Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A global media company is designing a Zero Trust architecture for its content creation and distribution workflows, which involve frequent collaboration with external partners, freelancers, and agencies. The company needs to provide these external users with secure, governed access to specific applications and data within their Azure environment, ensuring that access is granted only after strict identity verification and compliance checks. Which Azure Active Directory capability is essential for managing this external access effectively within a Zero Trust framework?
- AAzure AD Privileged Identity Management (PIM)
- BAzure AD Connect
- CAzure AD Application Proxy
- DAzure AD B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD B2B Collaboration
Azure AD B2B Collaboration is designed for securely sharing applications and resources with external users (guests), allowing them to use their own identities while enabling the host organization to enforce Zero Trust policies like MFA, conditional access, and access reviews.
Why the other options are wrong
- A. Azure AD PIM manages just-in-time access for privileged roles within the organization, not for external user collaboration.
- B. Azure AD Connect synchronizes on-premises Active Directory identities with Azure AD and is not directly for managing external collaboration access.
- C. Azure AD Application Proxy provides secure remote access to on-premises web applications for internal users, not for managing external user collaboration.
Azure AD B2B Collaboration
Azure AD B2B Collaboration allows organizations to securely invite external users (guests) to their Azure AD tenant, granting them access to applications and resources while maintaining control over their access policies.
- Enables external users to use their own identities (e.g., Microsoft accounts, Google, federated identities).
- Integrates with Conditional Access, MFA, and access reviews for Zero Trust enforcement.
- Simplifies management of external partner access to organizational resources.
Memory trick: B2B is 'Business-to-Business' sharing, but 'Better-to-Be-Secure'.