Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 97 discussion

Actual exam question from Microsoft's AZ-500

Question #: 97
Topic #: 2

DRAG DROP
-

You have an Azure subscription that contains an Azure web app named App1.

You plan to configure a Conditional Access policy for App1. The solution must meet the following requirements:

• Only allow access to App1 from Windows devices.
• Only allow devices that are marked as compliant to access App1.

Which Conditional Access policy settings should you configure? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by billo79152718 at May 21, 2023, 10:59 a.m.

Comments

Submit Cancel

liorh

Highly Voted 2 years ago

1:conditions 2:grant tested in lab for 10000%

upvoted 42 times

basak

1 year, 10 months ago

correct

upvoted 1 times

...

Self_Study

Highly Voted 1 year, 10 months ago

On exam 7/8/23. Went with Conditions and Grant.

upvoted 10 times

...

pentium75

Most Recent 10 months, 2 weeks ago

Conditions Grant

upvoted 2 times

...

brooklyn510

1 year, 5 months ago

On exam 1/2/24

upvoted 4 times

...

Obama_boy

1 year, 6 months ago

For the scenario described, the correct Conditional Access policy settings would be: Only allow access to App1 from Windows devices: Policy Setting: Conditions -> Device platforms -> select Windows Only allow devices that are marked as compliant to access App1: Policy Setting: Grant -> Grant access -> Require device to be marked as compliant These settings will ensure that only devices running Windows and marked as compliant can access the application, aligning with the described requirements.

upvoted 8 times

xRiot007

9 months, 3 weeks ago

Microsoft English is sometimes so broken. Should have called both Conditions because to require a device to be compliant is clearly a condition that needs to be satisfied.

upvoted 2 times

anjanc

5 months, 2 weeks ago

Yes you're right

upvoted 1 times

...

wardy1983

1 year, 7 months ago

Conditions, Grant, Only allow access to App1 from Windows devices: Conditions Only allow devices that are marked as compliant to access App1: Grant

upvoted 2 times

...

bsakabato

1 year, 9 months ago

2: Conditions is more suitable to allow access based on device compliance, versus grant that control authorization after access Conditons can use the filter for device parameter with attribute device.isCompliant -eq "True" https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices

upvoted 2 times

...

ESAJRR

1 year, 9 months ago

1:conditions 2:grant

upvoted 1 times

...

heatfan900

1 year, 9 months ago

CONDITIONS = only allowing access to the app based on the condition your device runs Windows GRANT = Only granting access to the App, after logging into the device, by ensuring the device is compliant with the policy

upvoted 1 times

...

yanaginagi

1 year, 10 months ago

1: conditions 2: grant tested!

upvoted 3 times

...

973b658

2 years ago

OK 1 https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions#device-platforms 2 https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant

upvoted 2 times