Question 608 of 975

Deploy and manage a Microsoft 365 tenant →hardMultiple ChoiceObjective-mapped

Quick Answer

The answer is to configure group-based licensing using Microsoft Entra dynamic groups with rules based on the department attribute. This approach is correct because Microsoft Entra ID’s group-based licensing automatically assigns or removes license plans as users are added to or removed from dynamic groups, eliminating any need for scripts or manual intervention. On the MS-102 exam, this scenario tests your understanding of combining dynamic group membership rules with license assignment—a core automation feature for large organizations. A common trap is assuming PowerShell or Azure AD Connect attribute mapping alone can handle this, but those methods require ongoing manual triggers. Remember the key: dynamic groups handle membership changes in real time, and group-based licensing applies the correct plan automatically. Memory tip: think “dynamic group + license = set and forget.”

MS-102 Deploy and manage a Microsoft 365 tenant Practice Question

This MS-102 practice question tests your understanding of deploy and manage a microsoft 365 tenant. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A company has 500 users across Sales, Marketing, and IT departments. User objects are synced from on-premises Active Directory to Microsoft Entra ID using Azure AD Connect. Each department requires different Microsoft 365 license plans (e.g., Sales needs E3, Marketing needs Business Premium, IT needs E5). The administrator wants to automatically assign the appropriate license based on the department attribute without manual intervention. Which approach should the administrator use?

Question 1hardmultiple choice

Full question →

A
Create a script that runs daily to sync department values and assign licenses using PowerShell.
Why wrong: While possible, a script is less efficient and more error-prone than group-based licensing. It requires maintenance and manual scheduling, whereas group-based licensing is automated and does not rely on custom scripts.
B
Configure group-based licensing using Microsoft Entra dynamic groups with rules based on the department attribute.
Dynamic groups evaluate membership based on rules using user attributes. When combined with group-based licensing, licenses are automatically applied to all members. This is the recommended Microsoft approach for automated license assignment.
C
Use Azure AD Connect to filter objects and assign licenses during sync.
Why wrong: Azure AD Connect syncs identity objects only; it does not assign licenses. License assignment is separate and must be done through Entra ID or administrative tools.
D
Manually assign licenses to each user in the Microsoft 365 admin center.
Why wrong: Manual assignment is not scalable and does not meet the requirement for automation. It also risks errors when managing 500 users.

Full breakdown with real-world context →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Configure group-based licensing using Microsoft Entra dynamic groups with rules based on the department attribute.

Option B is correct because Microsoft Entra ID supports group-based licensing, which allows automatic license assignment to users based on their membership in dynamic groups. By creating dynamic groups with rules that filter on the department attribute (e.g., 'user.department -eq "Sales"'), the administrator can assign the appropriate license plan (E3, Business Premium, E5) to each group, and licenses are automatically applied or removed as users are added or removed from the group, without any manual or scripted intervention.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Create a script that runs daily to sync department values and assign licenses using PowerShell.
Why it's wrong here
While possible, a script is less efficient and more error-prone than group-based licensing. It requires maintenance and manual scheduling, whereas group-based licensing is automated and does not rely on custom scripts.
✓
Configure group-based licensing using Microsoft Entra dynamic groups with rules based on the department attribute.
Why this is correct
Dynamic groups evaluate membership based on rules using user attributes. When combined with group-based licensing, licenses are automatically applied to all members. This is the recommended Microsoft approach for automated license assignment.
Related concept
Read the scenario before looking for a memorised answer.
✗
Use Azure AD Connect to filter objects and assign licenses during sync.
Why it's wrong here
Azure AD Connect syncs identity objects only; it does not assign licenses. License assignment is separate and must be done through Entra ID or administrative tools.
✗
Manually assign licenses to each user in the Microsoft 365 admin center.
Why it's wrong here
Manual assignment is not scalable and does not meet the requirement for automation. It also risks errors when managing 500 users.

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates may confuse Azure AD Connect's attribute filtering or sync capabilities with license assignment, or assume that a PowerShell script is the only automated method, overlooking the native group-based licensing feature that is designed exactly for this scenario.

Detailed technical explanation

How to think about this question

Group-based licensing in Microsoft Entra ID uses dynamic membership rules evaluated by the Azure AD provisioning engine, which processes changes in near real-time (typically within minutes) when a user's department attribute is updated. The license assignment is tied to the group object, and when a user is added to or removed from the group, the license is automatically applied or removed, including handling of service plan conflicts (e.g., if a user already has a conflicting license from another group). This approach also supports license management for guest users and can be combined with usage location settings to ensure compliance with regional licensing restrictions.

KKey Concepts to Remember

Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.

TExam Day Tips

Watch for words such as best, first, most likely and least administrative effort.
Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A media company stores terabytes of video archives that are accessed once a year for audit purposes. Moving these objects to a cold storage tier (Azure Archive, S3 Glacier, or Google Nearline) costs a fraction of hot storage. Questions like this test whether you understand storage tiers, access frequency tradeoffs, and retrieval latency requirements.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related MS-102 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Deploy and manage a Microsoft 365 tenant practice questions

Practise MS-102 questions linked to Deploy and manage a Microsoft 365 tenant.

Implement and manage Microsoft Entra identity and access practice questions

Practise MS-102 questions linked to Implement and manage Microsoft Entra identity and access.

Manage security and threats by using Microsoft Defender XDR practice questions

Practise MS-102 questions linked to Manage security and threats by using Microsoft Defender XDR.

Manage compliance by using Microsoft Purview practice questions

Practise MS-102 questions linked to Manage compliance by using Microsoft Purview.

Manage users, groups, licensing, and support practice questions

Practise MS-102 questions linked to Manage users, groups, licensing, and support.

Implement and manage identity and access in Microsoft Entra ID practice questions

Practise MS-102 questions linked to Implement and manage identity and access in Microsoft Entra ID.

MS-102 fundamentals practice questions

Practise MS-102 questions linked to MS-102 fundamentals.

MS-102 scenario practice questions

Practise MS-102 questions linked to MS-102 scenario.

MS-102 troubleshooting practice questions

Practise MS-102 questions linked to MS-102 troubleshooting.

Practice this exam

Start a free MS-102 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

10 questions 20 questions 30 questions 50 questions Timed 30

MS-102 practice-test guide →Study guide →Browse all practice tests

FAQ

Questions learners often ask

What does this MS-102 question test?

Deploy and manage a Microsoft 365 tenant — This question tests Deploy and manage a Microsoft 365 tenant — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Configure group-based licensing using Microsoft Entra dynamic groups with rules based on the department attribute. — Option B is correct because Microsoft Entra ID supports group-based licensing, which allows automatic license assignment to users based on their membership in dynamic groups. By creating dynamic groups with rules that filter on the department attribute (e.g., 'user.department -eq "Sales"'), the administrator can assign the appropriate license plan (E3, Business Premium, E5) to each group, and licenses are automatically applied or removed as users are added or removed from the group, without any manual or scripted intervention.

What should I do if I get this MS-102 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Keep practising

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.