Hard1 markMultiple Choice
AZ-305 · Question 06 · Domain 1.2: Authentication and Authorization
Your organization collaborates with 50 external partner companies. You need to grant partner employees access to an internal Azure App Service web app. The solution must ensure that partner access is automatically reviewed every 90 days, and access is revoked if the partner employee leaves their respective company. What should you recommend?
Your organization collaborates with 50 external partner companies. You need to grant partner employees access to an internal Azure App Service web app. The solution must ensure that partner access is automatically reviewed every 90 days, and access is revoked if the partner employee leaves their respective company. What should you recommend?
Answer options:
A.
Microsoft Entra External ID (B2B) with Entra ID Governance access reviews.
B.
Microsoft Entra B2C with custom policies.
C.
Create local guest accounts in your Entra ID and use a PowerShell script for reviews.
D.
Azure AD Domain Services with forest trusts.
How to approach this question
Combine the external collaboration feature with the identity governance feature.
Full Answer
A.Microsoft Entra External ID (B2B) with Entra ID Governance access reviews.✓ Correct
Microsoft Entra External ID (B2B) with Entra ID Governance access reviews.
Entra B2B allows partners to authenticate against their own directory (solving the lifecycle issue), while Access Reviews handle the 90-day compliance requirement.
Common mistakes
Confusing B2B (partners) with B2C (consumers).
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6
55 questions · hints · full answers · grading
More questions from this exam
Q01Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-pre...MediumQ02A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to...HardQ03An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT bud...HardQ04You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azu...EasyQ05A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy...Medium
Expert