Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question

The Replace action overwrites the membership of the specified local group with the principals you define. When the policy is applied, any existing members that are not listed in the policy are removed and only the listed members remain. Add (Update) merely appends new members while keeping existing ones. Remove deletes only the accounts you specify but leaves any others intact. Sequencing an Add followed by a Remove would still leave accounts that were never targeted for removal. Therefore, configuring the Replace action meets the requirement that only the built-in Administrator and the HelpdeskAdmins group remain members of the local Administrators group.