You need to grant external contractors from fabrikam.com self-service access to a SharePoint Online site and a line-of-business app for 90 days. Requests must require approval by the site owner, and access should automatically expire and be removed. You do not want to pre-create guest accounts. What should you configure? (Choose two)

To meet the requirements, you must use Azure AD Entitlement Management. First, create a connected organization for fabrikam.com. This allows external users from that domain to request access to resources without pre-creating guest accounts. Next, create a catalog to group the SharePoint site and line-of-business app. Within this catalog, create an access package. The access package policy should be configured for "users in connected organizations" (specifically fabrikam.com), require approval by the site owner, and set an access review period of 90 days with automatic removal upon expiration. Bulk inviting contractors is incorrect because the requirement is to not pre-create guest accounts and to allow self-service. Assigning Azure AD Premium P2 licenses is necessary for Entitlement Management, but it applies to the organization providing the access, not just internal users, and external users can use Entitlement Management features. Configuring cross-tenant access settings is important for B2B collaboration but does not provide the self-service, approval, or time-bound access management capabilities required; Entitlement Management is required for these specific needs.