Sample question 1 — Manage Azure Identities and Governance
A university provisions Microsoft 365 licenses for thousands of students and staff, and the IT team currently assigns licenses to each user individually. New students are added every term, and unused licenses remain assigned after graduation, which inflates cost. The team wants license assignment and removal to follow group membership automatically. Which Microsoft Entra ID capability should be used?
- A. Creating a dynamic group and assigning licenses through a PowerShell runbook.
- B. Assigning licenses through an administrative unit that follows the academic calendar.
- C. Publishing access packages that include the license as a resource in Entitlement Management.
- D. Configuring group-based licensing on security groups synchronized from the directory.
Answer: D. Option D is correct because configuring group-based licensing on security groups synchronized from the directory assigns and removes licenses as users join or leave those groups. Option A is incorrect because a scheduled runbook adds operational delay and maintenance overhead. Option B is incorrect because administrative units scope administration and do not perform license assignment. Option C is incorrect because access packages govern resource requests rather than directory license state.
