StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Identity and access

Practice question 58 of 400 · medium

A public retail application needs customer registration and sign-in separated from employee resources. Which identity architecture is the best fit?

Choose the single best answer.

  1. A.Create employee-style accounts in the workforce directory and treat employee access policies as the complete consumer experience.
  2. B.Use External ID customer identity in an external tenant.
  3. C.Invite every retail customer as a workforce guest and use employee collaboration onboarding as the customer journey.
  4. D.Use only application service-principal identities to sign in customers without an individual customer identity design.
Show the answer and explanation

✓ Correct answer

  • Use External ID customer identity in an external tenant.

An external tenant provides an appropriate customer sign-up/sign-in experience separated from employee resources. Workforce guest or employee accounts address other populations and do not fit the stated tenant separation. Service principals represent workloads, not a complete end-customer identity architecture. Source: AZ-305 Study Guide.pdf, PDF page(s) 14-15.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.