Exam MS-302 topic 5 question 3 discussion

Your company uses Microsoft SharePoint Online and Microsoft OneDrive for Business to store documents.
You need to prevent uses from downloading the SharePoint and OneDrive documents from unmanaged devices. The users must be able to edit the documents from a web browser on the unmanaged devices.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Suggested Answer: ACD 🗳️
Go to Microsoft Azure portal and add two policies.
1. Create a policy for SharePoint that applies to mobile apps and desktop clients, and allows access only from compliant or domain-joined devices.
2. Create another policy for SharePoint that applies to web browsers, and select "use app-enforced restrictions."
Once your Office 365 tenant is enabled for first release we can limit device access to SharePoint, OneDrive and Office 365 Groups in SharePoint Admin Center.
Select "Allow limited access (web-only, without the Download, Print and Sync commands)". For files that can't be viewed on the web select "Block downloading"

References:
https://ronnydejong.com/2017/07/04/control-access-to-sharepoint-onlineonedrive-from-unmanaged-devices/