Privileged Identity Management (PIM) for groups in Microsoft Entra ID can only be applied to eligible assignment groups, specifically security groups and Microsoft 365 groups that have a membership type of Assigned. According to Microsoft documentation ("Manage Privileged Access Groups in PIM"), only assigned groups can be enabled for PIM. Dynamic groups are not supported for PIM because their memberships are automatically managed based on rules, and PIM requires manual activation and approval for eligible roles or memberships.
From the official study guide and Microsoft Learn module "Implement Privileged Identity Management (PIM) for Groups" :
"Only groups with an Assigned membership type can be managed in Privileged Identity Management.
Dynamic membership groups cannot be enabled for privileged access."
Therefore, among the listed groups:
* Group1 (Security, Assigned) # Supported
* Group2 (Security, Dynamic) # Not supported
* Group3 (Microsoft 365, Assigned) # Supported
* Group4 (Microsoft 365, Dynamic) # Not supported
# Correct Answer: C. Group1 and Group3 only