Exam MS-100 topic 4 question 45 discussion

Actual exam question from Microsoft's MS-100

Question #: 45
Topic #: 4

Your company has a Microsoft 365 subscription and a Microsoft Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
An external vendor has a Microsoft account that has a username of [email protected].
You plan to provide [email protected] with access to several resources in the subscription.
You need to add the external user account to contoso.onmicrosoft.com. The solution must ensure that the external vendor can authenticate by using [email protected].
What should you do?

A. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify ג€"UserPrincipalName [email protected].
B. From the Microsoft 365 admin center, add a contact, and then specify [email protected] as the email address.
C. From the Azure portal, add a new guest user, and then specify [email protected] as the email address.
D. From the Azure portal, add a custom domain name, and then create a new Azure AD user and use [email protected] as the username.

Show Suggested Answer

Suggested Answer: C 🗳️
You can invite guest users to the directory, to a group, or to an application. After you invite a user through any of these methods, the invited user's account is added to Azure Active Directory (Azure AD), with a user type of Guest. The guest user must then redeem their invitation to access resources. An invitation of a user does not expire.
The invitation will include a link to create a Microsoft account. The user can then authenticate using their Microsoft account. In this question, the external vendor already has a Microsoft account ([email protected]) so he can authenticate using that.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/b2b/add-users-administrator

by mkoprivnj at Dec. 18, 2020, 9:27 a.m.

Comments

Submit Cancel

mkoprivnj

Highly Voted 4 years, 4 months ago

C for sure!

upvoted 8 times

...

Razuli

Highly Voted 4 years ago

C, tested this on my tenant

upvoted 6 times

...

Startkabels

Most Recent 2 years, 5 months ago

Selected Answer: C

In this question the answer is to create a guest user in AAD, but it can be done in PS too. I've seen another similar question where a PS command is the answer, but it's New-AzureADMSInvitation instead new-azureaduser

upvoted 2 times

...

Hani_Ajaj

4 years, 2 months ago

You need to configure the environment to audit AD FS user authentication.