Group membership question

[samabc]

You are managing a Microsoft Entra ID tenant and a Microsoft 365 tenant.

You need to grant temporary access to the Microsoft SharePoint document library to several users in the same Azure group.

For compliance purposes, the group must automatically be deleted after 180 days.

Which actions could you perform? (Select TWO.)

Set up an external identity provider.
Set up an assigned membership on Microsoft 365 groups.
Set up an assigned membership on security groups.
Set up a dynamic membership on Microsoft 365 groups.
Set up a dynamic membership on security groups.

Since you must delete the groups automatically, you can set an expiration policy for Microsoft 365 groups. Note that all associated services will also be deleted when a group expires.

Hence, the correct answers are:

– Set up a dynamic membership on Microsoft 365 groups.

– Set up an assigned membership on Microsoft 365 groups.

The conclusion does not follow the premise. Why are these the correct answers? Assigned membership is the default for Microsoft 365 groups, why does it need to be set up? What do you need to do to set it up or configure it?

Both Perplexity.ai and ChatGPT give different answers.

[Irene-TutorialsDojo]

Hello samabc,

Thank you for reaching out and sharing your concern. We understand the confusion around why both assigned and dynamic Microsoft 365 groups are listed as correct answers, especially since assigned membership is the default option.

The key factor in this question is not how users are added to the group, but rather the fact that an expiration policy is required. Accordingly, expiration policies are supported only for Microsoft 365 groups, and they apply regardless of whether the group is assigned or dynamic. This means that both types of Microsoft 365 groups meet the requirement of being automatically deleted after 180 days.

Assigned membership is indeed the default for Microsoft 365 groups, but it is still considered a correct answer here because the exam is testing the distinction between Microsoft 365 groups (which support expiration policies) and security groups (which do not). No extra configuration is needed beyond creating the Microsoft 365 group and enabling the expiration policy.

We’ve updated the explanation in this question to highlight this distinction more clearly, ensuring it is fully aligned with the latest official Azure documentation.

If you have further questions or need additional clarification, please don’t hesitate to contact us.

Best,

Irene @ Tutorials Dojo