Exam MS-900 topic 1 question 192 discussion

Actual exam question from Microsoft's MS-900

Question #: 192
Topic #: 1

You are the Microsoft 365 administrator for a company.
All staff must use Microsoft Outlook to access corporate email. When users access Outlook on mobile devices, they must use a PIN to open the application.
You need to implement a Microsoft Intune policy to enforce the security requirements.
Which policy should you use?

A. device compliance
B. device configuration
C. app protection
D. app configuration

Show Suggested Answer

Suggested Answer: C 🗳️

by MichelleD at Jan. 31, 2021, 5:51 a.m.

Comments

Submit Cancel

syu31svc

Highly Voted 3 years ago

https://docs.microsoft.com/en-us/mem/intune/apps/app-protection-policy: "App protection policies makes sure that the app-layer protections are in place. For example, you can: Require a PIN to open an app in a work context" C for correct

upvoted 5 times

...

Tamar1000BC

Most Recent 5 months, 1 week ago

Selected Answer: C

The correct policy to use is C. app protection. **Explanation:** - **App protection policies** in Microsoft Intune are used to protect company data at the application level. These policies can enforce requirements such as requiring a PIN to access specific applications, like Microsoft Outlook, on mobile devices. - **Device compliance policies** ensure that devices meet certain security requirements before they can access company resources, but they do not specifically enforce app-level security settings. - **Device configuration policies** are used to configure settings on devices, but they do not specifically target app-level security requirements. - **App configuration policies** are used to configure settings within applications, but they do not enforce security requirements like requiring a PIN to open an app. Therefore, to enforce the requirement that users must use a PIN to open the Outlook application on mobile devices, you should use an **app protection policy**.

upvoted 2 times

...

DebW

10 months, 3 weeks ago

Selected Answer: C

C is correct

upvoted 1 times

...

ljljljlj

12 months ago

C is the right answer.

upvoted 1 times

...

JayLearn2022

1 year, 2 months ago

The correct policy to use for this scenario is C. App protection. App protection policies in Microsoft Intune enable organizations to protect corporate data on mobile devices without requiring device enrollment or management. With app protection policies, you can configure data protection settings for specific apps, such as Microsoft Outlook, to ensure that corporate data is protected regardless of whether the device is managed by the organization. In this scenario, you can create an app protection policy in Intune that requires a PIN to be used when accessing Outlook on mobile devices. This policy can be targeted to specific users or groups of users and can be configured to apply to iOS, Android, and Windows devices.

upvoted 2 times

JayLearn2022

1 year, 2 months ago

Device compliance policies are used to evaluate the compliance of devices based on a set of predefined rules and conditions, such as operating system version, security settings, and device health. Device configuration policies are used to configure settings and features on devices, such as Wi-Fi and VPN profiles, and can be used to manage devices that are enrolled in Intune. App configuration policies are used to configure settings and features within specific apps, such as custom branding and user preferences, and are typically used to enhance the user experience within the app rather than enforce security requirements.

upvoted 2 times

...

Gabaky

2 years, 9 months ago

Key word is PIN. app protection

upvoted 3 times

...

MichelleD

3 years, 4 months ago

C. is the correct answer

upvoted 3 times

...