Exam SC-300 topic 4 question 38 discussion

Actual exam question from Microsoft's SC-300

Question #: 38
Topic #: 4

You have an Azure AD tenant that contains two users named User1 and User2.

You plan to perform the following actions:

• Create a group named Group1.
• Add User1 and User2 to Group1.
• Assign Azure AD roles to Group1.

You need to create Group1.

Which two settings can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Group type: Microsoft 365 -
Membership type: Assigned
B. Group type: Security -
Membership type: Assigned
C. Group type: Security -
Membership type: Dynamic User
D. Group type: Microsoft 365 -
Membership type: Dynamic User
E. Group type: Security -
Membership type: Dynamic Device

Show Suggested Answer

Suggested Answer: AB 🗳️

by BRoald at Jan. 19, 2023, 2:54 p.m.

Comments

Submit Cancel

BRoald

Highly Voted 2 years, 4 months ago

Correct, when you create a group you MUST enable "azure ad roles can be assigned to the group" (cannot be done afterwards). If you enable this feature when creating a group, dynamic groups are getting greyed out / disabled. So yes, only assigned security and assigned m365 groups

upvoted 9 times

Zak366

2 years, 3 months ago

Just confirmed on my tenant

upvoted 1 times

...

Obi_Wan_Jacoby

Most Recent 4 weeks, 1 day ago

Selected Answer: AB

Answer: AB is correct

upvoted 1 times

...

Discuss4certi

11 months ago

Selected Answer: AB

correct and logical. Any dynamic group would be able to give you elevated permissions just because you changed a certain attribute? that would defeat the whole purpose of using PIM.

upvoted 2 times

...