[&] You manage an Azure subscription for INE student services.  The primary Azure AD tenant is ine-students.com.  You need to assign the Contributor role on a resource group named production to a consultant named Christa from INE consulting. INE consulting has an Azure AD tenant at ine-consulting.com. What type of user will you add to the ine-students.com tenant? 
- Shadow user
- Guest user
- Synched user
- Cloud user

[&] You are the user account administrator for INE shipping.  User accounts are managed in an on-premises Active Directory domain and synchronized with an Azure AD tenant. The Premium P1 license is active for the tenant. INE shipping has recently implemented their customer service management system in SalesForce, using Azure AD for authentication.  You need to limit access to the SalesForce application so that only users with one of five sales-related job titles can access it.  What is the easiest way to meet this requirement?
- Create an Azure AD security group that uses dynamic user membership.  Add a membership filter than includes all five job titles.  Grant this group access to the SalesForce application in Azure AD
- Create an Active Directory security group.  Add users with any of the five job titles to the group.  Update HR processes to notify you whenever someone changes their job title or a new hire has one of the five job titles.  Grant this group access to the SalesForce application in Azure AD.
- Create an Azure security group with assigned membership.  Create a PowerShell script that adds all user accounts with one of the five job titles to the group. Create an Azure automation task to process the script once a day. Grant this group access to the SalesForce application in Azure AD.
- Create a conditional access policy.  Apply the policy to all users.  Select SalesForce under Cloud Applications.  Set the filter to allow users who have any of the five job titles.

[&] INEedABreak is a small chain of spas. They do not have a data center and control access to all of their cloud based apps with Azure AD.  They have recently changed focus from customer management to client management and need to update the job titles of all 50 of their sales representatives.  What steps should they take to update the Azure AD user accounts with the least administrative effort?  (Select all that apply)
- Run the PowerShell script to update the user accounts
- Generate a CSV file with all of the changes
- Install the MSOnline Powershell module
- Download a PowerShell script that will process the CSV file and apply the changes
- Upload the CSV file via the Bulk Update interface in the Azure portal