The answer is group-based licensing using a dynamic group. This method is correct because it leverages Azure AD’s ability to automatically assign Microsoft 365 E5 licenses to every user whose ‘department’ attribute equals ‘Sales’, with the dynamic group evaluating membership rules in real time. As soon as a user’s department attribute is updated, the license is applied or removed without any manual effort, making it the ideal solution for automatic license assignment by department. On the MS-102 exam, this scenario tests your understanding of Azure AD group-based licensing versus direct assignment or PowerShell scripts—a common trap is choosing per-user licensing, which requires ongoing manual updates. Remember the memory tip: “Dynamic groups do the heavy lifting; static groups need a human touch.”
MS-102 Deploy and manage a Microsoft 365 tenant Practice Question
This MS-102 practice question tests your understanding of deploy and manage a microsoft 365 tenant. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. A key principle to apply: dynamic groups automatically update membership based on user attributes.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A new administrator needs to automatically assign Microsoft 365 E5 licenses to all users in the Sales department. The Sales department is identified by the 'department' attribute in Azure AD. Which licensing method should the administrator use to minimize manual effort?
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "minimum / minimize"
Why it matters: Asks for the least resource use — fewest addresses, smallest subnet, lowest overhead. Eliminate over-provisioned options even if they would technically work.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Group-based licensing using a dynamic group
Group-based licensing using a dynamic group is the correct method because it automatically assigns Microsoft 365 E5 licenses to all users in the Sales department based on the 'department' attribute in Azure AD. Dynamic groups evaluate membership rules in real time, so when a user's department attribute is set to 'Sales', the license is assigned without manual intervention. This minimizes administrative effort by eliminating the need for per-user or batch operations.
Key principle: Dynamic groups automatically update membership based on user attributes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Manual license assignment per user
Why it's wrong here
Manual assignment is time-consuming and does not automatically adjust when users change departments.
✓
Group-based licensing using a dynamic group
Why this is correct
Dynamic groups automatically update membership based on attributes, and group-based licensing assigns licenses to all members.
Clue confirmation
The clue word "minimum / minimize" in the question point toward this answer.
Related concept
Dynamic groups automatically update membership based on user attributes.
✗
PowerShell script to assign licenses
Why it's wrong here
PowerShell scripts require ongoing maintenance and do not automatically handle membership changes.
✗
Bulk license assignment via CSV file
Why it's wrong here
CSV import is a one-time operation and does not provide automatic updates.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often choose PowerShell scripting (Option C) thinking it is the most automated method, but they overlook that group-based licensing provides true zero-touch, attribute-driven automation without requiring custom code or scheduled tasks.
Detailed technical explanation
How to think about this question
Group-based licensing in Azure AD uses a dynamic group with a membership rule such as `(user.department -eq "Sales")`. When a user is added to Azure AD or their department attribute is updated, the group membership is evaluated within minutes, and the license assignment is processed asynchronously via the Microsoft 365 licensing service. This method also supports automatic license removal when a user leaves the group, ensuring compliance without manual cleanup.
KKey Concepts to Remember
Dynamic groups automatically update membership based on user attributes.
Group-based licensing assigns licenses to all members of a group.
Licenses are automatically assigned/removed as users join/leave the dynamic group.
Requires Azure AD Premium P1 or P2 for dynamic groups and group-based licensing.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Dynamic groups automatically update membership based on user attributes.
Real-world example
How this comes up in practice
A cloud solutions architect for a retail company is evaluating services for a new workload. The correct answer here reflects best practice for the specific scenario described — not a general cloud recommendation. Dynamic groups automatically update membership based on user attributes. Cloud exam questions reward reading the constraint carefully: the same technology can be right or wrong depending on the use case.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this MS-102 question in full detail.
Review dynamic groups automatically update membership based on user attributes., then practise related MS-102 questions on the same topic to reinforce the concept.
Deploy and manage a Microsoft 365 tenant — This question tests Deploy and manage a Microsoft 365 tenant — Dynamic groups automatically update membership based on user attributes..
What is the correct answer to this question?
The correct answer is: Group-based licensing using a dynamic group — Group-based licensing using a dynamic group is the correct method because it automatically assigns Microsoft 365 E5 licenses to all users in the Sales department based on the 'department' attribute in Azure AD. Dynamic groups evaluate membership rules in real time, so when a user's department attribute is set to 'Sales', the license is assigned without manual intervention. This minimizes administrative effort by eliminating the need for per-user or batch operations.
What should I do if I get this MS-102 question wrong?
Review dynamic groups automatically update membership based on user attributes., then practise related MS-102 questions on the same topic to reinforce the concept.
Are there clue words in this question I should notice?
Yes — watch for: "minimum / minimize". Asks for the least resource use — fewest addresses, smallest subnet, lowest overhead. Eliminate over-provisioned options even if they would technically work.
What is the key concept behind this question?
Dynamic groups automatically update membership based on user attributes.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A company purchases Microsoft 365 E5 licenses for 500 users. The administrator wants to automatically assign licenses to new users based on their group membership. Which method should the administrator use?
easy
A.Run a PowerShell script to assign licenses individually
✓ B.Configure group-based licensing in Microsoft Entra ID
C.Manually assign licenses in the Microsoft 365 admin center for each user
D.Use a volume licensing product key to activate licenses
Why B: Group-based licensing in Microsoft Entra ID (formerly Azure AD) allows automatic assignment and removal of licenses based on group membership. When a user is added to a licensed group, the license is automatically assigned; when removed, the license is revoked. This eliminates manual effort and ensures consistent licensing for all 500 users.
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.