MicrosoftMicrosoft
MS-102 · Question #19
MS-102 Question #19: Real Exam Question with Answer & Explanation
The correct answer is C: a security group that has assigned membership. You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group.
Submitted by satoshi_tk· Apr 18, 2026Implement and manage Microsoft Entra identity and access
Question
You have a Microsoft 365 subscription. You configure a new Azure AD enterprise application named App1. App1 requires that a user be assigned the Reports Reader role. Which type of group should you use to assign the Reports Reader role and to access App1?
Options
- Aa Microsoft 365 group that has assigned membership
- Ba Microsoft 365 group that has dynamic user membership
- Ca security group that has assigned membership
- Da security group that has dynamic user membership
Explanation
You can not assign Azure AD roles to dynamic groups. And you don't need a mailbox/sharepoint/etc, so it is not a 365 group.
Topics
#Azure AD Groups#Role-Based Access Control#Enterprise Applications#Identity Management
Community Discussion
No community discussion yet for this question.