Exam SC-100 topic 4 question 29 discussion

AE is the answer. https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#create-a-block-download-policy-for-unmanaged-devices Defender for Cloud Apps session policies allow you to restrict a session based on device state. To accomplish control of a session using its device as a condition, create both a conditional access policy AND a session policy.

True, Answer A & E

Question says "authenticated users". So its passed the conditional access stage. So A seems not right. What is the correct answer set then ?

Same as Question 27. https://www.examtopics.com/discussions/microsoft/view/106549-exam-sc-100-topic-4-question-27-discussion

Seems correct.

Conditional access to block sign in from unauthorized device. MDCA to prevent downloads.

https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#create-a-block-download-policy-for-unmanaged-devices

AE - according to ChatGPT: To block file downloads from Microsoft SharePoint Online by authenticated users on unmanaged devices, the recommended solution is to use Azure AD Conditional Access and Microsoft Defender for Cloud Apps. Azure AD Conditional Access provides policies that enable you to ensure that access to your Microsoft 365 resources is only allowed from trusted devices that meet your compliance requirements. You can use Conditional Access policies to block access to SharePoint Online for users on unmanaged devices. Microsoft Defender for Cloud Apps provides advanced data protection and compliance features for cloud applications, including SharePoint Online. Defender for Cloud Apps allows you to control access to data in SharePoint Online, including blocking file downloads by authenticated users on unmanaged devices. Therefore, the correct answers are A) Azure AD Conditional Access and E) Microsoft Defender for Cloud Apps.

AE is correct https://learn.microsoft.com/en-us/sharepoint/block-download-from-sites

Looks correct