Exam MS-203 topic 1 question 12 discussion

Wrong. Right answer should be C. an Outlook Web App policy in Exchange Online

C is wrong because it only defines if onedrive is allowed as storage for OWA or not, it won't restrict using onedrive in other apps like mobile outlook or desktop outlook. Right answer should be B.

C is correct

block saving data from Outlook client onto OneDrive that way the requirement of being able to save to OneDrive

the answer is C https://m365scripts.com/exchange-online/restrict-external-storage-providers-in-owa/

get-OwaMailboxPolicy |fl id,*Attachments*,*fileaccess* OneDriveAttachmentsEnabled : True DirectFileAccessOnPublicComputersEnabled : False DirectFileAccessOnPrivateComputersEnabled : False

C is the most correct option

It is not possible with recent change in Endpoint manager to create an app protection policy for Windows devices (called WIP) for "without enrollment" type devices That leaves us with C

B. an app protection policy in Microsoft Endpoint Manager is the correct answer because this policy will allow you to configure settings that will ensure that attachments are saved to OneDrive for Business when users connect to their mailbox from Outlook on the web.

In my opinion there is no correct answer to this question. Disabling Direct File access does not prevent the user from downloading the attachment. Also there is no option for OWA in Endpoint Manager. If anyone has been able to do this via an app protection policy in Endpoint Manager or through an OWA Web App policy, please share with us how you did it. This is the only valid method I could find, but it uses a conditional access policy in Azure combined with an OWA mailbox policy: https://profadmins.com/2021/10/09/restrict-downloading-attachments-from-owa/ Answer C is the least wrong.

Right answer should be C.

The App Protection Policy would block saving data from Outlook client on to OneDrive that way the requirement of being able to save to OneDrive ONLY when connected to Outlook web can be fulfilled.

I'm not sure if the wording if this questions has been changed. "You need to ensure that the users can save attachments to OneDrive for Business only when they connect to their mailbox from Outlook on the web." --- My understanding is that saving attachments to OneDrive will only be available in OWA, not in Outlook client/mobile. I do not see this as an option in OWA Policies.. The best choice I think is B.

Right answer should be C get-OwaMailboxPolicy |fl id,*Attachments*,*fileaccess* Id : OwaMailboxPolicy-Default OneDriveAttachmentsEnabled : True ClassicAttachmentsEnabled : True ReferenceAttachmentsEnabled : True SaveAttachmentsToCloudEnabled : True DirectFileAccessOnPublicComputersEnabled : False DirectFileAccessOnPrivateComputersEnabled : False

Correct answer is C

I tested it, with B it is not possible to block it

aaa.. found it. OwaMailboxPolicy-Default or Outlook Web App policy in EAC. under File access - Direct file access(check box). Enjoy!~