Managing Microsoft Teams: Configuring External Guest Access and Security Policies

Configuring External Guest Access and Security Policies

Question

Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear in the review screen.

Your company has a Microsoft 365 subscription.

You plan to configure the environment to allow external users to collaborate in Microsoft Teams by using guest access.

The company implements a new security policy that has the following requirements: -> Only guest users from specific domains must be allowed to connect to collaborate by using Microsoft Teams.

-> Guest users must be prevented from inviting other guests.

You need to recommend a solution to meet the security policy requirements.

Solution: From PowerShell, you run the New-CSExternalAccessPolicy and Set-CSExternalAccessPolicy cmdlets.

Does this meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

A.

https://docs.microsoft.com/en-us/microsoftteams/turning-on-and-using-call-quality-dashboard

The solution presented in the scenario does not fully meet the stated goals of the security policy, so the answer is B. No.

The New-CSExternalAccessPolicy and Set-CSExternalAccessPolicy cmdlets are used to configure external access settings for the entire organization, not for specific domains. Therefore, this solution does not meet the requirement of allowing only guest users from specific domains to connect to collaborate using Microsoft Teams.

In addition, the solution does not prevent guest users from inviting other guests, which is another requirement of the security policy. The New-CSExternalAccessPolicy and Set-CSExternalAccessPolicy cmdlets do not provide options to restrict guest users from inviting other guests.

To meet the stated goals, the following steps should be taken:

  1. Configure a list of allowed domains for external access in the Microsoft Teams admin center or using PowerShell.

  2. Create a guest access policy in the Microsoft Teams admin center or using PowerShell that restricts guest users from inviting other guests.

  3. Apply the guest access policy to the specific domains configured in step 1.

By following these steps, only guest users from specific domains will be allowed to collaborate using Microsoft Teams, and they will be prevented from inviting other guests, thus meeting the security policy requirements.