ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-203 All Questions

View all questions & answers for the MS-203 exam
Go to Exam

Exam MS-203 topic 1 question 36 discussion

Actual exam question from Microsoft's MS-203
Question #: 36
Topic #: 1
[All MS-203 Questions]

You have a Microsoft Exchange Server 2019 organization that contains several thousand users. Most users connect to their mailbox by using a mobile device.
A new corporate security policy requires that when connecting from a mobile device, all users on devices that run iOS must use the Outlook mobile app only.
You need to modify the organization to meet the security requirement.
What should you do?

  • A. From the Exchange Management Shell, run the New-DeviceConditionalAccessPolicy cmdlet.
  • B. From the Exchange admin center, create a mobile device access rule.
  • C. From the Exchange Management Shell, run the New-DeviceConfigurationRule cmdlet.
  • D. From the Exchange admin center, modify the default mobile device mailbox policy.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by apunkt at April 19, 2021, 10:18 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
n4l
Highly Voted 3 years, 1 month ago
The mobile device mailbox policy created from EAC does not distinguish between iOS and Android. However, a mobile device access rule allows the selection of a device family (Android, BlackBerry, iPhone etc.) IMHO, the answer is B
upvoted 21 times
J4U
2 years, 10 months ago
Agree on B. https://docs.microsoft.com/en-us/powershell/module/exchange/new-activesyncdeviceaccessrule?view=exchange-ps https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android
upvoted 5 times
...
FredC
2 years, 1 month ago
on the contrary, while you can distinguish between OS, you cannot restrict the usage of apps. with a mobile device mailbox policy you can. read up the cmndlet New-ActiveSyncDeviceAccessRule the parameter -Characteristic does not have a value that restricts apps
upvoted 2 times
...
delight_1
2 years, 6 months ago
it should be New-ActiveSyncDeviceAccessRule cmdlet then. https://docs.microsoft.com/en-us/powershell/module/exchange/new-activesyncdeviceaccessrule?view=exchange-ps Reference: https://docs.microsoft.com/en-us/powershell/module/exchange/new-activesyncdeviceaccessrule?view=exchange-ps
upvoted 5 times
FredC
2 years, 1 month ago
there is no parameter that would restrict other apps or only allow for outlook to be used. correct answer is D
upvoted 1 times
...
...
...
apunkt
Highly Voted 3 years, 3 months ago
As far as I know this option is only available in PowerShell New-MobileDeviceMailboxPolicy and not in the Exchange Admin. So the answer is not so accurate but the most closest!
upvoted 5 times
YClaveria
2 years, 4 months ago
I don't think any parameters under New-MobileDeviceMailboxPolicy will set this though. If B says EMS, I'll go with B. I agree with maveexamtops using New-ActiveSyncDeviceAccessRule if DefaultAccessLevel is blocked. Otherwise, the option is to use this cmdlet to block all other native apps in iOS other than Outlook.
upvoted 1 times
FredC
2 years, 1 month ago
the parameter would be -ApprovedApplicationList. the answer is D
upvoted 1 times
...
...
...
Amir1909
Most Recent 8 months, 1 week ago
B is correct
upvoted 1 times
...
BiniyamGashaw
8 months, 1 week ago
B. From the Exchange admin center, create a mobile device access rule. This option allows you to specify the conditions under which mobile devices can synchronize with your Exchange mailboxes, including the requirement to use a specific app such as Outlook for iOS.
upvoted 1 times
...
Amir1909
8 months, 2 weeks ago
B is correct
upvoted 1 times
...
Nyamnyam
9 months, 4 weeks ago
Selected Answer: B
IT should be B. Device Access Policies (former Rules) can do block everything and then allow Outlook for iOS and Android only. https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android#device-access-policy
upvoted 1 times
...
syougun200x
1 year, 5 months ago
It looks to me that if device access rule is applied all the device in the chosen device family cannot access Exchange regardless of the client. C looks more like it but could not get to the answer... https://learn.microsoft.com/en-us/powershell/module/exchange/new-deviceconfigurationpolicy?view=exchange-ps
upvoted 1 times
...
MarkusSan
1 year, 6 months ago
Selected Answer: B
B is correct: You can restrict iPhones from connecting. D: is about passwords A & C are about M365, but this is about Exchange Server 2019 New-DeviceConfigurationRule Use the New-DeviceConfigurationRule cmdlet to create mobile device configuration rules in Basic Mobility and Security in Microsoft 365. New-DeviceConditionalAccessPolicy Use the New-DeviceConditionalAccessPolicy cmdlet to create mobile device conditional access policies in Basic Mobility and Security in Microsoft 365. Source: https://learn.microsoft.com/en-us/powershell/module/exchange/new-deviceconditionalaccesspolicy?view=exchange-ps https://learn.microsoft.com/en-us/powershell/module/exchange/new-deviceconfigurationrule?view=exchange-ps
upvoted 1 times
...
Forkbeard
1 year, 6 months ago
Selected Answer: C
Topic 1, question 59 demonstrates how to do this. The least wrong answer appears to be C.
upvoted 1 times
Forkbeard
1 year, 6 months ago
Nevermind, please remove my comment. That is about OWA /o\
upvoted 1 times
...
...
lasha
1 year, 6 months ago
Selected Answer: A
This requirement can be implemented using device-based conditional access policy in Microsoft Intune or Azure Active Directory. The policy can be configured to allow access to Exchange Online email only from the Outlook for iOS app, and block access from other email clients. This helps ensure that all email communication and data is protected by the security and compliance features of the approved app
upvoted 1 times
...
JoeGuan
1 year, 9 months ago
A would be the best choice. The default policy only includes password parameters.
upvoted 1 times
...
PawelNotts
1 year, 11 months ago
In question 7 the most voted answer was to create a conditional access policy. Why is this different? One question was about Android and the other about iOS but the premise is exactly the same...
upvoted 2 times
...
FredC
2 years, 1 month ago
Selected Answer: D
from powershell we see that New-ActiveSyncDeviceAccessRule does not have parameters that restrict app usage while New-MobileDeviceMailboxRule does (although for every device regardless of OS but to fulfill the requirement it does not matter if we restrict some Android apps or we could just include a variety of android apps in the -approvedapplicationlist parameter). the answer is D
upvoted 2 times
...
rapunzellin
2 years, 3 months ago
Selected Answer: B
Agree on B.
upvoted 1 times
...
kazaki
2 years, 5 months ago
This can only be done with powershell Set-ActiveSyncOrganizationSettings -DefaultAccessLevel Block Create an allow rule for Outlook for iOS and Android New-ActiveSyncDeviceAccessRule -Characteristic DeviceModel -QueryString "Outlook for iOS and Android" -AccessLevel Allow So all answers are wrong this is all wrong choices
upvoted 3 times
...
mojtabaeshkevar
2 years, 7 months ago
A is Correct Answer: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/outlook-for-ios-and-android/secure-outlook-for-ios-and-android
upvoted 2 times
hubran
2 years, 6 months ago
I disagree, A would be the right answer for Exchange Online, here we are talking about Exchange on-prem
upvoted 1 times
...
Harshul
2 years, 6 months ago
When an organization decides to standardize how users access Exchange data, using Outlook for iOS and Android as the only email app for end users, they can configure a conditional access policy that blocks other mobile access methods. To do this, you will need several conditional access policies, with each policy targeting all potential users. These policies are described in Conditional Access: Require approved client apps or app protection policy.
upvoted 1 times
...
...
liamanfield
2 years, 8 months ago
Selected Answer: B
B makes more logical sense
upvoted 4 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel