In the contoso.com tenant, you need to allow users to use a selected set of cloud apps from the fabrikam.com tenant. Which setting in the Microsoft Entra admin center should you configure for contoso.com?

To allow users from contoso.com to access cloud apps in fabrikam.com, you need to configure outbound access settings from the perspective of contoso.com. Specifically, within Cross-tenant access settings, the B2B collaboration settings under Outbound access define what contoso.com users can access in other tenants. This enables contoso.com to specify which external tenants its users can collaborate with and what resources they can access. "Inbound access settings in Cross-tenant access settings, configure the B2B direct connect settings" is incorrect because B2B direct connect is for shared channels in Microsoft Teams, not general cloud app access, and inbound settings are for controlling what external users can access in contoso.com. "External collaboration settings, configure the Collaboration restrictions settings" and "External collaboration settings, configure the Guest invite settings" are incorrect as these primarily control who can be invited into contoso.com as guests or restrict guest access, not what contoso.com users can access externally.