ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-100 All Questions

View all questions & answers for the SC-100 exam
Go to Exam

Exam SC-100 topic 4 question 29 discussion

Actual exam question from Microsoft's SC-100
Question #: 29
Topic #: 4
[All SC-100 Questions]

You have a Microsoft 365 subscription.

You need to design a solution to block file downloads from Microsoft SharePoint Online by authenticated users on unmanaged devices.

Which two services should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Azure AD Conditional Access
  • B. Azure Data Catalog
  • C. Microsoft Purview Information Protection
  • D. Azure AD Application Proxy
  • E. Microsoft Defender for Cloud Apps
Show Suggested Answer Hide Answer
Suggested Answer: AE 🗳️
by _adem at April 5, 2023, 9:08 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
zellck
Highly Voted 1 year, 9 months ago
Selected Answer: AE
AE is the answer. https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#create-a-block-download-policy-for-unmanaged-devices Defender for Cloud Apps session policies allow you to restrict a session based on device state. To accomplish control of a session using its device as a condition, create both a conditional access policy AND a session policy.
upvoted 5 times
...
Luweho
Most Recent 4 weeks, 1 day ago
Selected Answer: AE
"Defender for Cloud Apps Conditional Access app control" can block downloads from unmanaged devices, and Conditional Access is a prerequisite to the feature. https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#create-a-block-download-policy-for-unmanaged-devices
upvoted 1 times
...
sherifhamed
1 year, 5 months ago
Selected Answer: AE
True, Answer A & E
upvoted 2 times
...
tirajvid
1 year, 6 months ago
Question says "authenticated users". So its passed the conditional access stage. So A seems not right. What is the correct answer set then ?
upvoted 2 times
Luweho
4 weeks, 1 day ago
Users *should* be able to authenticate. We should block them from *downloading* if the device is unmanaged.
upvoted 1 times
...
Kdosec
1 year, 2 months ago
But it also mentioned that "unmanaged devices", we must use Azure AD CA rule to check corporate devices.
upvoted 2 times
...
...
zellck
1 year, 9 months ago
Same as Question 27. https://www.examtopics.com/discussions/microsoft/view/106549-exam-sc-100-topic-4-question-27-discussion
upvoted 1 times
...
uffman
1 year, 9 months ago
Selected Answer: AE
Seems correct.
upvoted 3 times
...
KallMeDan
1 year, 9 months ago
Selected Answer: AE
Conditional access to block sign in from unauthorized device. MDCA to prevent downloads.
upvoted 3 times
...
CarisB
1 year, 9 months ago
Selected Answer: AE
https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad#create-a-block-download-policy-for-unmanaged-devices
upvoted 3 times
...
MaciekMT
1 year, 10 months ago
AE - according to ChatGPT: To block file downloads from Microsoft SharePoint Online by authenticated users on unmanaged devices, the recommended solution is to use Azure AD Conditional Access and Microsoft Defender for Cloud Apps. Azure AD Conditional Access provides policies that enable you to ensure that access to your Microsoft 365 resources is only allowed from trusted devices that meet your compliance requirements. You can use Conditional Access policies to block access to SharePoint Online for users on unmanaged devices. Microsoft Defender for Cloud Apps provides advanced data protection and compliance features for cloud applications, including SharePoint Online. Defender for Cloud Apps allows you to control access to data in SharePoint Online, including blocking file downloads by authenticated users on unmanaged devices. Therefore, the correct answers are A) Azure AD Conditional Access and E) Microsoft Defender for Cloud Apps.
upvoted 3 times
...
gaura
1 year, 10 months ago
AE is correct https://learn.microsoft.com/en-us/sharepoint/block-download-from-sites
upvoted 1 times
...
_adem
1 year, 10 months ago
Selected Answer: CE
Looks correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel