Global Administrator or a limited Azure AD directory role like Guest Inviter or User Administrator is correct. This option names the roles that are allowed to create or invite guest users in the tenant directory.

Global Administrator has full directory permissions and can create and invite guest accounts as part of its broad administrative privileges.

Guest Inviter is a narrow role that is specifically intended to allow users to invite external guests without giving wider administrative rights. User Administrator can create and manage user accounts including guest users and so it can also be used to add guests when that level of access is assigned.

Compliance Administrator is incorrect because that role is focused on compliance tasks such as data governance, eDiscovery, and information protection and it does not grant permissions to create or invite guest users.

Privileged Role Administrator is incorrect because that role manages role assignments and role settings but it does not by itself grant the ability to invite guest users unless the user also has a role that allows user creation or guest invitations.

Security Administrator is incorrect because that role is centered on security features and incident response and it does not provide the permissions needed to create or invite guest accounts in the directory.

Full AWS Practitioner Certification Question