AZ-104 Question #765: Real Exam Question with Answer & Explanation

Question

You have a Microsoft Entra tenant. You plan to create a group for each department at your company. You need to ensure that user and group permissions meet the following requirements: - When a new user is added to the tenant, the user is automatically added to their department's group. - If a user transfers to a different department, their user permissions to department resources must be updated automatically. - The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

• ACreate a security group that has the Assigned membership type.
• BCreate a Conditional Access policy.
• CCreate an Azure Resource Manager (ARM) template.
• DCreate a security group that has the Dynamic User membership type.
• EUpdate the user properties.
• FCreate a CSV file and import the file.

Explanation

Create a security group that has the Dynamic User membership type. A dynamic user membership type allows users to be automatically added to or removed from the group based on specific criteria, such as department attributes. This ensures that when a new user is added or transferred to a different department, their group membership is updated Update the user properties. User properties, like department attributes, need to be kept up to date for dynamic groups to work correctly. By ensuring that the user's department field is correctly populated and maintained, the system will automatically place the user in the appropriate department group.

No community discussion yet for this question.