SC-300 Certification Practice Question #236

Question

You have an Azure AD tenant that contains two users named User1 and User2.

You plan to perform the following actions:

•	Create a group named Group1.
•	Add User1 and User2 to Group1.
•	Assign Azure AD roles to Group1.

You need to create Group1.

Which two settings can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

To later assign Azure AD (Entra) roles to a group, the group must be created as role-assignable (`isAssignableToRole = true`), which can only be set at creation. MS Learn states explicitly that such a group's membership type must be Assigned and cannot be a dynamic group, and that both Security and Microsoft 365 group types can be made role-assignable. That eliminates every dynamic option (C, D, E) and leaves A (M365/Assigned) and B (Security/Assigned), each a complete standalone solution. The community Most Voted is AB with strong, tested agreement; the file's recorded Suggested Answer of just B is the single-best but incomplete choice (the question asks for two valid settings), so MS Learn confirms A is equally valid. Confidence is high, slightly below the ceiling only because the recorded Suggested Answer lists B alone.

More SC-300 practice questions