exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 1 question 18 discussion

Actual exam question from Microsoft's MS-100
Question #: 18
Topic #: 1
[All MS-100 Questions]

Your company's Microsoft Azure Active Directory (Azure AD) tenant includes four users that are configured with the Privileged role administrator, the User administrator, the Security administrator, and the Billing administrator roles respectively.
A security group has been included in the tenant for the purpose of managing administrative accounts.
Which of the four roles can be used to create a guest user account?

  • A. The Privileged role administrator role.
  • B. The User administrator role.
  • C. The Security administrator role.
  • D. The Billing administrator role.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
References:
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
MartiFC
Highly Voted 3 years, 10 months ago
Is correct! Only Guest inviter and User administrator can create guest user >> https://docs.microsoft.com/en-us/azure/active-directory/roles/delegate-by-task
upvoted 8 times
Olamilekinsin
3 years, 6 months ago
Thank you for the link
upvoted 1 times
...
...
MartiFC
Highly Voted 3 years, 10 months ago
The ask say CREATE. Not say INVITE. This is the keywork
upvoted 6 times
zyir
3 years, 8 months ago
You will need to invite before a guest can be created right?
upvoted 2 times
...
rfox321
3 years, 8 months ago
1000% correct my dude
upvoted 1 times
...
...
Nussi1108
Most Recent 2 years, 4 months ago
Nur die Rolle "Benutzeradministrator" oder "Privilegierter Administrator" kann verwendet werden, um ein Gastbenutzerkonto zu erstellen.
upvoted 1 times
...
Don123
2 years, 5 months ago
B. The User administrator role. The User administrator role in Azure AD is responsible for managing user accounts, including creating, modifying, and deleting user accounts. This includes the ability to create guest user accounts, which are used to give external users access to certain resources within your tenant.
upvoted 1 times
...
mllerena
2 years, 8 months ago
B https://learn.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure#configure-settings-in-the-portal Solo los usuarios asignados a funciones de administrador específicas pueden invitar a usuarios invitados : para permitir que solo los usuarios con funciones de administrador inviten a personas, seleccione este botón de opción. Los roles de administrador incluyen Administrador global, Administrador de usuarios e Invitador invitado .
upvoted 1 times
...
cdatexwintel
3 years, 5 months ago
Selected Answer: B
Is correct
upvoted 1 times
...
xyzfra
3 years, 6 months ago
I passed the exam last week with 822 and these guest related questions are still not clear to me. I perfectly know how guests work. By default, every user can INVITE guests. This action (INVITE) causes the creation of a guest user on your tenant, BUT, you can also go under Azure AD admin, and CREATE a guest user. So, INVITE and CREATE are different operations. Who knows what Microsoft is asking for in this kind of questions....
upvoted 1 times
tf444
3 years, 6 months ago
Wow, the end result is the same , guest user in the tenant. Invite or create.
upvoted 1 times
...
Grudo
3 years, 5 months ago
It's not difficult to understand. By default, all users can invite B2B collaboration users, this is correct. Alternatively, administrators can also "create" user accounts in the home directory for which the tenant is authoritative (i.e., using your own vanity or custom domains). So yes, they are two distinctly separate operations.
upvoted 1 times
Grudo
3 years, 5 months ago
That should say that administrators can "create" GUEST user accounts in the home directory. That is, user objects with the "Guest" user type attribute.
upvoted 1 times
...
...
...
YClaveria
3 years, 8 months ago
If you go to https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference, there is an action and description column for each admin role. The action "microsoft.directory/users/inviteGuest" is included only under Directory Writers, Guest Inviter, and User Admin. It is not included under Billing, Privileged role, and security admin.
upvoted 4 times
...
zul_n
3 years, 9 months ago
B is correct User Management Admin • Reset passwords • Monitor service health • Add/delete user accounts - users only • Manage service reqeusts
upvoted 6 times
...
TEEEEEEEEEE
3 years, 10 months ago
Question is "Which of the four roles can be used to create a guest user account?". Roles not Users. Of the four roles, only the User Administrator can invite guests.
upvoted 2 times
...
Madball
3 years, 10 months ago
All accounts can invite, however, if it's only asking for one, then I would go with the user administrator on this question, because they may have changed the default settings.
upvoted 1 times
...
Davidchercm
3 years, 10 months ago
is the answer correct ?
upvoted 1 times
dminerva94
3 years, 10 months ago
No, all accounts can invite guests
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...