Your company plans to use Office 365 and Microsoft SharePoint Online.
Another employee provisions the company’s Office 365 tenant. You discover that the employee can
create and manage SharePoint site collections.
You need to prevent the employee from creating or managing site collections. From which role
should you remove the employee?
A.
Service administrator
B.
SharePoint Online administrator
C.
Global administrator
D.
Site collection administrator
I would be inclined to agree. The question points out that “Another employee provisions the company’s Office 365 tenant” so they are by default the global admin, which is to say the Sharepoint Online Admin, as it says here https://support.office.com/en-gb/article/permissions-in-office-365-da585eea-f576-4f55-a1e0-87090b6aaa9d
The problem is, perhaps they are an IT staff member who is also needs global admin, why not? In which case the answer is B is it not?
https://support.office.com/en-us/article/Assigning-admin-roles-in-Office-365-EAC4D046-1AFD-4F1A-85FC-8219C79E1504
When they mention “another employee”, i think they are talking other than yourself. So when they say “you discover that the employee”, i think they are talking about the same employee.. Just my 2 sense. Hope it helps.
The question is a bit ambiguous, but the main being that the question clearly tells us that the person is already a global admin (able to provision tenant) and we are asked to halt its sharepoint admin power. At this time if you anwser “B” the user stay global admin role.
Agree with the answer above, you have to take away their Global Admin to stop them managing site collections, and hey, even if your removed their SharePoint Admin role, they could just add themself again, they are a Global Admin after all…
Answer C is correct