Microsoft Entra Groups and Properties: 10 practice questions

Question 1 of 10

Which Microsoft Entra group type is designed to manage access to shared resources?

1. AAssigned membership
2. BMicrosoft Entra security group
3. CMicrosoft 365 group
4. DDynamic User membership

Question 2 of 10

Which membership type requires administrators to add and maintain members manually?

1. ADynamic User
2. BMicrosoft 365
3. CAssigned membership
4. DDynamic Device

Question 3 of 10

Which path opens creation of a Microsoft Entra group?

1. AIdentity > Groups > All groups > New group
2. BIdentity > Users > Deleted users > Restore user
3. CBilling > Licenses > Licensed users > Assign licenses
4. DIdentity > Users > All users > New user

Question 4 of 10

Which set contains only object types that can be members of a security group?

1. ADepartments and job titles
2. BShared mailboxes, calendars, and SharePoint sites
3. CUsers, devices, and service principals
4. DDirectories, subscriptions, and deleted users

Question 5 of 10

Which capability distinguishes a Microsoft 365 group from a security group in the captured material?

1. AIt requires a Microsoft Entra administrator for every group operation.
2. BIt supports Dynamic Device membership based on device attributes.
3. CIt can contain devices and service principals for resource access.
4. DIt provides a shared mailbox, calendar, files, and a SharePoint site.

Question 6 of 10

What occurs when a user's Department attribute changes and the tenant has a relevant dynamic membership rule?

1. AThe rule becomes Assigned and waits for an administrator to update the roster.
2. BThe user's department changes, but existing dynamic memberships remain fixed.
3. CThe dynamic rule is reevaluated and can add or remove the user automatically.
4. DThe user is converted into a device so Dynamic Device can process the change.

Question 7 of 10

What license supports Microsoft Entra dynamic membership for user-based rules?

1. AMicrosoft Entra ID Free
2. BUser Administrator
3. CWindows Server AD only
4. DMicrosoft Entra ID P1

Question 8 of 10

A team must control access to a shared resource, include devices according to their attributes, and update membership without manual changes. Which configuration fits?

1. AA security group with Dynamic Device membership
2. BA security group with Assigned membership
3. CA Microsoft 365 group with Dynamic User membership
4. DA Microsoft 365 group with Dynamic Device membership

Question 9 of 10

A project needs a shared mailbox and SharePoint site, must include external collaborators, and should add employees automatically when Department equals Marketing. Which configuration best meets the requirements?

1. AA security group with Dynamic User membership
2. BA Microsoft 365 group with Dynamic User membership
3. CA security group with Dynamic Device membership
4. DA Microsoft 365 group with Assigned membership

Question 10 of 10

An administrator must create an access boundary for service principals, retain explicit approval over every membership change, and avoid dependence on dynamic-rule licensing. Which design should be used?

1. AA Microsoft 365 group with Dynamic User membership and an attribute rule
2. BA Microsoft 365 group with Assigned membership and shared files
3. CA security group with Dynamic Device membership and no manual roster
4. DA security group with Assigned membership and a designated owner