Learn how to create guest user accounts in Azure AD and why they are the best option to allow external users easy access to Azure resources.
Table of Contents
Question
What kind of account would you create to allow an external organization easy access?
A. A guest user account for each member of the external team.
B. An external account for each member of the external team.
C. An administrator account for each member of the external team.
Answer
A. A guest user account for each member of the external team.
Explanation
A guest user account restricts users to just the access they need. Here is the explanation:
- A guest user account is a type of Azure Active Directory (Azure AD) account that allows external users to access Azure resources that they do not own. Guest users have limited permissions and can only access the resources that are shared with them by the host organization.
- An external account is a type of Azure AD account that is created by an external identity provider, such as Google or Facebook. External accounts are not managed by the host organization and do not have any access to Azure resources unless they are invited as guest users.
- An administrator account is a type of Azure AD account that has elevated privileges to manage Azure resources and settings. Administrator accounts are not suitable for external users, as they can pose security risks and violate compliance policies.
B is incorrect because there’s no such thing as an external account.
C is incorrect becase administrator accounts should be restricted to users who are responsible for your organization’s identity management.
Microsoft Azure Administrator AZ-104 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure Administrator AZ-104 exam and earn Microsoft Azure Administrator AZ-104 certification.