separate Azure AD tenant and on-premises infrastructure. The security architect needs to design a solution that allows employees from both companies to seamlessly access shared applications and resources, while maintaining the Zero Trust principle of 'verify explicitly' and ensuring consistent policy enforcement across tenants. Which Azure AD capability should be used to facilitate this cross-tenant collaboration securely?
- AAzure AD Domain Services
- BAzure AD B2C (Business-to-Consumer)
- CAzure AD B2B (Business-to-Business)
- DAzure AD Application Proxy
Show answer & explanationAnswer & explanation
Correct answer: C. Azure AD B2B (Business-to-Business)
Azure AD B2B is specifically designed for secure cross-organizational collaboration, allowing external users from partner organizations (like an acquired company with its own Azure AD) to access resources in your tenant while maintaining their original identity and ensuring 'verify explicitly' through their home tenant's authentication policies.
Why the other options are wrong
- A. Azure AD Domain Services provides managed domain services for cloud-based VMs, not for cross-tenant identity collaboration.
- B. Azure AD B2C is for managing consumer identities for public-facing applications, not for business-to-business collaboration.
- D. Azure AD Application Proxy provides secure remote access to on-premises web applications, not cross-tenant identity collaboration.
Azure AD B2B
Azure Active Directory B2B (Business-to-Business) collaboration allows you to securely share your applications and services with external users from any organization.
- External users sign in with their own credentials.
- Supports multi-factor authentication from their home tenant.
- Facilitates collaboration across different Azure AD tenants.
Memory trick: B2B for Business, B2C for Consumers.