nerdexam
Microsoft

SC-300 · Question #95

As the Azure Administrator for your organization, you need to create several security groups and populate those groups based on specific profile attributes of your users. As users join your…

The correct answer is D. Dynamic Groups. Dynamic Groups in Azure Active Directory allow administrators to define membership rules based on user profile attributes (such as department, job title, or location), so that users are automatically added or removed from groups as their attributes change - including when they…

Submitted by krish.m· Mar 6, 2026Implement identity management solution

Question

As the Azure Administrator for your organization, you need to create several security groups and populate those groups based on specific profile attributes of your users. As users join your organization, they should be automatically added to the correct group. What should you configure for this?

Options

  • APower Groups
  • BSmart Groups
  • CMicrosoft 365 Groups
  • DDynamic Groups

How the community answered

(56 responses)
  • A
    4% (2)
  • B
    7% (4)
  • C
    2% (1)
  • D
    88% (49)

Explanation

Dynamic Groups in Azure Active Directory allow administrators to define membership rules based on user profile attributes (such as department, job title, or location), so that users are automatically added or removed from groups as their attributes change - including when they first join the organization. This perfectly matches the requirement for automatic, attribute-based group population without manual intervention.

Why the distractors are wrong:

  • Power Groups (A) is not a real Azure AD concept - it's a made-up distractor.
  • Smart Groups (B) is also fabricated in this context; while the term exists in some other tools (like Microsoft Intune for devices), it is not the correct Azure AD security group feature described here.
  • Microsoft 365 Groups (C) are collaboration-focused groups (tied to Teams, SharePoint, etc.) and while they can use dynamic membership, the question specifically focuses on security groups with attribute-based automation, making Dynamic Groups the precise and correct answer.

Memory Tip: Think of "Dynamic" as dynamic membership = automatically moving targets - just like users whose attributes keep changing as they join, transfer, or leave. If the group manages itself based on rules, it's Dynamic!

Topics

#Dynamic Groups#Azure AD Group Management#Automated Group Membership

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice