Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 3 question 43 discussion

Actual exam question from Microsoft's SC-300

Question #: 43
Topic #: 3

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps.

You plan to increase app security for the subscription.

You need to identify which apps do NOT require user authentication.

What should you do in the Microsoft 365 Defender portal?

A. Review the cloud app catalog.
B. Create an OAuth policy and review alerts.
C. Create a snapshot Cloud Discovery report.
D. Create a discovered app query.

Show Suggested Answer

Suggested Answer: A 🗳️

by haazybanj at Nov. 6, 2023, 8:38 a.m.

Comments

Submit Cancel

haazybanj

Highly Voted 1 year, 8 months ago

Selected Answer: A

A is the right answer> Tested and confirmed you can filter to see apps that require user authentication from both cloud app catalog and Cloud discovery

upvoted 7 times

psp65

1 month, 1 week ago

I tested it, both A and C are correct. In the Cloud App Catalog you can easily filter by app security risk factor -> requires user auth=NO. In a Cloud Discovery report you have to create a query for that (its not predefined filter) but it still is possible. (https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries)

upvoted 1 times

...

Ody

1 year, 4 months ago

The question is about the apps that do NOT.

upvoted 2 times

...

haazybanj

Highly Voted 1 year, 8 months ago

Selected Answer: A

To identify which apps do NOT require user authentication in the Microsoft 365 Defender portal, you should review the cloud app catalog. Reviewing the cloud app catalog in the Microsoft 365 Defender portal provides you with a comprehensive list of all the apps connected to your Microsoft 365 environment. It allows you to see which apps require user authentication and which ones do not.

upvoted 6 times

...

Kevin_17

Most Recent 4 days, 8 hours ago

Selected Answer: D

If the app is used without Azure AD authentication (e.g. public app, local login, or other IdP), it can be detected via firewall or proxy logs. Apps can be targeted with the "Authenticaiton = none" parameter.

upvoted 1 times

...

Obi_Wan_Jacoby

2 months, 3 weeks ago

Selected Answer: A

Answer A: I have confirmed you can use the cloud app catalog by going to advanced filters and choosing "No" onr ather the app requires authentication or not (default is yes, but under adnavced you can change it to no). It seems you may also use Answer D. However, in this case, answer A is the more straight forward (east you get to) answer.

upvoted 1 times

...

d1e85d9

3 months, 4 weeks ago

Selected Answer: D

Answer: D. Create a discovered app query.

upvoted 1 times

...

YesPlease

4 months, 1 week ago

Selected Answer: D

Answer d) Create a discovered app query https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries:~:text=Cloud%20apps%20that%20allow%20anonymous%20use

upvoted 1 times

...

ItzVerified

1 year, 2 months ago

Selected Answer: D

Hereby the Microsoft link : https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries

upvoted 3 times

jim85

1 year ago

good, thanks!

upvoted 1 times

...

NICKTON81

1 year, 2 months ago

D - Cloud apps that allow anonymous use - filters all your discovered apps to display only apps that are security risks because they don't require user authentication and allow users to upload data. https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries

upvoted 2 times

...

klayytech

1 year, 2 months ago

Old Design now it is named Microsoft Defender XDR i think this Q will change

upvoted 1 times

klayytech

1 year, 2 months ago

https://learn.microsoft.com/en-us/defender-xdr/microsoft-365-security-center-defender-cloud-apps?view=o365-worldwide

upvoted 1 times

...

wheeldj

1 year, 3 months ago

Selected Answer: D

The cloud app catalog lets you filter for apps that require user auth, but not those that don't. Creating a query on the discovered apps page allows you to query apps that DON'T require authentication https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries

upvoted 2 times

...

blanco00555

1 year, 3 months ago

Selected Answer: D

https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries >Cloud apps that allow anonymous use - filters all your discovered apps to display only apps that are security risks because they don't require user authentication and allow users to upload data.

upvoted 2 times

...

penatuna

1 year, 6 months ago

Selected Answer: A

The Cloud app catalog page supports basic filters available from the dropdowns listed across the top of the page. To use advanced filters, toggle on the Advanced filters option at the top right. You can identify which apps do NOT require user authentication with advanced filter. Choose Security risk factor / Requires user authentication / equals / No.

upvoted 4 times

penatuna

1 year, 6 months ago

NOTE! D could also be right answer. You can Create a discovered app query and get the needed information. When you have a large number of discovered apps, you'll find it useful to filter and query them. Defender for Cloud Apps also provides you with Suggested queries and enables you to save custom queries you frequently use. Suggested queries provide you with recommended avenues of investigation that filter your discovered apps by using the following optional suggested queries: • Cloud apps that allow anonymous use - filters all your discovered apps to display only apps that are security risks because they don't require user authentication and allow users to upload data. https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#discovered-app-queries

upvoted 3 times

...

Tomasfc

1 year, 7 months ago

Selected Answer: D

As seen in the link bellow: "Cloud apps that allow anonymous use - filters all your discovered apps to display only apps that are security risks because they don't require user authentication and allow users to upload data." https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries

upvoted 4 times

...