Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

What is a key benefit of using dynamic groups in Azure AD?

1. They require manual management of membership

2. They can automatically update based on user attributes

3. They cannot be used for resource assignment

4. They can only include users in the same geographic location

The correct answer is: They can automatically update based on user attributes

Dynamic groups in Azure Active Directory (Azure AD) provide significant advantages by automating group membership management based on user attributes. This means that when a user's attributes change—such as their department, role, or location—the dynamic group will automatically adjust its membership to reflect those changes. This automation reduces the need for manual intervention, thereby saving time and minimizing errors in group management. The ability to have groups that automatically update based on predefined attributes ensures that access controls can be consistent and up-to-date without requiring constant oversight. The other choices highlight limitations or misconceptions about dynamic groups. For instance, dynamic groups do not require manual management of membership, as they are designed specifically to alleviate that burden. They are also versatile enough to be used for resource assignments and are not restricted to users within a specific geographic location, further showcasing their flexibility in identity and access management.