Microsoft Azure Administrator Associate AZ-104 Practice Question

To achieve automatic updates to the group membership based on user attributes, you should create a security group with dynamic user membership using a department attribute query. This allows Azure Entra ID to automatically add or remove users from the group when their department attribute changes. Assigned membership requires manual management of group members, which does not meet the requirement for automatic updates. A Microsoft 365 group is typically used for collaboration features in Microsoft 365 services and may not be necessary if those features aren't required. An administrative unit is used for delegating administrative permissions and scoping administrative tasks, not for grouping users based on attributes.