SC-300 Certification Practice Question #187

Question

The Azure Active Directory (Azure AD) tenant contains the groups shown in the following table.

In Azure AD, you add a new enterprise application named App1.
Which groups can you assign to App1?

Accepted Answer

The canonical Microsoft documentation wording — quoted by the highest-voted comments — restricts group-based app assignment to **Security groups and Microsoft 365 groups**, which maps to Group1 + Group3 = **E**, the Suggested Answer and 31-vote consensus. There is a genuine community split: a notable minority picks **D** (Group1 + Group4), reasoning that a Microsoft 365 group's SecurityEnabled flag defaults to False (so it wouldn't qualify) while a Mail-enabled security group is "security." However, the exam's intended, doc-aligned answer is E, because the documented supported types are Security and Microsoft 365 (not mail-enabled security), and several testers confirmed M365 groups are assignable in the portal. Confidence is lowered to 80% to reflect the real D-vs-E disagreement and the SecurityEnabled-default nuance, but E remains the better-supported choice.

More SC-300 practice questions