Your company has the divisions shown in the following table. Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user au...

Your company has the divisions shown in the following table.

Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?

A. Configure Azure AD join. B. Configure Azure AD Identity Protection. C. Use Azure AD entitlement management to govern external users. D. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).