Exam AZ-104 topic 2 question 31 discussion

Correct answer. User 1: Group 1 only User 2: Group 1 & 2

Tested in lab. User 1: Group 1 only User 2: Group 1 & 2

User 1 - Group 1 User 2 - Group 1 Users do not need a Microsoft 365 license to join a Microsoft security group. Security groups in Azure Active Directory (Azure AD) are primarily used to manage access to resources like applications, file shares, and other non-Microsoft 365 services. Key Points: Microsoft Security Groups: These are used to control access to various resources, including applications, virtual machines, or SharePoint sites. Membership in these groups does not require a Microsoft 365 license. Microsoft 365 Groups: In contrast, Microsoft 365 groups (which are different from security groups) are tied to services like Exchange, SharePoint, Teams, and other Microsoft 365 services. To fully utilize the benefits of a Microsoft 365 group (like access to Teams or SharePoint), a Microsoft 365 license is typically required.

Given answers are correct and straight forward, the only argument is that user2 does not have office 365 license which is fine because a user can be added to m365 group without license, they will just have no access to specific features like like planner, group's sharepoint

correct only "dynamic user" Membership Type can add users automatically to it User1 meets the requirements only of the rules in Group1 User2 meets the requirements of the rules in both Group1 & Group2

I don't think User2 can be member of Group2! The department "Marketing" is not excluded by the rule, but User2 does not have an Office 365 license. Given that Group2 is a Microsoft 365 group, it would typically only include users who have such a license. Therefore, User2 should not be a member of Group2. What do you think?!

A user must have a Microsoft 365 license assigned to them in order to be added to a Microsoft 365 group. The license is necessary for access to group features like email, SharePoint, and Teams. Without a license, the user won't be able to use the group's services.

Correct answer. User 1: Group 1& 3 The Microsoft 365 assigned to him makes him a dynamic joined member of group 3 User 2: Group 1 & 2

What is the meaning of 'Not applicable' under the Membership rule? Does it mean there is no rule? Or there is no membership?

Given answer is correct

My opinion answer is user 1 : Group 1 and 3 Group 3 because it have keyword "configured" in question and "Office 365 assigned" on table User 2 : Group 1 and 2

User1: Group1 only because Group3 does not auto-get this user and Group 2 block his department; User2: Group 1 & Group 2. Group 3 does not auto-get this user.

This question is weird and misleading. You need to have enough Azure AD Premium P1 licenses for the dynamic group membership feature. While most Office 365 (now Microsoft 365) plans contain this license, just saying "Office 365" is too unspecific. If we assume that User 1 has the Azure AD Premium P1 license and User 2 does not. Further, we assume that there are no other users in the tenant, who could have this license. Then User 1 would be a member of Group 1 and User 2 would be a member of no group. This is because User 2 would not be able to use the dynamically assigned membership due to a lack of licenses. Additionally, both users COULD be a member of Group 3, but this is not specified in the question. This question simply does not give all the required information to be able to answer this with 100% certainty.

The question is Of which groups are User1 and User2 members? I think both of these should be Group 1 only

If it's case-insensitive, then the answer is correct, otherwise the answer should be: User 1: Group 2 User 2: Group 2

User 1: Group 1 only User 2: Group 1 & 2 only

Correct answer. The 365 license is not taken into account. Membership type" is taken into account. That only in "Dyamic User" can be assigned a user, therefore, we discard group 3. User 1 passes the rule of group 1; does not pass the rule of group 2. User 2 passes the rule of group 1; it also passes the rule of group 2.