Exam SC-200 topic 1 question 6 discussion

The "source appliance" mentioned here is the Firewall or Proxy in use. The Block script is specific to the product in use. The block is done by the firewall / proxy . Hope this helps you can find the screenshots at this link https://docs.microsoft.com/en-us/defender-cloud-apps/governance-discovery

Answer as shown is correct

Select the app. You need to identify and select the Launchpad app within your management interface to apply further actions. Tag the app as Unsanctioned. Marking the app as "Unsanctioned" identifies it as not allowed within the organization's environment, signaling that it should be blocked or restricted. Generate a block script. After tagging the app as unsanctioned, you generate a block script that can be used to enforce the blocking of the app across your network. Run the script on the source appliance. Finally, you deploy the block script to the relevant network appliance or gateway device to actively block the app's traffic and mitigate the associated risks.

select the app, Tag the app as Unsanctioned, Generate a block script, Run the script on the source appliance

In this case it says your environment does NOT have MS Defender for Endpoint enabled, so even if you tag app as unsanctioned it will not block but enables you to monitor its use with Cloud Discover filters. In this case you need to generate block script and for the network source appliance, firewall, proxy and import the file you created to your appliance to actually block the app.

It’s correct

This is correct

https://learn.microsoft.com/en-us/defender-cloud-apps/governance-discovery#block-apps-by-exporting-a-block-script

correct answer

If your tenant uses Microsoft Defender for Endpoint, Zscaler NSS, or iboss, any app you mark as unsanctioned is automatically blocked by Defender for Cloud Apps, and the following sections regarding creating blocking scripts are unnecessary. For more information, see Integrate with Microsoft Defender for Endpoint, Integrate with Zscaler, and Integrate with iboss respectively.

The answer provided is correct.

After you've reviewed the list of discovered apps in your environment, you can secure your environment by approving safe apps (Sanctioned) or prohibiting unwanted apps (Unsanctioned) in the following ways.

On other websites they have mentioned as "TAG the app as sanctioned"