AZ-104 Question 5
Single answerYou are an Azure Administrator at a marketing firm using Azure Active Directory (Azure AD) to manage identity. The HR department requests a group that automatically includes all user accounts with the 'Marketing' department attribute so that it can be used to secure resources in Azure. Which group type in Azure AD best meets these requirements?
- A
Microsoft 365 group with assigned membership
- B
Security group with assigned membership
- C
Security group with dynamic user membership
- D
Microsoft 365 group with dynamic device membership
Show answer and explanation
Correct answer: C
Explanation
To automatically add members based on user attributes in Azure AD, you need a dynamic group configured for users rather than devices. A security group with dynamic user membership ensures that user accounts are added or removed based on defined attribute rules, fulfilling the HR department’s request.
- A. Incorrect.
Does not automatically add the relevant users since it's assigned membership
- B. Incorrect.
Does not automatically add the relevant users since it's assigned membership
- C. Correct.
Automatically adds or removes users based on specified user attribute rules
- D. Incorrect.
Intended for device objects, not for user objects