MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
An organization plans to automatically assign Microsoft 365 E3 licenses to all users in the 'Finance' department. The Finance department is identified by the 'Department' attribute in Microsoft Entra ID. Which method should the administrator use to minimize manual effort?
⚠ Common exam trap
The trap is choosing a one-time bulk method (CSV or PowerShell) when the requirement is ongoing automation — dynamic group licensing is the only option that handles future users automatically.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Group-based licensing using a dynamic group with the rule 'user.department -eq "Finance"'
Dynamic group licensing in Microsoft Entra ID uses attribute-based membership rules, so a rule like 'user.department -eq "Finance"' automatically adds all Finance users to the group. Assigning the Microsoft 365 E3 license to that group means every current and future Finance user receives the license without manual intervention, which is the lowest-effort, most scalable approach.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Group-based licensing using a dynamic group with the rule 'user.department -eq "Finance"'
Why this is correct
In this solution, Microsoft Entra ID group-based licensing is combined with a dynamic group whose membership rule filters users where user.department equals 'Finance'. As new Finance employees are created, they automatically become group members based on their department attribute, and Microsoft Entra ID evaluates membership to provision the Microsoft 365 E3 license within minutes. If a user's department changes, membership is recalculated and the license is automatically removed, providing fully automatic, attribute-driven lifecycle management.
- ✗
Manual assignment using PowerShell
Why it's wrong here
Manually assigning licenses with PowerShell requires connecting with administrator credentials and running a cmdlet such as Set-MsolUserLicense for each Finance user. To keep up with new hires and transfers, an admin would have to rerun a script on a schedule, write authentication handling, and explicitly query users by department—none of this is driven by Microsoft Entra ID's own evaluation of user attributes. It therefore remains an ongoing manual/operational effort rather than a true automatic assignment mechanism, and it does not self-correct when a user leaves Finance.
- ✗
Bulk assignment using a CSV file
Why it's wrong here
Bulk licensing via CSV uploaded in the Microsoft 365 admin center is a point-in-time batch import that assigns licenses to the exact user list in the file. It has no awareness of future Finance hires or users who change departments, so the CSV would need to be regenerated and re-uploaded each time to remain accurate. This is a one-time provisioning action, not an ongoing automated process, and it cannot react to directory changes without repeated manual intervention.
- ✗
Self-service licensing portal
Why it's wrong here
Self-service licensing lets users in an organization browse and assign Microsoft 365 products to themselves, but that assignment is initiated by the user and does not require any logic tied to the Finance department. Even if a self-service license were offered, it would depend on each user choosing the correct license rather than an admin-defined policy, and it cannot automatically provision licenses to newly created Finance employees. Since the goal is automatic, policy-driven assignment, self-service is unsuitable.
Go deeper
Related to this question
Learn chapter
Entra ID Administration
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company wants to ensure that all new users created in Microsoft 365 are automatically assigned a specific set of licenses based on their department. The company has 200 users across Sales, Marketing, and IT departments. Each department uses different Microsoft 365 license plans. Which approach should the administrator use?
medium- A.A: Create a PowerShell script that runs on a schedule to assign licenses based on department attribute.
- B.B: Use group-based licensing and assign each department's users to a security group with the appropriate license.
- ✓ C.C: Use Azure AD Dynamic Groups to automatically add users to groups based on department, and then assign licenses to those groups.
- D.D: Manually assign licenses to each user after creation.
Why C: Azure AD Dynamic Groups can automatically add users to groups based on their department attribute (e.g., using a rule like `user.department -eq "Sales"`), and group-based licensing can then assign the appropriate Microsoft 365 license plan to each dynamic group. This ensures that any new user created with the correct department attribute is automatically added to the corresponding group and receives the license without manual intervention or scheduled scripts.
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.