Exam SC-300 topic 2 question 121 discussion

Actual exam question from Microsoft's SC-300

Question #: 121
Topic #: 2

HOTSPOT
-

You have a Microsoft 365 subscription.

You configure a Global Secure Access security profile named SecurityProfile1.

You need to create a Conditional Access policy named CAPolicy1 that will use SecurityProfile1.

Which two settings should you configure to ensure that CAPolicy1 uses SecurityProfile1? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by armid at Feb. 21, 2025, 10:14 p.m.

Comments

Submit Cancel

Obi_Wan_Jacoby

3 months, 1 week ago

As others, I will also go with "Target Resources" and "Session" The Session section is used for configuring Global Secure Access security profiles because it allows you to enforce specific session controls, such as requiring multifactor authentication (MFA) or device compliance, for traffic routed through Global Secure Access. This is essential for managing ongoing access and security during the session. The Grant option, on the other hand, is typically used to enforce immediate access requirements, such as requiring MFA or device compliance at the point of login12. While it can be used to set conditions for granting access, it doesn't provide the same level of control over the session as the Session section does.

upvoted 3 times

...