MS-102 · Question #77
You have a Microsoft 365 E5 subscription that uses Endpoint security. You need to create a group and assign the Endpoint Security Manager role to the group. Which type of group can you use?
The correct answer is D. mail-enabled security, Microsoft 365, and security only. To assign the Endpoint Security Manager role to a group, you can use security, mail-enabled security, or Microsoft 365 groups.
Question
You have a Microsoft 365 E5 subscription that uses Endpoint security. You need to create a group and assign the Endpoint Security Manager role to the group. Which type of group can you use?
Options
- AMicrosoft 365 only
- Bsecurity only
- Cmail-enabled security and security only
- Dmail-enabled security, Microsoft 365, and security only
- Edistribution, mail-enabled security, Microsoft 365, and security
How the community answered
(39 responses)- A3% (1)
- D95% (37)
- E3% (1)
Why each option
To assign the Endpoint Security Manager role to a group, you can use security, mail-enabled security, or Microsoft 365 groups.
This option is incomplete as security and mail-enabled security groups are also valid for role assignment.
This option is incomplete as Microsoft 365 and mail-enabled security groups are also valid for role assignment.
This option is incomplete as Microsoft 365 groups are also valid for role assignment.
Azure AD roles, including the Endpoint Security Manager role, can be assigned to security groups, mail-enabled security groups, and Microsoft 365 groups for delegated administration. These group types provide the necessary functionality for role-based access control within Azure AD.
Distribution groups cannot be used for role assignments in Azure AD.
Concept tested: Azure AD group types for role assignment
Source: https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-assign-roles
Topics
Community Discussion
No community discussion yet for this question.