Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 141 discussion

Actual exam question from Microsoft's MS-102

Question #: 141
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 subscription that contains the administrative units shown in the following table.

The groups contain the members shown in the following table.

The users are assigned the roles shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by cb0900 at Sept. 14, 2023, 4:11 p.m.

Comments

Submit Cancel

cb0900

Highly Voted 1 year, 9 months ago

N - user1 is not a direct member of AU1 N - user 4 is not a member of AU1 Y - user 3 is a license admin for the Org. Adding a group to an administrative unit brings the group itself into the management scope of the administrative unit, but not the members of the group https://learn.microsoft.com/en-us/azure/active-directory/roles/administrative-units#groups

upvoted 63 times

Fran22

1 year, 3 months ago

Is correct. Adding a group to an administrative unit brings the group itself into the management scope of the administrative unit, but not the members of the group. In other words, an administrator scoped to the administrative unit can manage properties of the group, such as group name or membership, but they cannot manage properties of the users or devices within that group.

upvoted 5 times

...

correction

Most Recent 2 months ago

N N Y Adding a group to an administrative unit brings the group itself into the management scope of the administrative unit, but not the members of the group. https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-members-add?tabs=admin-center

upvoted 1 times

...

Frank9020

7 months, 2 weeks ago

CORRECT: Y: - User2 can reset the password for User1 because User1 is in AU1, and User2 is a Password Administrator for AU1. N: - User2 cannot reset the password for User4, because User4 is in AU2, and User2’s scope is limited to AU1. Y: User3 can assign licenses to User1, because User3 is a License Administrator with a scope of the entire organization, which includes User1.

upvoted 2 times

Ruslan23

2 months ago

WRONG: User1 is not a member of AU1. N N Y

upvoted 1 times

...

APK1

10 months, 1 week ago

NNY is the correct answer. for me the given answer was correct, but then this document made me the correct answer as NNY https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units#groups

upvoted 3 times

...

Tomtom11

10 months, 1 week ago

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units#groups The last answer is correct Note that if you assign a role to a user that is not a member of an administrative unit, the scope of the role is the entire tenant.

upvoted 1 times

...

XylosSW

11 months, 3 weeks ago

Answer is correct by Copilot: 1. Yes, User 2 can reset the password of User1. User 2 is a Password Administrator and has scope over AU1, which includes User1 as it’s a member of Group1 in AU1. 2. No, User 2 cannot reset the password of User4. Although User 2 is a Password Administrator, User4 is not under the scope of User2 (AU1). 3. Yes, User 3 can assign licenses to User1. User 3 is a License Administrator and has an organization-wide scope, which includes all users.

upvoted 1 times

PMR24875

9 months, 1 week ago

User1 not in AU1, so 1 should be No

upvoted 3 times

Frank9020

7 months, 2 weeks ago

User1 is in Group1, that is member of AU1, so answer is YES

upvoted 1 times

Frank9020

7 months, 2 weeks ago

My bad, correct is N+N+Y: n order for the User Administrator to manage the user properties or user authentication methods of individual members of the group, the group members (users) must be added directly as members of the administrative unit.

upvoted 4 times

...

oopspruu

1 year, 2 months ago

When you add a group to an AU, the AU actions only apply to group but not it's members. So NNY

upvoted 1 times

...

Thomasname

1 year, 4 months ago

Y - user1 is member of group1, so member of AU1. since au1 is no group itself, there is no nested group, so this works. N - User 4 is not a member of AU1 Y: user3 can assign licenses to the entire organisation

upvoted 2 times

...

CheMetto

1 year, 8 months ago

I confirm NNY, Nested group aren't supported from Administrative Unit!

upvoted 3 times

...