SC-300 Certification Practice Question #29

Question

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You create a dynamic user group and configure the following rule syntax.

user.usageLocation -in ["US","AU"] -and (user.department -eq "Sales") -and -not (user.jobTitle -eq "Manager") –or (user. jobTitle -eq "SalesRep")

Which users will be added to the group?

Accepted Answer

With `-and` binding tighter than `-or`, the rule parses as `(usageLocation -in [US,AU] -and department -eq Sales -and -not jobTitle -eq Manager) -or (jobTitle -eq SalesRep)`. The first group selects only User1 (US, Sales, Associate — not a Manager); User3 (AU, Sales, Manager) is dropped by the `-not Manager` clause. The independent second clause `jobTitle -eq SalesRep` adds User2 regardless of their Finland location. Net result: User1 and User2 (D). Confidence is held at 85 rather than higher because a non-trivial minority answered A — but their reasoning ignores MS Learn's documented operator precedence (which makes the SalesRep `-or` clause stand alone), so D is clearly the better-supported answer and matches both the Suggested Answer and the 65-vote community majority.

More SC-300 practice questions