Lab 02 knowledge check¶

Complete all 50 questions before opening the answer key. Allow about 50–60 minutes and choose the single best answer.

Use the result as a learning signal: 85–100% indicates mastery, 70–84% calls for targeted review, and below 70% means repeat the mapped lab tasks before retrying.

LAB02-Q01 — Foundational¶

The guest collaboration review compares four claims for the external-collaboration and SSPR pilot requirement to confirm that the tenant has an unused product unit before assignment. Which claim is technically sound?

A. A user's usageLocation must be set before Microsoft Entra can assign many commercial licenses.
B. A B2B invitation creates an external user object and sends or returns a redemption invitation.
C. A tenant can assign a product license only when its subscribed quantity has an unconsumed unit.
D. SSPR can target all users or selected groups, subject to tenant licensing and authentication-method policy.

LAB02-Q02 — Foundational¶

The guest collaboration architecture note requires the external-collaboration and SSPR pilot environment to supply the regional attribute required before a cloud license is assigned. Which statement defines the relevant guest collaboration boundary?

A. Direct licensing adds a SKU to one user and can disable selected service plans within that SKU.
B. externalUserState changes from PendingAcceptance after the invited guest successfully redeems access.
C. A user's usageLocation must be set before Microsoft Entra can assign many commercial licenses.
D. The tenant policy determines how many and which registered methods a user needs for password reset.

LAB02-Q03 — Foundational¶

A new guest collaboration operator must explain why the external-collaboration and SSPR pilot can license one pilot user without depending on group membership. Which explanation is accurate?

A. Group-based licensing applies assigned product licenses to eligible members of a licensed group.
B. A guest remains a tenant directory object whose display name, sponsors, groups, and access require lifecycle governance.
C. Direct licensing adds a SKU to one user and can disable selected service plans within that SKU.
D. SSPR capabilities depend on eligible licensing, policy scope, and special rules for administrator accounts.

LAB02-Q04 — Foundational¶

The external-collaboration and SSPR pilot acceptance criteria require operators to license a rotating team through membership rather than individual assignments. Which service fact supports that requirement?

A. Group-based licensing applies assigned product licenses to eligible members of a licensed group.
B. A B2B invitation creates an external user object and sends or returns a redemption invitation.
C. SSPR can target all users or selected groups, subject to tenant licensing and authentication-method policy.
D. A tenant can assign a product license only when its subscribed quantity has an unconsumed unit.

LAB02-Q05 — Foundational¶

A guest collaboration reviewer challenges whether the external-collaboration and SSPR pilot can send a redeemable collaboration invitation to an external address. Which response resolves the concern?

A. externalUserState changes from PendingAcceptance after the invited guest successfully redeems access.
B. The tenant policy determines how many and which registered methods a user needs for password reset.
C. A user's usageLocation must be set before Microsoft Entra can assign many commercial licenses.
D. A B2B invitation creates an external user object and sends or returns a redemption invitation.

LAB02-Q06 — Foundational¶

The external-collaboration and SSPR pilot handoff omits the guest collaboration rule needed to distinguish an invited account from one that has accepted its invitation. Which statement should the team add?

A. externalUserState changes from PendingAcceptance after the invited guest successfully redeems access.
B. A guest remains a tenant directory object whose display name, sponsors, groups, and access require lifecycle governance.
C. SSPR capabilities depend on eligible licensing, policy scope, and special rules for administrator accounts.
D. Direct licensing adds a SKU to one user and can disable selected service plans within that SKU.

LAB02-Q07 — Foundational¶

A guest collaboration incident review of the external-collaboration and SSPR pilot depends on the ability to identify external collaborators without relying on their display names. Which platform description is reliable?

A. SSPR can target all users or selected groups, subject to tenant licensing and authentication-method policy.
B. A tenant can assign a product license only when its subscribed quantity has an unconsumed unit.
C. Group-based licensing applies assigned product licenses to eligible members of a licensed group.
D. A guest remains a tenant directory object whose display name, sponsors, groups, and access require lifecycle governance.

LAB02-Q08 — Foundational¶

An identity administrator preparing a controlled external-collaboration and SSPR pilot is updating the guest collaboration runbook. The requirement is to limit password-reset registration to the approved pilot population. Which statement describes Azure behavior correctly?

