exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 1 question 66 discussion

Actual exam question from Microsoft's MS-500
Question #: 66
Topic #: 1
[All MS-500 Questions]

HOTSPOT -
You have a Microsoft 365 E5 subscription.
You need to create a role-assignable group. The solution must ensure that you can nest the group.
How should you configure the group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Security only -
You can add an existing Security group to another existing Security group (also known as nested groups), creating a member group (subgroup) and a parent group. The member group inherits the attributes and properties of the parent group, saving you configuration time.
Incorrect:
Not supported:
Adding Security groups to Microsoft 365 groups.
Adding Microsoft 365 groups to Security groups or other Microsoft 365 groups.

Box 2: Assigned only -
The membership type for role-assignable groups must be Assigned and can't be an Azure AD dynamic group.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-membership-azure-portal

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
RVR
Highly Voted 2 years, 7 months ago
Group Type: Microsoft 365 or security Reference: "To assign a role to a group, you must create a new security or Microsoft 365 group with the isAssignableToRole property set to true" Membership type: Assigned only Reference: "The membership type for role-assignable groups must be Assigned and can't be an Azure AD dynamic group." Link: https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-concept
upvoted 10 times
Pretsan
2 years, 6 months ago
It informs that you can ensure you can nest the group and MS 365 don't support nesting so I would go for: Group type: Security group Membership type: Assigned only
upvoted 15 times
msysadmin
2 years, 2 months ago
Agree: Answer is correct. "Microsoft 365 Groups don't support nesting with other Microsoft 365 Groups or with distribution or security groups"
upvoted 2 times
...
...
...
Dhamus
Most Recent 1 year, 11 months ago
Microsoft 365 group does not support nesting, that is, you cannot add groups within this group.
upvoted 1 times
...
SaadKhamis
2 years, 2 months ago
Based on https://learn.microsoft.com/en-us/azure/active-directory/roles/groups-concept#how-are-role-assignable-groups-protected - Group nesting is not supported. A group can't be added as a member of a role-assignable group. So, what is the right answer?
upvoted 1 times
...
amymay101
2 years, 3 months ago
M365 or Security group and 'assigned' only
upvoted 1 times
kmk_01
2 years, 1 month ago
You can't nest M365 groups.
upvoted 2 times
...
...
tibodenbeer
2 years, 4 months ago
As of now, the answer is correct. Tried to nest an Microsoft365 group but the option is grayed out: - Create M365 group - Go to Groups memberships --> Add memberships is grayed out. If you do the same with a security group, the "add memberships" is available. So the answer is correct (for now, since they specifically ask for a non nesting.) Security group --> Assigned
upvoted 4 times
...
ccadenasa
2 years, 5 months ago
I think the answer is correct however, Microsoft 365 groups support nesting through dynamic groups in Azure Active Directory according to this information > https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/compare-groups?view=o365-worldwide#microsoft-365-groups but it is in preview > https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-rule-member-of which is not relevant for an exam
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago