SC-300 Certification Practice Question #138

Question

You have a Microsoft Entra tenant that contains the groups shown in the following table.

You need to implement Privileged Identity Management (PIM) for the groups.

Which groups can be managed by using PIM?

Accepted Answer

PIM for Groups can manage any Microsoft Entra security group or Microsoft 365 group except dynamic-membership groups and groups synchronized from on-premises. From the image, Group1 (Security, Assigned) and Group3 (Microsoft 365, Assigned) both have assigned membership and are cloud groups, so both are eligible. Group2 (Security, Dynamic) and Group4 (Microsoft 365, Dynamic) use dynamic membership and are therefore excluded. The group type (security vs. M365) is irrelevant here — only the dynamic-vs-assigned distinction matters — so the answer is the two assigned groups: Group1 and Group3. Suggested Answer, the Most Voted choice, the Highly Voted comment (8 👍), and the directly quoted MS Learn documentation all agree on C.

More SC-300 practice questions