SC-300 Certification Practice Question #1

Question

You have an Azure Active Directory (Azure AD) tenant that contains the following objects:
✑ A device named Device1
✑ Users named User1, User2, User3, User4, and User5
✑ Groups named Group1, Group2, Group3, Group4, and Group5
The groups are configured as shown in the following table.

To which groups can you assign a Microsoft Office 365 Enterprise E5 license directly?

Accepted Answer

MS Learn states group-based licensing is supported for any security group and for Microsoft 365 groups that have securityEnabled=true, and that licensing is a user-level entitlement — so a Dynamic Device group (Group3) cannot receive an Office 365 E5 license. Group1 (Security/Assigned), Group2 (Security/Dynamic User), Group4 (M365/Assigned), and Group5 (M365/Dynamic User) are all valid targets; Group3 is the only invalid one. That is exactly option E. The official Suggested Answer and the raw Most Voted both say B, but B includes the device group and therefore is technically wrong per MS Learn — this is why confidence is capped in the high-70s and the conflict is documented. The strongest reasoned community signals (the Highly Voted "E" comment with 25 👍 and the most-recent wave of E selections) align with the documentation rather than with the headline vote count.

More SC-300 practice questions