Exam CSCP All Questions

View all questions & answers for the CSCP exam

Exam SC-300 topic 2 question 35 discussion

Actual exam question from APICS's CSCP

Question #: 35
Topic #: 1

You have a Microsoft 365 tenant.

You currently allow email clients that use Basic authentication to connect to Microsoft Exchange Online.

You need to ensure that users can connect to Exchange only from email clients that use Modern authentication protocols.

What should you implement?

A. an OAuth policy in Microsoft Defender for Cloud Apps
B. a conditional access policy in Azure Active Directory (Azure AD)
C. a compliance policy in Microsoft Endpoint Manager
D. an application control profile in Microsoft Endpoint Manager

Show Suggested Answer

Suggested Answer: B 🗳️

by natazar at Jan. 16, 2023, 2:26 p.m.

Comments

Submit Cancel

emartiy

9 months, 3 weeks ago

Selected Answer: B

B. a conditional access policy in Azure Active Directory (Azure AD) you can block user interactive sign-in via a client uses basic auth with Conditional Access policy checking..

upvoted 4 times

...

curtmcgirt

1 year, 2 months ago

Selected Answer: B

B is correct.

upvoted 1 times

...

Nyamnyam

1 year, 2 months ago

Selected Answer: B

Hahaha, Examtopics must be kidding. B for sure. D is impossible, because: there's no such thing as "application control profile in Microsoft Endpoint Manager" the nearest is "application control policy", but this is "designed to protect devices against malware and other untrusted software".

upvoted 2 times

...

sherifhamed

1 year, 3 months ago

Selected Answer: B

B. a conditional access policy in Azure Active Directory (Azure AD) Conditional access policies in Azure AD allow you to control access to resources based on conditions such as user location, device compliance, and client application type. By creating a conditional access policy that enforces Modern authentication protocols and blocks Basic authentication, you can achieve the desired security outcome. This will ensure that only email clients supporting Modern authentication are allowed to connect to Exchange Online. Options A, C, and D are not directly related to enforcing the use of Modern authentication protocols for Exchange Online and would not achieve the goal of blocking Basic authentication.

upvoted 4 times

...

OutLawTheBoyzz

1 year, 5 months ago

WOW, so many different answers.. I am going with B https://o365reports.com/2022/07/20/disable-basic-authentication-office-365/

upvoted 2 times

...

EmnCours

1 year, 6 months ago

Selected Answer: B

Correct Answer: D

upvoted 2 times

...

dule27

1 year, 7 months ago

Selected Answer: B

B. a conditional access policy in Azure Active Directory (Azure AD)

upvoted 3 times

...

Aidanjl

1 year, 7 months ago

Selected Answer: D

Hi - I think you guys are incorrect. This question is asking to specifically block 'BASIC' Authentication in Exchange Online, not 'LEGACY' Authentication. Microsoft specifically details how to do this here: https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/disable-basic-authentication-in-exchange-online

upvoted 1 times

Aidanjl

1 year, 7 months ago

Sorry I think I'm incorrect... just realised D doesn't line up to the guidance in the MS article

upvoted 3 times

...

TomasValtor

1 year, 7 months ago

B is correct The easiest way to block legacy authentication across your entire organization is by configuring a Conditional Access policy that applies specifically to legacy authentication clients and blocks access.

upvoted 1 times

...

ShoaibPKDXB

1 year, 8 months ago

Selected Answer: B

B is correct

upvoted 1 times

...

sbnpj

1 year, 9 months ago

Selected Answer: B

Conditional access policy is used for blocking legacy auth.

upvoted 1 times

...

Guestie

1 year, 10 months ago

Selected Answer: B

The question says nothing about what type of device or what tjhe application being used is so setting an App control policy will not do anything. CA polciies allow legacy auth to be blocked regardless of device.

upvoted 1 times

...