Exam MS-500 topic 3 question 23 discussion

Correct answer for 1 is Users and Groups, Cloud Apps, Session. You then configure a new OwaMailboxPolicy and then set the ConditionalAccessPolicy setting with either ReadOnly or the ReadOnly and blocking attachments. You can then assign the policy to individual mailboxes. Documentation: https://techcommunity.microsoft.com/t5/outlook-blog/conditional-access-in-outlook-on-the-web-for-exchange-online/ba-p/267069

I would say both are correct. Look at this article: https://techcommunity.microsoft.com/t5/outlook-blog/conditional-access-in-outlook-on-the-web-for-exchange-online/ba-p/267069 Also you can find there the old thread discussion: https://www.examtopics.com/discussions/microsoft/view/6139-exam-ms-500-topic-3-question-8-discussion/

answer is correct: conditions => filter for devices => query => is compliant

Answer is correct, looks like you have to configure this from both the graphical Azure AD site as well as from PowerShell. 1. New-OwaMailboxPolicy -Name PolicyName 2. Set-OwaMailboxPolicy -Name PolicyName -ConditionalAccessPolicy [ReadOnly | ReadOnlyPlusAttachmentsBlocked] References: - https://learn.microsoft.com/en-us/powershell/module/exchange/set-owamailboxpolicy?source=recommendations&view=exchange-ps - https://techcommunity.microsoft.com/t5/outlook-blog/conditional-access-in-outlook-on-the-web-for-exchange-online/ba-p/267069#:~:text=Steps%20to%20Configuring%20Conditional%20Access%20%2F%20Limited%20Access,your%20existing%20one%20Set-OwaMailboxPolicy%20-Identity%20Default%20-ConditionalAccessPolicy%20ReadOnly

answer mentioned here is correct, passed on exam july 27,2022

You don't need to set anything under conditions since the location is "all locations". Need to set "App based restrictions" under session. Set "Require device to be compliant" under "Grant". Asshole question.

For the first question I think it should be (Session and condition) since ( Session = app enforced restriction ) << which is one of the requirement in the question also (Condition = To filter the non-compliant devices) correct me if am wrong

Given answers are correct, as itbrpl pointed out. You need to restrict activity via a conditional access policy for Group1 (Users & Groups) when using Exchange Online (Cloud Apps) dependent on their location (Condition).

Look... based on the scenario.. you need to block a group, for a given app and in any location... so it means Users and Groups (Group1), Cloud Apps (Exchange Online) and Condition (Location).. you don't need to set anything under Session...

Users and Groups, Cloud Apps, Session Set-OwaMailboxPolicy

Microsoft 365 Security Administration: MS-500 Exam Guide Peter Rising Page 66 to Page 69 From the Azure portal, create a conditional access policy and configure: - Users and groups, Cloud apps, and Conditions settings (Correct) Users and Groups to target -> Group 1 Cloud Apps to select -> Exchange Online Conditions to target -> Non-compliant devices

First one should be Users and Groups, Cloud Apps, Session (You don't need to specify any conditions. It also says you need to enforce App Enforced Restrictions which is an option you can select in Session.) Second one is correct. (the cmdlet is Set-OwaMailboxPolicy. That cmdlet contains the parameter ConditionalAccessPolicy.) ((Use the Set-OwaMailboxPolicy cmdlet to configure existing Outlook on the web mailbox policies.)) https://techcommunity.microsoft.com/t5/outlook-blog/conditional-access-in-outlook-on-the-web-for-exchange-online/ba-p/267069

This question made me wonder, how in CA I can enforce the app enforced restrictions *ONLY* to non compliant devices? Can you help me on this?

This is not possible with the given answers, not anymore atleast since targeting of non-compliant devices has moved to Conditions (Now in Preview) Users and Groups to target -> Group 1 Cloud Apps to select -> Exchange Online Conditions to target -> Non-compliant devices Session to apply -> app-enforced restrictions

First one should be Users and Groups, Cloud Apps, Session Second one is correct. https://techcommunity.microsoft.com/t5/outlook-blog/conditional-access-in-outlook-on-the-web-for-exchange-online/ba-p/267069

Answer A is wrong. You don't need to specify any conditions. It also says you need to enforce App Enforced Restrictions which is an option you can select in Session. Correct answer is Users and Groups, Cloud Apps, Session

Actually, this should be - Users and groups - Cloud Apps - Conditions - Session but there is no such answer