Exam AZ-140 topic 3 question 44 discussion

NNY 2e is a Nested groups and is not supported

2nd is a NO, because Nested groups is not supported https://learn.microsoft.com/en-us/entra/identity/users/directory-service-limits-restrictions

N-Y-Y N - User1 is member of Group1 so the blocking reg type applies Y - User2 is member of Group2. We directly link the Desktop group type to Group2 of which the user is member of. If we allocated it to Group1, then it would be "No" because Group1 contains Group2 and not the other way around. Y - because the desktop is directly allocated to User3

Answer is correct NYY. At this time, the following scenarios are supported with nested groups: One group can be added as a member of another group, and you can achieve group nesting. Group membership claims. When an app is configured to receive group membership claims in the token, nested groups in which the signed-in user is a member are included. Conditional Access (when a Conditional Access policy has a group scope). Restricting access to self-serve password reset. Restricting which users can do Microsoft Entra join and device registration. The following scenarios are not supported with nested groups: App role assignment, for both access and provisioning. Assigning groups to an app is supported, but any groups nested within the directly assigned group won't have access. Group-based licensing (assigning a license automatically to all members of a group). Microsoft 365 Groups.

Answer is correct: user1 No cause he is not assigned AppGrp1 user2 Yes nested groups are supported user3 Yes

NNY seems to be the correct answer. No nested groups.

NNY app attach, nested groups not applicable so User2 won't see the app