Exam MD-101 topic 3 question 54 discussion

Actual exam question from Microsoft's MD-101

Question #: 54
Topic #: 3

Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).
You have a Microsoft 365 subscription.
You create a conditional access policy for Microsoft Exchange Online.
You need to configure the policy to prevent access to Exchange Online unless a user is connecting from a device that is hybrid Azure AD-joined.
Which settings should you configure?

A. Locations
B. Device platforms
C. Sign-in risk
D. Device state

Show Suggested Answer

Suggested Answer: D 🗳️
The device state condition was used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization's Conditional Access policies.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/conditions#device-state

by sifa at May 11, 2021, 1:34 p.m.

Comments

Submit Cancel

Perycles

Highly Voted 4 years ago

"Device state" : Control user access when the device the user is signing-in from is not "Hybrid Azure AD joined" or "marked as compliant" : answer is correct. https://docs.microsoft.com/fr-fr/azure/active-directory/conditional-access/concept-conditional-access-conditions#device-state-preview

upvoted 9 times

RodrigoT

3 years, 1 month ago

And in English: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions#device-state-preview

upvoted 2 times

...

raduM

Most Recent 2 years, 7 months ago

actually it is from grant -require Hybrid azure ad joined device

upvoted 2 times

...

shaolin_monk

2 years, 10 months ago

D: Device State. "The device state condition was used to exclude devices that are hybrid Azure AD joined and/or devices marked as compliant with a Microsoft Intune compliance policy from an organization's Conditional Access policies."

upvoted 1 times

...

Brent0n

3 years, 3 months ago

This setting has been depricated: Customers should use Filter for devices condition in Conditional Access to satisfy scenarios, previously achieved using device state (preview) condition. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions#device-state-preview

upvoted 3 times

MR_Eliot

3 years, 1 month ago

Above is true.

upvoted 1 times

...

b3arb0yb1m

3 years, 5 months ago

D. Device state

upvoted 2 times

...

sifa

4 years, 1 month ago

D is the correct answer.

upvoted 4 times

...