AZ-104 Certification Practice Question #93

Question

You have an Azure subscription that contains the users shown in the following table.

The groups are configured as shown in the following table.

You have a resource group named RG1 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

1. **Statement 1 (No):** Group1 is a role-assignable security group (the property "Azure AD roles can be assigned to the group" is set to "Yes"). Microsoft Entra ID does not support group nesting for role-assignable groups; you cannot add any group as a member of a role-assignable group. Thus, Group2 cannot be nested into Group1.
2. **Statement 2 (No):** In addition to Group1's nesting restriction as a role-assignable group, Microsoft Entra ID does not support adding Microsoft 365 groups (Group3) to security groups (Group1).
3. **Statement 3 (Yes):** Unlike Azure AD directory roles, standard Azure Resource Manager (ARM) RBAC roles (such as the Owner role on resource group RG1) can be assigned directly to Microsoft 365 groups. Once Group3 is assigned the Owner role for RG1, all members of Group3 (including User3) will inherit this role and have Owner access to RG1.

More AZ-104 practice questions