Exam MS-100 topic 1 question 30 discussion

Actual exam question from Microsoft's MS-100

Question #: 30
Topic #: 1

Your company has a Microsoft 365 subscription.
You have been tasked with configuring external collaboration settings for your company's Microsoft Azure Active Directory (Azure AD) tenant.
You want to make sure that authorized users are able to create guest users in the tenant.
Which of the following actions should you take?
Which setting should you modify?

A. You should make sure that the Guests can invite setting is set to NO.
B. You should make sure that the Guest users permissions are limited setting is set to Yes.
C. You should make sure that the Members can invite setting is set to NO.
D. You should make sure that the Admins and users in the guest inviter role can invite setting is set to Yes.

Show Suggested Answer

Suggested Answer: D 🗳️
References:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/delegate-invitations https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/users-default-permissions

by emilianogalati at Aug. 26, 2021, 1:50 p.m.

Comments

Submit Cancel

Don123

2 years, 5 months ago

D. You should make sure that the Admins and users in the guest inviter role can invite setting is set to Yes. To make sure that authorized users are able to create guest users in the tenant, you should ensure that the "Admins and users in the guest inviter role can invite" setting is set to "Yes." This setting is found in the Azure AD external collaboration settings, and when it's set to "Yes," it allows users who are members of the guest inviter role or are global administrators to invite guest users to the tenant.

upvoted 1 times

...

MEG

3 years, 3 months ago

Selected Answer: D

https://docs.microsoft.com/en-us/azure/active-directory/external-identities/external-collaboration-settings-configure#to-configure-external-collaboration-settings

upvoted 2 times

...

Durden871

3 years, 4 months ago

The question asks, "You want to make sure that authorized users are able to create guest users in the tenant." There is no mention of making them the ONLY ones who can create guest accounts. The answer is D because D allows the permission. Again, no mention that others shouldn't.

upvoted 2 times

...

Wojer

3 years, 6 months ago

Truly speaking if A is not set up to NO then D has no point. Because everyone can invite guest by default

upvoted 2 times

Wojer

3 years, 6 months ago

I had in mind c need to be set to NO

upvoted 1 times

...

Don123

3 years, 8 months ago

I think this answers need to be updated, check the 365 portal, setting are different than than the answers related in this question.

upvoted 1 times

...

emilianogalati

3 years, 10 months ago

I think there is an error. If I change the D to NO, I will NOT be able to allow users to invite guest. Therefore it should be set on NO, or there should be another answer. I am right, aren't I?

upvoted 2 times

Aps123

3 years, 9 months ago

No, it says authorised users. So you need to add those users to guest inviter role.

upvoted 1 times

...