Exam MS-500 topic 3 question 17 discussion

Actual exam question from Microsoft's MS-500

Question #: 17
Topic #: 3

You have a Microsoft 365 subscription.
Some users access Microsoft SharePoint Online from unmanaged devices.
You create a conditional access policy in Azure Active Directory.
You need to prevent the users from downloading, printing, and syncing files.
What should you do?

A. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection user risk policy.
B. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) conditional access policy.
C. From the SharePoint admin center, configure the Access control settings.
D. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection sign-in risk policy.

Show Suggested Answer

Suggested Answer: C 🗳️

by WMG at Aug. 11, 2021, 12:08 p.m.

Comments

Submit Cancel

mkoprivnj

3 years, 6 months ago

Selected Answer: C

C is correct!

upvoted 3 times

...

hyve

3 years, 7 months ago

The answer is below and C is correct: https://docs.microsoft.com/en-US/sharepoint/control-access-from-unmanaged-devices#block-or-limit-access-to-specific-sharepoint-site-collections-or-onedrive-accounts

upvoted 3 times

...

WMG

3 years, 10 months ago

C is correct, but question is slightly confusing. Question says you create a CA policy in Azure. One of the answers is that you create a CA policy in Azure? Conditional Access is a AAD P1 license requirement; you cannot assume you have that ("a M365 subscription", not all M365 have CA), so C has to be the answer as that will always work for this specific purpose.

upvoted 3 times

...