MS-700 Question #165: Real Exam Question with Answer & Explanation

Question

You need to ensure that a team named US Sales automatically contains all the users that have the department attribute set to Sales. No other users must be members of the team. To complete this task, sign in to the Microsoft 365 portal.

Explanation

This question tests the ability to configure a Microsoft 365 / Azure AD group (backing a Teams team) to use dynamic membership, so that users are automatically added or removed based on their directory attribute values.

Approach. The correct approach is to navigate to the Microsoft Entra admin center (or Azure Active Directory section of the Microsoft 365 portal), locate the 'US Sales' group, and change its Membership type from 'Assigned' to 'Dynamic User'. You then add a dynamic membership rule such as (user.department -eq "Sales"). Once saved, Azure AD automatically evaluates all user objects and adds any user whose department attribute equals 'Sales' while removing anyone who does not match - satisfying both conditions: all Sales users are included, and no other users are members. This feature requires an Azure AD Premium P1 or P2 license.

Concept tested. Azure Active Directory (Microsoft Entra ID) Dynamic Group Membership - configuring attribute-based rules so that group (and Teams team) membership is automatically maintained without manual assignment, using user profile attributes such as 'department'.

Reference. Microsoft Learn: 'Create or update a dynamic group in Azure Active Directory' - https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-create-rule

No community discussion yet for this question.