Exam MS-102 topic 1 question 119 discussion

I'll go for 1) 1,2,3 and 4 2) 2

1. With the default configuration all users (user 1, user 2, user 3 and user 4) 2. User admin (user 2 only) can change security group membership

ChatGPT o3: Create guest user accounts: User2 only Add User3 to Admin1: User2 only Explanation: User2 (User Administrator): Can create guest users (via default external collaboration settings). Can manage group memberships (including adding users to security groups like Admin1). User1 (Privileged Role Administrator): Can assign Azure AD roles, but cannot manage regular security group membership or invite guests. User3 (Security Administrator): Focuses on security features and has no guest or group membership permissions. User4 (Billing Administrator): Only handles billing and licensing, no user or group management rights.

1: - Only User2: User Administrators have the necessary permissions to manage user accounts, including creating guest users. 2: - User1 + User2 + User3 (Privileged Role Administrator) Can manage administrative accounts and modify group memberships. User2 (User Administrator) Can manage user accounts and group memberships. User3 in reality cannot himself to Admin1, because users cannot modify their own group memberships to prevent privilege escalation. This is a security measure to ensure that no single user can unilaterally increase their own permissions. But there is no answer alternative for User1 and User2 only.

I think the answer is correct, neither Billing, security nor privileged administrator can CREATE guest users... so: 1) user 2. 2) user2.

created guest users restricted to admin such as Global Admin, and User Admin. the question is create not invite!! the difference between create and invite is: create: create a guest without sending an invite mail. invite: send an invitation to the guest.

B2B "External collaboration settings have default configuration" = means anyone can invite guest users. Answer is Box1: All users Box2: user2

This question is tricky, there is NO create guest option in Entra users, just invite guest so 1) All users 2)User2

1) User 2 2) User 2 https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal Prerequisites To complete the scenario in this quickstart, you need: A role that allows you to create users in your tenant directory, such as at least a Guest Inviter role or a User Administrator.

Prerequisites To complete the scenario in this quickstart, you need: A role that allows you to create users in your tenant directory, such as at least a "Guest Inviter role" or a "User administrator". Access to a valid email address outside of your Microsoft Entra tenant, such as a separate work, school, or social email address. You'll use this email to create the guest account in your tenant directory and access the invitation. Ref: https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal#prerequisites and below the prerequisites, it state: Invite an external guest user Tip Steps in this article might vary slightly based on the portal you start from. Sign in to the Microsoft Entra admin center as at least a "User administrator". Browse to Identity > Users > All users. I will go with user 2 & user 2 whether creates or invite it states User Adminstrator.

"Create" guest users or "Invite" guest users is the same action?

Default config means all users including those without any role can also invite guests only user admin can manage groups

Specify who can invite guests: By default, all users in your organization, including B2B collaboration guest users, can invite external users to B2B collaboration. If you want to limit the ability to send invitations, you can turn invitations on or off for everyone, or limit invitations to certain roles.

Given answer is correct. https://learn.microsoft.com/en-us/azure/active-directory/external-identities/b2b-quickstart-add-guest-users-portal To complete the scenario in this quickstart, you need: A role that allows you to create users in your tenant directory, such as at least a Guest Inviter role or a User administrator.

Answer is 1,2,3,4 and user 2 Sign in to the Azure portal with an account that's been assigned the Global administrator, Guest, inviter, or User administrator role.

A Standard use Be able (to default) to create Guest users, The user have access to portal.azure.com. Try for me In the first option, all users (user 1 user 2 user 3 and user 4)