Question
You have a Microsoft 365 tenant named contoso.com.
Guest user access is enabled.
Users are invited to collaborate with contoso.com as shown in the following table.
| User email | User type | Invitation accepted | Shared resource |
|---|---|---|---|
| User1@outlook.com | Guest | No | Enterprise application |
| User2@fabrikam.com | Guest | Yes | Enterprise application |
From the External collaboration settings in the Azure Active Directory admin center, you configure the Collaboration restrictions settings as shown in the exhibit.
From a Microsoft SharePoint Online site, a user invites User3@fabrikam.com to the site.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Explanation
Statement 1 (Yes): Invitations are allowed only to the specified domains, and Outlook.com is on the allow list. User1's address is in outlook.com, so the pending invitation can still be redeemed and User1 gains access to the enterprise application.
Statement 2 (Yes): Collaboration restrictions are checked when an invitation is sent, not against guests who already exist. User2 accepted the invitation before the restriction applied, so User2 keeps access to the enterprise application even though fabrikam.com is not on the allow list.
Statement 3 (No): The new invitation to User3 is sent to fabrikam.com, which is not in the list of allowed target domains. The invitation is blocked, so User3 cannot accept it or reach the SharePoint site.
