Exam MD-101 topic 3 question 22 discussion

Answer A is correct. I just configured this in the MD-101 lab. Though, the "Terms Of Use" itself should be setup first before this option becomes available in the "grant" part of the policy. But that is not part of the question..

Conditional Access -Access Control -Require app protection policy -ToU

A is correct.

Definitely A. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/require-tou#create-your-conditional-access-policy

Answer is A "If your organization has created terms of use, additional options may be visible under grant controls. These options allow administrators to require acknowledgment of terms of use as a condition of accessing the resources protected by the policy" https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#require-approved-client-app

I believe B. Conditions in the Assignments section is the correct answer here. "Within a Conditional Access policy, an administrator can make use of signals from conditions like risk, device platform, or location to enhance their policy decisions." A. Grant in the Access controls section - "Within a Conditional Access policy, an administrator can make use of access controls to either grant or block access to resources. Block takes into account any assignments and prevents access based on the Conditional Access policy configuration. Administrators can choose to enforce one or more controls when granting access." Such as MFA. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-Conditions https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant Other thoughts?

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-grant#terms-of-use

Answer is either A or B. What should you do first It is not uncommon for the 2nd step to be listed as an option, to really see if you know what you are doing. Option B initially could be a candidate for this aspect. This question is referring to the manual registration of devices to autopilot. NOT C If B,C,D needs to be considered then we need a CSV file not a XML file. NOT D Refers to win7/8.1 I believe