Exam MS-100 topic 12 question 1 discussion

Actual exam question from Microsoft's MS-100

Question #: 1
Topic #: 12

HOTSPOT -
You need to create the UserLicenses group. The solution must meet the security requirements.
Which group type and control method should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Fabrikam plans to create a group named UserLicenses that will manage the allocation of all Microsoft 365 bulk licenses.
The memberships of UserLicenses must be validated monthly. Unused user accounts must be removed from the group automatically.
The group needs to be a Security group.
Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

by dminerva94 at Aug. 24, 2021, 2:44 p.m.

Comments

Submit Cancel

Amir1909

1 year, 4 months ago

Correct

upvoted 1 times

...

TashaGirl

3 years, 5 months ago

This is very interesting, M365 Group with dynamic membership allows to add a license. However, nowhere it states that the group will have dynamic membership, so I will go with security + access reviews. Both group types would be supported though, with the assumption of dynamic membership for M365 group.

upvoted 2 times

Paolo2022

2 years, 7 months ago

Well, yes, but access reviews are for scenarios when dynamic membership can't be implemented and group membership needs to be assigned (and reviewed regularly). In this case the group in question is only for managing licenses, so a security group would be adequate. Also, the source provided only mentions security groups, not MS 365 groups: https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#where-do-you-create-reviews

upvoted 2 times

...

TEEEEEEEEEE

3 years, 9 months ago

"Licenses can be assigned to any security group in Azure AD." https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-licensing-whatis-azure-portal#features

upvoted 4 times

...

RML_Wyvern

3 years, 10 months ago

If you look in Azure Ad Groups, only Security Group has the licence option.

upvoted 4 times

...

dminerva94

3 years, 10 months ago

Couldn't this be done with either a M365 or security group?

upvoted 1 times

...