Exam MD-101 topic 3 question 85 discussion

I would vote for Y, Y, Y as nested groups not supported

This is my explanation( I ignored nested groups) N- User 1 gets policy 1 and 2. policy 2 wins because it has the higher priority. Y- User 2 gets policy 2 N- There is no policy for user 3 Y-User 2 gets policy

Going with N-Y-Y. Interestingly, Dawnbringer was right, but support for nested groups is limited. It does apply to extensions, but not to some other major items, like licenses and apps. Take a look at the section he mentioned.

As of 3/4/2023 Nested groups in AAD are supported. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/how-to-manage-groups There is a Section called: Add or remove a group from another group "You can add an existing Security group to another Security group (also known as nested groups). Depending on the group types, you can add a group as a member of another group, just like a user, which applies settings like roles and access to the nested groups. You'll need the Groups Administrator or User Administrator role to edit group membership." With some Exceptions... With that in mind the Answer Is Y-N-Y.

I would vote N, Y, Y. As User1 is a direct member of Group 1 and Group 2. Therefore both Policies apply, but Policy2 wins due to higher Priority. I don't think that the restriction of Nested groups is relevant for User1.