exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 6 question 1 discussion

Actual exam question from Microsoft's AZ-500
Question #: 1
Topic #: 8
[All AZ-500 Questions]

You need to meet the identity and access requirements for Group1.
What should you do?

  • A. Add a membership rule to Group1.
  • B. Delete Group1. Create a new group named Group1 that has a group type of Microsoft 365. Add users and devices to the group.
  • C. Modify the membership rule of Group1.
  • D. Change the membership type of Group1 to Assigned. Create two groups that have dynamic memberships. Add the new groups to Group1.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Daniel9527
Highly Voted 3 years, 3 months ago
I'll go for D. A, C: You can create a dynamic group for devices or for users, but you can't create a rule that contains both users and devices. B: Microsoft 365 group can have only users as its members. D: Security group can have users, devices, groups and service principals as its members.
upvoted 16 times
...
zellck
Highly Voted 1 year, 9 months ago
Selected Answer: D
D is the answer. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-learn-about-groups#membership-types You can create a dynamic group for either devices or users, but not for both. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/how-to-manage-groups#add-or-remove-a-group-from-another-group You can add an existing Security group to another Security group (also known as nested groups).
upvoted 6 times
...
epomatti
Most Recent 1 year, 1 month ago
Selected Answer: D
Right on the money.
upvoted 2 times
...
pedramxp
1 year, 1 month ago
D can't be correct. Nested groups are not supported to provide access to the applications. B can't be correct as well, M365 group can have only users
upvoted 1 times
epomatti
1 year, 1 month ago
It's a good point, but I think you're wrong. This is the message you get when adding a parent group (with nested groups): "When you assign a group to an application, only users directly in the group will have access. The assignment does not cascade to nested groups." The limitation is that permissions won't cascade to Group1. That is fine. Group1 already have direct assignment to the Apps, and this will keep working. D is the correct answer.
upvoted 1 times
...
...
Lovejoy99
1 year, 2 months ago
Litware case study - Topics 8, 12, 16 and 18 Contoso case study - Topics 9, 13, 15 Fabrikam case study - Topics 10, 11, 14, 17
upvoted 5 times
...
majstor86
1 year, 11 months ago
Selected Answer: D
D. Change the membership type of Group1 to Assigned. Create two groups that have dynamic memberships. Add the new groups to Group1.
upvoted 4 times
...
Eltooth
2 years, 10 months ago
Selected Answer: D
D is correct answer.
upvoted 3 times
...
Payday123
2 years, 11 months ago
Selected Answer: D
Wrong answer. Group type of Microsoft 365 cannot contain devices
upvoted 1 times
...
hanyahmed
3 years ago
the right answer is D
upvoted 1 times
...
sudarchary
3 years, 1 month ago
Answer is "D" When you want to create a Dynamic Group, the group can either have a “Dynamic User” or “Dynamic Device” membership.
upvoted 1 times
...
adamsca
3 years, 2 months ago
Selected Answer: D
Yes is D. I Tested this and it's the only option that works.
upvoted 4 times
...
Tonion
3 years, 2 months ago
D is the only option. Only asigned security group can contain both dynamic user and dynamic device groups
upvoted 1 times
...
BillBaits
3 years, 2 months ago
Selected Answer: D
Security Groups are the only groups that can contain devices, so the answer cannot be "B". https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide#security-groups
upvoted 2 times
...
nguyendomanh
3 years, 3 months ago
D is this right one. When you create group, you have to choose: Assigned dynamic user dynamic device. No option for both user and device
upvoted 3 times
...
Moley
3 years, 3 months ago
The existing Group 1 is a security group that aleady has a dynamic rule. The scenario tells us this. 365 groups cannot contain devices only users. "Security groups can be used for either devices or users, but Microsoft 365 Groups can be only user groups." https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-create-rule So the answer is C, just modify the existing rule to include devices.
upvoted 2 times
...
Simon_Leung
3 years, 3 months ago
D is correct. B is not correct due to O365 Group can only put user object. the exam requirement stated needs to take care Device.
upvoted 3 times
...
JBS
3 years, 4 months ago
Atleast D is not correct as you cannot create dynamic memberships while having a membership type "Assigned". It can also be A or C depends on the type of Group1 you see in actual exam. Best options looks B with current details.
upvoted 2 times
ServerBrain
1 year, 8 months ago
Your understanding of D is wrong. Dynamic memberships is created on the two groups being added to the "Assigned" group.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...