Exam MS-101 topic 2 question 131 discussion

Actual exam question from Microsoft's MS-101

Question #: 131
Topic #: 2

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps.

You configure a session control policy to block downloads from SharePoint Online sites.

Users report that they can still download files from SharePoint Online sites.

You need to ensure that file download is blocked while still allowing users to browse SharePoint Online sites.

What should you configure?

A. an access policy
B. a data loss prevention (DLP) policy
C. an activity policy
D. a Conditional Access policy

Show Suggested Answer

Suggested Answer: D 🗳️

by fdcpinto at April 21, 2023, 7:28 p.m.

Comments

Submit Cancel

Amir1909

1 year, 5 months ago

Correct

upvoted 1 times

...

Powerplay27

2 years ago

D https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad

upvoted 2 times

...

Csabulator

2 years, 1 month ago

Selected Answer: D

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies or https://learn.microsoft.com/en-us/defender-cloud-apps/use-case-proxy-block-session-aad

upvoted 3 times

Jakub2023

2 years, 1 month ago

Yes: "To accomplish control of a session using its device as a condition, create both a conditional access policy AND a session policy." (see the second link provided by Csabulator)

upvoted 2 times

...

Francesco

2 years, 2 months ago

conditional access https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/protect-sensitive-sharepoint-sites-with-defender-for-cloud-apps/ba-p/3592441

upvoted 3 times

...

fdcpinto

2 years, 2 months ago

Selected Answer: B

Dlp shroud be the answer

upvoted 1 times

ChizzyO

2 years ago

Can you share any link to this effect? From the links by Csabulator and Francesco, Conditional answer is correct.

upvoted 2 times

ChizzyO

2 years ago

I meant conditional access policy is correct.

upvoted 2 times

...