A. The tenant policy determines how many and which registered methods a user needs for password reset.
B. A user's usageLocation must be set before Microsoft Entra can assign many commercial licenses.
C. SSPR can target all users or selected groups, subject to tenant licensing and authentication-method policy.
D. A B2B invitation creates an external user object and sends or returns a redemption invitation.

LAB02-Q09 — Foundational¶

A guest collaboration peer review asks how the external-collaboration and SSPR pilot should handle this outcome: allow only the approved proofs during password reset. Which explanation is accurate?

A. The tenant policy determines how many and which registered methods a user needs for password reset.
B. SSPR capabilities depend on eligible licensing, policy scope, and special rules for administrator accounts.
C. Direct licensing adds a SKU to one user and can disable selected service plans within that SKU.
D. externalUserState changes from PendingAcceptance after the invited guest successfully redeems access.

LAB02-Q10 — Foundational¶

For the external-collaboration and SSPR pilot, the guest collaboration plan must stop safely when the tenant lacks the entitlement or role needed for reset changes. Which statement about guest collaboration belongs in the external-collaboration and SSPR pilot record?

A. A tenant can assign a product license only when its subscribed quantity has an unconsumed unit.
B. Group-based licensing applies assigned product licenses to eligible members of a licensed group.
C. A guest remains a tenant directory object whose display name, sponsors, groups, and access require lifecycle governance.
D. SSPR capabilities depend on eligible licensing, policy scope, and special rules for administrator accounts.

LAB02-Q11 — Foundational¶

A guest collaboration dry run shows no external-collaboration and SSPR pilot command will confirm that the tenant has an unused product unit before assignment. Which action belongs before execution?

A. Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs.
B. Track the guest by object ID and wait for redemption before depending on interactive access.
C. Configure permitted reset methods and require users to register enough approved methods.
D. Read subscribedSkus and calculate enabled units minus consumed units before assigning a license.

LAB02-Q12 — Foundational¶

For the external-collaboration and SSPR pilot, operators need to supply the regional attribute required before a cloud license is assigned. Which change realizes that requirement?

A. Assign the SKU to the licensing group and add eligible users as members.
B. Set the user's two-letter usage location before submitting the license assignment.
C. Record the guest object ID and assign only the groups needed for the collaboration period.
D. Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path.

LAB02-Q13 — Foundational¶

Operators must automate the external-collaboration and SSPR pilot change needed to license one pilot user without depending on group membership. Which guest collaboration operation belongs in the runbook?

A. Create an invitation with the guest email address and an approved redirect URL.
B. Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs.
C. Enable SSPR for the approved pilot group before broadening the scope.
D. Read subscribedSkus and calculate enabled units minus consumed units before assigning a license.

LAB02-Q14 — Foundational¶

An external-collaboration and SSPR pilot review finds guest collaboration drift from the need to license a rotating team through membership rather than individual assignments. Which correction addresses that drift?

A. Track the guest by object ID and wait for redemption before depending on interactive access.
B. Configure permitted reset methods and require users to register enough approved methods.
C. Assign the SKU to the licensing group and add eligible users as members.
D. Set the user's two-letter usage location before submitting the license assignment.

LAB02-Q15 — Foundational¶

The external-collaboration and SSPR pilot window permits only the guest collaboration change needed to send a redeemable collaboration invitation to an external address. Which option respects the boundary?

A. Record the guest object ID and assign only the groups needed for the collaboration period.
B. Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path.
C. Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs.
D. Create an invitation with the guest email address and an approved redirect URL.

LAB02-Q16 — Applied¶

The guest collaboration preflight has passed; the external-collaboration and SSPR pilot must now distinguish an invited account from one that has accepted its invitation. Which operation should run?

A. Enable SSPR for the approved pilot group before broadening the scope.
B. Read subscribedSkus and calculate enabled units minus consumed units before assigning a license.
C. Assign the SKU to the licensing group and add eligible users as members.
D. Track the guest by object ID and wait for redemption before depending on interactive access.

LAB02-Q17 — Applied¶

The external-collaboration and SSPR pilot plan must identify external collaborators without relying on their display names while limiting the mutation scope to guest collaboration. Which action is appropriate?

A. Configure permitted reset methods and require users to register enough approved methods.
B. Set the user's two-letter usage location before submitting the license assignment.
C. Create an invitation with the guest email address and an approved redirect URL.
D. Record the guest object ID and assign only the groups needed for the collaboration period.

LAB02-Q18 — Applied¶

A guest collaboration ticket in the external-collaboration and SSPR pilot says to limit password-reset registration to the approved pilot population. Which guest collaboration action completes the external-collaboration and SSPR pilot request with minimal change?

A. Enable SSPR for the approved pilot group before broadening the scope.
B. Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path.
C. Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs.
D. Track the guest by object ID and wait for redemption before depending on interactive access.

LAB02-Q19 — Applied¶

The approach for the external-collaboration and SSPR pilot is approved, but the guest collaboration environment still cannot allow only the approved proofs during password reset. Which implementation step closes the gap?

A. Configure permitted reset methods and require users to register enough approved methods.
B. Read subscribedSkus and calculate enabled units minus consumed units before assigning a license.
C. Assign the SKU to the licensing group and add eligible users as members.
D. Record the guest object ID and assign only the groups needed for the collaboration period.

LAB02-Q20 — Applied¶

The identity administrator preparing a controlled external-collaboration and SSPR pilot may change the external-collaboration and SSPR pilot only to stop safely when the tenant lacks the entitlement or role needed for reset changes. Which guest collaboration action stays within that assignment?

A. Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path.
B. Set the user's two-letter usage location before submitting the license assignment.
C. Create an invitation with the guest email address and an approved redirect URL.
D. Enable SSPR for the approved pilot group before broadening the scope.

LAB02-Q21 — Applied¶

The guest collaboration validator needs one external-collaboration and SSPR pilot query after the change to confirm that the tenant has an unused product unit before assignment. Which guest collaboration property should the external-collaboration and SSPR pilot validator inspect?

A. Inspect the user's inherited assignment state and confirm the assigning group ID.
B. Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
C. Review userType, group memberships, and sign-in state for the exact guest object.
D. Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.

LAB02-Q22 — Applied¶

The identity administrator preparing a controlled external-collaboration and SSPR pilot must confirm the external-collaboration and SSPR pilot, without mutation, can supply the regional attribute required before a cloud license is assigned. Which guest collaboration check qualifies?

A. Read usageLocation for the target object and confirm it is a valid country or region code.
B. Read the invited user's userType and externalUserState from the returned invitedUser ID.
C. Read the authorization policy and target-group configuration through Microsoft Graph.
D. Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.

LAB02-Q23 — Applied¶

The external-collaboration and SSPR pilot configuration is complete; the guest collaboration reviewers need evidence it can license one pilot user without depending on group membership. Which observation shows success?

A. Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
B. Query externalUserState and its change timestamp for the invited user.
C. Compare the user's registered authentication methods with the tenant's SSPR method requirements.
D. Read usageLocation for the target object and confirm it is a valid country or region code.

LAB02-Q24 — Applied¶

The guest collaboration validation asks whether the external-collaboration and SSPR pilot can license a rotating team through membership rather than individual assignments. Which observable state is strongest?

A. Review userType, group memberships, and sign-in state for the exact guest object.
B. Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.
C. Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
D. Inspect the user's inherited assignment state and confirm the assigning group ID.

LAB02-Q25 — Applied¶

An external-collaboration and SSPR pilot review must prove the guest collaboration ability to send a redeemable collaboration invitation to an external address. Which check avoids an adjacent feature?

A. Read the authorization policy and target-group configuration through Microsoft Graph.
B. Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
C. Inspect the user's inherited assignment state and confirm the assigning group ID.
D. Read the invited user's userType and externalUserState from the returned invitedUser ID.

LAB02-Q26 — Applied¶

The external-collaboration and SSPR pilot evidence bundle needs a guest collaboration result showing it can distinguish an invited account from one that has accepted its invitation. Which result belongs in the checkpoint?

A. Compare the user's registered authentication methods with the tenant's SSPR method requirements.
B. Query externalUserState and its change timestamp for the invited user.
C. Read usageLocation for the target object and confirm it is a valid country or region code.
D. Read the invited user's userType and externalUserState from the returned invitedUser ID.

LAB02-Q27 — Applied¶

Before external-collaboration and SSPR pilot cleanup, the guest collaboration team must reconfirm it can identify external collaborators without relying on their display names. Which read-only inspection should run?

A. Review userType, group memberships, and sign-in state for the exact guest object.
B. Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.
C. Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
D. Query externalUserState and its change timestamp for the invited user.

LAB02-Q28 — Applied¶

The external-collaboration and SSPR pilot setup reports success after the guest collaboration attempt to limit password-reset registration to the approved pilot population. Which guest collaboration read-only observation proves the external-collaboration and SSPR pilot outcome?

A. Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
B. Inspect the user's inherited assignment state and confirm the assigning group ID.
C. Read the authorization policy and target-group configuration through Microsoft Graph.
D. Review userType, group memberships, and sign-in state for the exact guest object.

LAB02-Q29 — Applied¶

The guest collaboration log says the external-collaboration and SSPR pilot can now allow only the approved proofs during password reset. Which guest collaboration state should the external-collaboration and SSPR pilot acceptance test retain?

A. Read usageLocation for the target object and confirm it is a valid country or region code.
B. Compare the user's registered authentication methods with the tenant's SSPR method requirements.
C. Read the invited user's userType and externalUserState from the returned invitedUser ID.
D. Read the authorization policy and target-group configuration through Microsoft Graph.

LAB02-Q30 — Applied¶

The external-collaboration and SSPR pilot rejects guest collaboration exit status as proof it can stop safely when the tenant lacks the entitlement or role needed for reset changes. Which external-collaboration and SSPR pilot result is valid evidence?

A. Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
B. Query externalUserState and its change timestamp for the invited user.
C. Compare the user's registered authentication methods with the tenant's SSPR method requirements.
D. Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.

LAB02-Q31 — Applied¶

The external-collaboration and SSPR pilot troubleshooting scope is the guest collaboration need to confirm that the tenant has an unused product unit before assignment. Which condition should be corrected first?

A. The user has no usageLocation value when the license request is processed.
B. All enabled units for the selected SKU are already consumed.
C. The invitation exists, but the recipient has not completed redemption.
D. The pilot is a privileged administrator subject to stricter reset-method requirements.

LAB02-Q32 — Applied¶

The external-collaboration and SSPR pilot result is partial because the guest collaboration cannot supply the regional attribute required before a cloud license is assigned. Which condition accounts for that result?

A. The request used a product display name where Microsoft Graph requires the SKU GUID.
B. The offboarding job removed an invitation email but left the guest object and its group memberships active.
C. The user has no usageLocation value when the license request is processed.
D. All enabled units for the selected SKU are already consumed.

LAB02-Q33 — Applied¶

The guest collaboration evidence shows the external-collaboration and SSPR pilot cannot license one pilot user without depending on group membership. Which root cause fits that evidence?

A. The user was made a group owner but was not added to the licensed group's members.
B. The request used a product display name where Microsoft Graph requires the SKU GUID.
C. The test user is outside the group selected for SSPR.
D. The user has no usageLocation value when the license request is processed.

LAB02-Q34 — Applied¶

Although the external-collaboration and SSPR pilot is meant to let the guest collaboration license a rotating team through membership rather than individual assignments, its checkpoint fails. Which guest collaboration defect explains the failure?

A. The user was made a group owner but was not added to the licensed group's members.
B. The redirect URL is not authorized for the tenant's invitation workflow.
C. The user registered fewer usable methods than the reset policy requires.
D. The request used a product display name where Microsoft Graph requires the SKU GUID.

LAB02-Q35 — Applied¶

The guest collaboration support team isolated the external-collaboration and SSPR pilot incident to the attempt to send a redeemable collaboration invitation to an external address. Which condition prevents success?

A. The invitation exists, but the recipient has not completed redemption.
B. The redirect URL is not authorized for the tenant's invitation workflow.
C. The pilot is a privileged administrator subject to stricter reset-method requirements.
D. The user was made a group owner but was not added to the licensed group's members.

LAB02-Q36 — Applied¶

An external-collaboration and SSPR pilot query surprises the identity administrator preparing a controlled external-collaboration and SSPR pilot during the guest collaboration attempt to distinguish an invited account from one that has accepted its invitation. Which finding explains it?

A. The offboarding job removed an invitation email but left the guest object and its group memberships active.
B. The invitation exists, but the recipient has not completed redemption.
C. All enabled units for the selected SKU are already consumed.
D. The redirect URL is not authorized for the tenant's invitation workflow.

LAB02-Q37 — Applied¶

Other external-collaboration and SSPR pilot components are healthy, but the guest collaboration still cannot identify external collaborators without relying on their display names. Which state causes the isolated failure?

A. The test user is outside the group selected for SSPR.
B. The user has no usageLocation value when the license request is processed.
C. The offboarding job removed an invitation email but left the guest object and its group memberships active.
D. The invitation exists, but the recipient has not completed redemption.

