Microsoft Entra Groups and Properties: 10 practice questions

Question 1 of 10

Which Microsoft Entra group type is designed to manage access to shared resources?

1. AAssigned membership
2. BMicrosoft Entra security group
3. CMicrosoft 365 group
4. DDynamic User membership

Question 2 of 10

Which membership type requires members to be added and maintained manually?

1. ADynamic User
2. BAssigned membership
3. CMicrosoft 365
4. DDynamic Device

Question 3 of 10

Which path opens creation of a Microsoft Entra group?

1. AIdentity > Groups > All groups > New group
2. BIdentity > Users > Deleted users > Restore user
3. CBilling > Licenses > Licensed users > Assign licenses
4. DIdentity > Users > All users > New user

Question 4 of 10

Which set contains only object types that can be members of a security group?

1. ADepartments and job titles
2. BShared mailboxes, calendars, and SharePoint sites
3. CUsers, devices, and service principals
4. DDirectories, subscriptions, and deleted users

Question 5 of 10

Which collaboration capability distinguishes a Microsoft 365 group from a security group?

1. AIt provides a shared mailbox, calendar, files, and a SharePoint site.
2. BIt can contain devices and service principals for resource access.
3. CIt supports Dynamic Device membership based on device attributes.
4. DIt always requires a Microsoft Entra administrator to create the group.

Question 6 of 10

What occurs when a user's Department attribute changes and the tenant has a relevant dynamic membership rule?

1. AThe rule becomes Assigned and waits for an administrator to update the roster.
2. BThe user's department changes, but existing dynamic memberships remain fixed.
3. CThe dynamic rule is reevaluated and can add or remove the user automatically.
4. DThe user is converted into a device so Dynamic Device can process the change.

Question 7 of 10

What license supports Microsoft Entra dynamic membership for user-based rules?

1. AMicrosoft Entra ID Free
2. BUser Administrator
3. CWindows Server AD only
4. DMicrosoft Entra ID P1

Question 8 of 10

A team must control access to a shared resource, include devices according to their attributes, and update membership without manual changes. Which configuration fits?

1. AA security group with Dynamic Device membership
2. BA security group with Assigned membership
3. CA Microsoft 365 group with Dynamic User membership
4. DA Microsoft 365 group with Dynamic Device membership

Question 9 of 10

A project needs a shared mailbox and a SharePoint site. Every intended member, its guest collaborators included, has Department set to Marketing, and membership must follow that attribute without manual work. Which configuration meets the requirements?

1. AA Microsoft 365 group with Dynamic User membership
2. BA Microsoft 365 group with Assigned membership
3. CA security group with Dynamic User membership
4. DA security group with Dynamic Device membership

Question 10 of 10

An administrator must create an access boundary for service principals, retain manual control of every membership change, and avoid dependence on dynamic-membership licensing. Which design fits?

1. AA security group with Dynamic Device membership and no manual roster
2. BA security group with Assigned membership and a designated owner
3. CA Microsoft 365 group with Dynamic User membership and an attribute rule
4. DA Microsoft 365 group with Assigned membership and shared files