Exam AZ-104 topic 2 question 80 discussion

YNN 1) Y, You can assign users MS Defender for Cloud Apps on a per user basis. 2) N, You cannot remove the P2 license as User1 is in Group1. 3) N, nested group assignments don't work

OpenAI "No: User1 is a member of Group1, which has been assigned the Azure Active Directory Premium P2 license, but not the Microsoft Defender for Cloud Apps Discovery license. Since Group1 does not have the Microsoft Defender for Cloud Apps Discovery license assigned, User1 cannot be assigned that license either. No: User1 is a member of Group1, which has been directly assigned the Azure Active Directory Premium P2 license. Since User1 inherits the license from Group1, the Azure Active Directory Premium P2 license cannot be removed from User1 individually. It can only be removed by removing the license assignment from Group1. No: User2 is a member of Group2, which is not directly assigned any licenses. Therefore, User2 does not inherit the Azure Active Directory Premium P2 license or any other license assigned to Group2. To assign the Azure Active Directory Premium P2 license to User2, it would need to be directly assigned to User2 or to a group that User2 is a member of."

WRONG No No No

The link of youtube isn't correctly. You need to trust what he is saying, but you can check it by yourself. Create your tenant for free as an azure developer. I've in my test tenant E5 for developerSo: I created an user named "test user" I created a group named "test license" i assigned this license (E5 developer) to the group named "test license" where i turned off Microsoft defender for cloud apps. I wait few minutes so then user appear to the license tab where services enable are 65 of 66 ( Microsoft defender for cloud apps is the only one turned off ). After that, i assign directly to the user the same license, with different service option ( i keep everything turned on ). The result show: User has 2 assignment, directly and inherited from test license. The service enabled are 66 of 66 ( so microsoft defender for cloud apps is correctly assigned ). My answer are Y N N

NNN is the answer!

Final Answer : YNN

N,N,N, Gracias nchebbi, porque estas preguntas están resueltas en el video, donde hicieron el laboratorio. https://youtu.be/np-6s3N-1iQ?t=201

1. All Microsoft Cloud services that require user-level licensing are supported. This support includes all Microsoft 365 products, Enterprise Mobility + Security, and Dynamics 365. 2. Group-based licensing is currently available through the Azure portal and through the Microsoft Admin center. 3. Microsoft Entra ID automatically manages license modifications that result from group membership changes. Typically, license modifications are effective within minutes of a membership change. A user can be a member of multiple groups with license policies specified. A user can also have some licenses that were directly assigned, outside of any groups. The resulting user state is a combination of all assigned product and service licenses. If a user is assigned same license from multiple sources, the license will be consumed only once.

what is the correct answer?

Yes No No

This is very frustrating, why examtopics didnt added correct answers. For every question there is conflict answers in comment

Yes No No

three of them NOOOO i tested already

https://learn.microsoft.com/en-us/entra/identity/users/licensing-group-advanced - Group-based licensing currently doesn't support groups that contain other groups (nested groups). If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied. - When a user inherits a license from a group, you can't directly remove or modify that license in the user's properties. You can change the license assignment only in the group and the changes are then propagated to all group members.

This question was in exam 15/01/24

It was in EXAM, thanks Examtopic.

Check this out..amazing. https://www.youtube.com/watch?v=np-6s3N-1iQ&t=201s He shows it the way it is. NNN. The reason there is so much discussion, I think we're thinking of too many "if" scenarios. Yes, you can remove the premium license from User1 but ONLY by removing them from the Group1, which isn't mentioned. It means, AS IT STANDS with this configuration NOW, CAN you do this without additional steps? So #2; No. #1: YES, you can assign user 1 the MS defender license, but ONLY if you change the license config on Group1. So as it stands no, NO. https://youtu.be/np-6s3N-1iQ?t=201 #3: NO. "If you apply a license to a nested group, only the immediate first-level user members of the group have the licenses applied" https://learn.microsoft.com/en-us/entra/identity/users/licensing-group-advanced