Exam MS-500 topic 3 question 3 discussion

This command would work too: Set-SPOTenant -ODFBrowserEnabled $false

I think this is A, specifically, the command being: Set-SPOTenant -ConditionalAccessPolicy 'Strict'

Correct answer A. In summary, using the Set-SPOTenant cmdlet with the -ConditionalAccessPolicy parameter allows you to configure a policy that controls access to SharePoint Online based on various conditions, including device status and compliance.

Selected Answer: B Sign in to the Microsoft 365 admin center with your admin credentials. In the left navigation pane, click on "Admin centers" and then click on "SharePoint". In the SharePoint admin center, click on "Policies" in the left navigation pane. Click on "Device access" in the Policies section. Check the box next to "Block access to Office applications from browsers on devices that don't meet the compliance policy" to prevent users from accessing SharePoint from unmanaged devices. Check the box next to "Block download" to prevent users from downloading files from SharePoint. Check the box next to "Block printing" to prevent users from printing files from SharePoint. Check the box next to "Block syncing" to prevent users from syncing files from SharePoint.

Check the link below. It shows how you can use the Set-SPOTenant cmdlet to prevent editing and allow preview files only. It seems its limited to office files, witch is not stated in the question. With the options available, i think A is the best option.

I would like B, from the SharePoint admin center > policies > Access control > Unmanaged devices option is there,

I still think its Conditional Access, the key beeing "You need to prevent the users from downloading, printing, and syncing files." No where does it says to block their access and as far as I can tell in "unmanaged device" in sharpoint you only have 3 options Allow full acces Allow limited, web-only access Block access So I sould still go with A

At first I was also for A as Conditional Access looked as a proper selection, but then I opened Sharepoint Admin center -> Policies -> Access Control and the first option is Unmanaged devices Restrict access from devices that aren't compliant or joined to a domain.

B. From the SharePoint admin center, configure the secure control settings.

A is correct!

As a SharePoint or global admin in Microsoft 365, you can block or limit access to SharePoint and OneDrive content from unmanaged devices using - Access control page of the SharePoint admin center. Note- If you want to expand control of unmanaged devices beyond SharePoint, you can Create an Azure Active Directory conditional access policy for all apps and services in your organization instead. Since question asks only for Sharepoint setting with with SPO Admin center access control setting is good enough.

I would select A, because in SPO admin center is really called "access controls" which was correctly named in another similar question. https://www.examtopics.com/discussions/microsoft/view/9396-exam-ms-500-topic-3-question-27-discussion/ Btw, seems this is something that you can already configure directly with Conditional Access.We will see how they spell it.