Exam MS-102 topic 1 question 127 discussion

Box 1 Microsoft 365 Box 2 Security They are swapped

Group1: Microsoft 365 This type of group is mail-enabled, supports email communication, and comes with an associated SharePoint Online site by default. => Microsoft 365 Groups are designed for collaboration across Microsoft services like Teams, SharePoint, and Outlook, providing a mail-enabled option with access to a SharePoint Online site. Group2: Security Security groups support dynamic membership and role assignments but are not mail-enabled. => Security Groups are used primarily for controlling access to resources. They support dynamic membership and role assignments but are not mail-enabled, meeting the requirements for Group2.

Please update this. G1: M365 and G2: Security. It shouldn't be the other way around.

"• Group2 must support dynamic membership and role assignments but must NOT be mail-enabled." All the options are mail enabled, except security, that we ca assume it is not.

"Group1 must be mail-enabled and have an associated Microsoft SharePoint Online site." Security is correct because no other accepts app as a member, only security groups. There´s no information that security group is not mail enabled, so we can assume it is.

Here are the correct group types to use for Group1 and Group2: Group1 (Mail-enabled and associated with a SharePoint Online site) Correct Group Type: Microsoft 365 Group Reason: Microsoft 365 Groups (formerly Office 365 Groups) are mail-enabled and integrate with SharePoint Online, Teams, and other Microsoft 365 services. Group2 (Supports dynamic membership and role assignments but NOT mail-enabled) Correct Group Type: Security Group Reason: Azure AD Security Groups can have dynamic membership and support role-based access control (RBAC) assignments, but they are not mail-enabled. Final Answer: Group1: Microsoft 365 Group Group2: Security Group

Damn I was confused when I say the answer - total opposite! Oh well :D For your Microsoft 365 subscription, to meet the specified requirements for Group1 and Group2, you should create the following types of groups: Group1: Create a Microsoft 365 Group. This type of group is mail-enabled by default and comes with an associated SharePoint Online. When you create a Microsoft 365 Group, it includes a shared mailbox, calendar, and a SharePoint site among other features. Group2: Create a Security Group with dynamic membership rules in Microsoft Entra ID. This group can support dynamic membership and role assignments. To ensure it is not mail-enabled, do not create it as a Microsoft 365 Group but rather as a security group which can be configured for dynamic membership and can have roles assigned without being mail-enabled.

It is answered backwards. It should be; 1: MS365 Group (Mail-enabled with application access) 2: Security (Non-mail-enabled)

- Microsoft 365 - Security

Some groups allow dynamic membership or email. Microsoft 365 Groups Distribution groups Security groups Mail-enabled security groups Shared mailboxes Dynamic distribution groups Mail-enabled Yes Yes No Yes Yes Yes Dynamic membership in Microsoft Entra ID Yes No Yes No No No Anser is 1: M365 2 security

Box 1 Microsoft 365 Box 2 Security Source: https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide

To make it easy to understand, it can't be Dynamic distribution as distribution groups are always regarding groups that receive emails, the question at hand doesn't want mail to be enabled. Security groups can be created on an on-prem AD so doesn't require a mailbox (can be created in 365 too but easier to think of it this way IMO)

Box 1: Microsoft 365 Box 2: Dynamic distribution

It's the other way around. Exam topics please fix this. :) Box 1 Microsoft 365 Box 2 Security

Support dynamic membership why not choose Dynamic Distribution？

To The group 1 I need opinions, given the options I would say Microsoft 365, since a security group is not the same as a mail-enabled security group to the group 2 The option Should be Security https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-create-rule#check-processing-status-for-a-rule