AZ-104 Certification Practice Question #51

Question

You have Azure Active Directory tenant named Contoso.com that includes following users:

Contoso.com includes following Windows 10 devices:

You create following security groups in Contoso.com:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **User1 (Cloud Device Administrator)** does not have permissions to manage group memberships. Since User1 is not the owner of Group1 (which is owned by User2), User1 cannot add Device2 to Group1. Thus, the first statement is **No**.
2. **User2 is the Owner of Group1**, which uses the **Assigned** membership type. A group owner has full control over adding and removing members of an assigned group, which includes both users and devices. Thus, the second statement is **Yes**.
3. **Group2** uses **Dynamic Device** membership. Entra ID dynamic groups calculate membership automatically based on rules, and manual additions or removals by anyone (including group owners and administrators) are strictly blocked. Thus, the third statement is **No**.

More AZ-104 practice questions