LAB02-Q38 — Applied¶

During a guest collaboration fault drill, the external-collaboration and SSPR pilot does not limit password-reset registration to the approved pilot population. Which finding identifies the defect?

A. The user registered fewer usable methods than the reset policy requires.
B. The request used a product display name where Microsoft Graph requires the SKU GUID.
C. The offboarding job removed an invitation email but left the guest object and its group memberships active.
D. The test user is outside the group selected for SSPR.

LAB02-Q39 — Applied¶

The external-collaboration and SSPR pilot setup finishes, yet the guest collaboration cannot allow only the approved proofs during password reset. Which misconfiguration explains the mismatch?

A. The pilot is a privileged administrator subject to stricter reset-method requirements.
B. The user was made a group owner but was not added to the licensed group's members.
C. The user registered fewer usable methods than the reset policy requires.
D. The test user is outside the group selected for SSPR.

LAB02-Q40 — Applied¶

A guest collaboration break/fix in the external-collaboration and SSPR pilot fails when operators try to stop safely when the tenant lacks the entitlement or role needed for reset changes. Which diagnosis fits?

A. The pilot is a privileged administrator subject to stricter reset-method requirements.
B. All enabled units for the selected SKU are already consumed.
C. The redirect URL is not authorized for the tenant's invitation workflow.
D. The user registered fewer usable methods than the reset policy requires.

LAB02-Q41 — Advanced¶

The external-collaboration and SSPR pilot has two guest collaboration gates: confirm that the tenant has an unused product unit before assignment, then prove the external-collaboration and SSPR pilot state. Which guest collaboration sequence works?

A. First, Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs. Then, Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
B. First, Record the guest object ID and assign only the groups needed for the collaboration period. Then, Review userType, group memberships, and sign-in state for the exact guest object.
C. First, Read subscribedSkus and calculate enabled units minus consumed units before assigning a license. Then, Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
D. First, Enable SSPR for the approved pilot group before broadening the scope. Then, Read the authorization policy and target-group configuration through Microsoft Graph.

LAB02-Q42 — Advanced¶

Which guest collaboration path makes the external-collaboration and SSPR pilot able to supply the regional attribute required before a cloud license is assigned, then inspects the defining properties?

A. First, Assign the SKU to the licensing group and add eligible users as members. Then, Inspect the user's inherited assignment state and confirm the assigning group ID.
B. First, Set the user's two-letter usage location before submitting the license assignment. Then, Read usageLocation for the target object and confirm it is a valid country or region code.
C. First, Enable SSPR for the approved pilot group before broadening the scope. Then, Read the authorization policy and target-group configuration through Microsoft Graph.
D. First, Configure permitted reset methods and require users to register enough approved methods. Then, Compare the user's registered authentication methods with the tenant's SSPR method requirements.

LAB02-Q43 — Advanced¶

At the external-collaboration and SSPR pilot approval gate, operators must show that the guest collaboration can license one pilot user without depending on group membership. Which guest collaboration configure-and-check pair is defensible?

A. First, Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs. Then, Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
B. First, Create an invitation with the guest email address and an approved redirect URL. Then, Read the invited user's userType and externalUserState from the returned invitedUser ID.
C. First, Configure permitted reset methods and require users to register enough approved methods. Then, Compare the user's registered authentication methods with the tenant's SSPR method requirements.
D. First, Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path. Then, Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.

LAB02-Q44 — Advanced¶

The external-collaboration and SSPR pilot forbids a partial guest collaboration result. Operators must first license a rotating team through membership rather than individual assignments and afterward confirm the external-collaboration and SSPR pilot outcome. Which guest collaboration sequence is complete?

A. First, Track the guest by object ID and wait for redemption before depending on interactive access. Then, Query externalUserState and its change timestamp for the invited user.
B. First, Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path. Then, Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.
C. First, Read subscribedSkus and calculate enabled units minus consumed units before assigning a license. Then, Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
D. First, Assign the SKU to the licensing group and add eligible users as members. Then, Inspect the user's inherited assignment state and confirm the assigning group ID.

LAB02-Q45 — Advanced¶

Only the external-collaboration and SSPR pilot change needed to send a redeemable collaboration invitation to an external address is allowed, and guest collaboration proof is mandatory. Which pair fits?

A. First, Record the guest object ID and assign only the groups needed for the collaboration period. Then, Review userType, group memberships, and sign-in state for the exact guest object.
B. First, Create an invitation with the guest email address and an approved redirect URL. Then, Read the invited user's userType and externalUserState from the returned invitedUser ID.
C. First, Read subscribedSkus and calculate enabled units minus consumed units before assigning a license. Then, Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
D. First, Set the user's two-letter usage location before submitting the license assignment. Then, Read usageLocation for the target object and confirm it is a valid country or region code.

LAB02-Q46 — Advanced¶

The external-collaboration and SSPR pilot runbook separates guest collaboration mutation from validation while it must distinguish an invited account from one that has accepted its invitation. Which sequence proves it cleanly?

A. First, Enable SSPR for the approved pilot group before broadening the scope. Then, Read the authorization policy and target-group configuration through Microsoft Graph.
B. First, Set the user's two-letter usage location before submitting the license assignment. Then, Read usageLocation for the target object and confirm it is a valid country or region code.
C. First, Track the guest by object ID and wait for redemption before depending on interactive access. Then, Query externalUserState and its change timestamp for the invited user.
D. First, Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs. Then, Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.

LAB02-Q47 — Advanced¶

The external-collaboration and SSPR pilot checkpoint requires both this guest collaboration outcome—identify external collaborators without relying on their display names—and a read-only external-collaboration and SSPR pilot state check. Which guest collaboration response is complete?

A. First, Record the guest object ID and assign only the groups needed for the collaboration period. Then, Review userType, group memberships, and sign-in state for the exact guest object.
B. First, Configure permitted reset methods and require users to register enough approved methods. Then, Compare the user's registered authentication methods with the tenant's SSPR method requirements.
C. First, Submit addLicenses for the target user with the required SKU ID and any disabled plan IDs. Then, Read licenseAssignmentStates and confirm the intended SKU is assigned without an error state.
D. First, Assign the SKU to the licensing group and add eligible users as members. Then, Inspect the user's inherited assignment state and confirm the assigning group ID.

LAB02-Q48 — Advanced¶

The external-collaboration and SSPR pilot runbook must limit password-reset registration to the approved pilot population, then retain guest collaboration read-back evidence. Which external-collaboration and SSPR pilot pair completes both duties?

A. First, Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path. Then, Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.
B. First, Enable SSPR for the approved pilot group before broadening the scope. Then, Read the authorization policy and target-group configuration through Microsoft Graph.
C. First, Assign the SKU to the licensing group and add eligible users as members. Then, Inspect the user's inherited assignment state and confirm the assigning group ID.
D. First, Create an invitation with the guest email address and an approved redirect URL. Then, Read the invited user's userType and externalUserState from the returned invitedUser ID.

LAB02-Q49 — Advanced¶

To satisfy the guest collaboration requirement, operators must change the external-collaboration and SSPR pilot configuration and prove it can allow only the approved proofs during password reset. Which sequence is coherent?

A. First, Read subscribedSkus and calculate enabled units minus consumed units before assigning a license. Then, Query the selected SKU and confirm that available units remain greater than or equal to the requested assignments.
B. First, Create an invitation with the guest email address and an approved redirect URL. Then, Read the invited user's userType and externalUserState from the returned invitedUser ID.
C. First, Configure permitted reset methods and require users to register enough approved methods. Then, Compare the user's registered authentication methods with the tenant's SSPR method requirements.
D. First, Track the guest by object ID and wait for redemption before depending on interactive access. Then, Query externalUserState and its change timestamp for the invited user.

LAB02-Q50 — Advanced¶

The identity administrator preparing a controlled external-collaboration and SSPR pilot needs a safe external-collaboration and SSPR pilot change to stop safely when the tenant lacks the entitlement or role needed for reset changes, followed by guest collaboration evidence. Which pair merits approval?

A. First, Set the user's two-letter usage location before submitting the license assignment. Then, Read usageLocation for the target object and confirm it is a valid country or region code.
B. First, Verify licensing and use a nonprivileged pilot identity before validating the standard SSPR path. Then, Confirm the pilot's license assignment, scope membership, and registered methods as separate checks.
C. First, Track the guest by object ID and wait for redemption before depending on interactive access. Then, Query externalUserState and its change timestamp for the invited user.
D. First, Record the guest object ID and assign only the groups needed for the collaboration period. Then, Review userType, group memberships, and sign-in state for the exact guest object.

Open the answer key