Exam MS-300 topic 2 question 2 discussion

Actual exam question from Microsoft's MS-300

Question #: 2
Topic #: 2

Your company uses Microsoft SharePoint Online and Microsoft OneDrive for Business to store documents.
You need to prevent users from downloading the SharePoint and OneDrive documents from unmanaged devices. The users must be able to edit the documents from a web browser on the unmanaged devices.
Which three actions should you perform? Each correct answer presents part of the solution?
NOTE: Each correct selection is worth one point.

A. Set Allow limited access to Allow downloading.
B. Create a conditional access policy that allows access from managed devices.
C. Create a conditional access policy to block access from unmanaged mobile and desktop clients.
D. Set Allow limited access to Block downloading.
E. Create a conditional access policy for web browsers that has app-enforced restrictions.

Show Suggested Answer

Suggested Answer: BDE 🗳️
References:
https://docs.microsoft.com/en-us/microsoft-365/enterprise/sharepoint-file-access-policies#use-app-enforced-restrictions-in-sharepoint-online

by s0ylaunica at Aug. 21, 2019, 2:25 p.m.

Comments

Submit Cancel

s0ylaunica

Highly Voted 5 years, 9 months ago

B. Create a conditional access policy that allows access from managed devices. Shouldn't this say unmanaged devices?

upvoted 6 times

jack0215

5 years, 3 months ago

agreed, should CDE

upvoted 2 times

Himanjan

5 years ago

Yes, Correct options are CDE 1st we need to block access from any mobile/desktop client apps using conditional access policy in Azure AD Then 2nd conditional access policy is to make browser app enforced restiction in Azure AD Block download (Allow limited access) for unmanged devicesfrom SharePoint access control

upvoted 1 times

...

Raonm

Most Recent 4 years, 10 months ago

Actually, the highlighted answers are correct; the question doesn't mention anything about specific device types, it only specifies 'unmanaged'. Conditional Access Policy; the condition in this case being the device to be managed.

upvoted 1 times

...

626health

5 years, 1 month ago

It cannot be C, "unmanaged mobile and desktop clients." You do not want to block the Desktop clients.

upvoted 4 times

...