Exam MD-101 topic 4 question 35 discussion

Actual exam question from Microsoft's MD-101

Question #: 35
Topic #: 4

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD). The domain contains computers that run
Windows 10. The computers are enrolled in Microsoft Intune and Windows Analytics.
Your company protects documents by using Windows Information Protection (WIP).
You need to identify non-approved apps that attempt to open corporate documents.
What should you use?

A. the Device Health solution in Windows Analytics
B. Microsoft Cloud App Security
C. Intune Data Warehouse
D. the App protection status report in Intune

Show Suggested Answer

Suggested Answer: D 🗳️
The App learning report monitors your apps, not in policy, that attempt to access work data. You can identify these apps using the report and add them to your
WIP policies to avoid productivity disruption before fully enforcing WIP with ג€Blockג€ mode. Frequent monitoring of the report will help you continuously identify access attempts so you can update your policy accordingly.
Note: Access the WIP Learning reports
1. Sign in to the Microsoft Endpoint Manager admin center.
2. Select Apps > Monitor > App protection status > Reports.
Reference:
https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/wip-learning

by BLYBOI at Dec. 3, 2020, 3:32 a.m.

Comments

Submit Cancel

mfalkjunk

Highly Voted 4 years, 4 months ago

It is now under: Microsoft Endpoint Manager admin center > Apps > Monitor > App protection status

upvoted 22 times

RodrigoT

3 years, 2 months ago

April 2022 and is still there. Just tested. Follow the path above and then click on the cog Reports | App learning report for Windows Information Protection. https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/wip-learning

upvoted 5 times

...

BLYBOI

Highly Voted 4 years, 6 months ago

Click Intune > Client apps > App protection status > Reports.

upvoted 6 times

...

golijat

Most Recent 1 year, 9 months ago

You should use **the App learning report** in **Windows Information Protection (WIP)**. This report monitors your apps that are not in policy and that attempt to access work data. You can identify these apps using the report and add them to your WIP policies to avoid productivity disruption before fully enforcing WIP with "Block" mode. So, none of the options A, B, C, or D is correct.

upvoted 1 times

...

Perycles

4 years ago

correct

upvoted 1 times

...

sakthivelesec

4 years, 2 months ago

App protection status report gives the report whether the app is protected with App Protection policy or not. I have exported the report and could not find which non-corporate app tries to open the corporate document.

upvoted 1 times

RodrigoT

3 years, 2 months ago

Use App learning report to monitor your apps, not in policy, that attempt to access work data. https://docs.microsoft.com/en-us/windows/security/information-protection/windows-information-protection/wip-learning

upvoted 2 times

...