nerdexam
Microsoft

AZ-104 · Question #765

You have a Microsoft Entra tenant. You plan to create a group for each department at your company. You need to ensure that user and group permissions meet the following requirements: - When a new…

The correct answer is D. Create a security group that has the Dynamic User membership type. E. Update the user properties. Create a security group that has the Dynamic User membership type. A dynamic user membership type allows users to be automatically added to or removed from the group based on specific criteria, such as department attributes. This ensures that when a new user is added or…

Submitted by olafpl· Mar 4, 2026Manage identities and governance

Question

You have a Microsoft Entra tenant. You plan to create a group for each department at your company. You need to ensure that user and group permissions meet the following requirements: - When a new user is added to the tenant, the user is automatically added to their department's group. - If a user transfers to a different department, their user permissions to department resources must be updated automatically. - The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • ACreate a security group that has the Assigned membership type.
  • BCreate a Conditional Access policy.
  • CCreate an Azure Resource Manager (ARM) template.
  • DCreate a security group that has the Dynamic User membership type.
  • EUpdate the user properties.
  • FCreate a CSV file and import the file.

How the community answered

(22 responses)
  • A
    14% (3)
  • B
    5% (1)
  • D
    77% (17)
  • F
    5% (1)

Explanation

Create a security group that has the Dynamic User membership type. A dynamic user membership type allows users to be automatically added to or removed from the group based on specific criteria, such as department attributes. This ensures that when a new user is added or transferred to a different department, their group membership is updated Update the user properties. User properties, like department attributes, need to be kept up to date for dynamic groups to work correctly. By ensuring that the user's department field is correctly populated and maintained, the system will automatically place the user in the appropriate department group.

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice