Exam MS-100 topic 1 question 40 discussion

Actual exam question from Microsoft's MS-100

Question #: 40
Topic #: 1

You need to consider the underlined segment to establish whether it is accurate.
Your company has recently acquired a new sales application.
You navigate to the Discovered apps page in Cloud Discovery via Microsoft Cloud App Security to check the application's score. You then notice that a number of the applications have a low score as a result of omitted domain registration and consumer popularity data.
You want to make sure that the score is not affected by the omitted data.
You have to configure app tags via the Cloud Discover settings
Select `No adjustment required` if the underlined segment is accurate. If the underlined segment is inaccurate, select the accurate option.
What should you configure from the?

A. No adjustment required
B. a label
C. App Connector flow
D. a custom key

Show Suggested Answer

Suggested Answer: A 🗳️
References:
https://docs.microsoft.com/en-us/cloud-app-security/discovered-app-queries

by Nastha at Dec. 16, 2021, 3:28 a.m.

Comments

Submit Cancel

osxzvkwpfcfxobqjby

1 year, 10 months ago

Selected Answer: A

Use the Unsanctioned tag https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score#overriding-the-risk-score

upvoted 1 times

...

Don123

2 years, 5 months ago

B. a label

upvoted 2 times

...

hufflepuff

2 years, 8 months ago

App tags: Tags enable you to customize the Cloud App Catalog. You can select from either Sanctioned, Unsanctioned, or create custom tags for apps. These tags can then be used as filters. Filters are useful for deeper diving into specific types of apps that you want to investigate. Creating and managing custom app tags You can create a custom app tag. These tags can then be used as filters for deeper diving into specific types of apps that you want to investigate. For example, custom watch list, assignment to a specific business unit, or custom approvals, such as "approved by legal". App tags can be also used in app discovery policies in filters or by applying tags to apps as part of the policy governance actions.

upvoted 2 times

...

hopalong

2 years, 9 months ago

D I think? https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score This doc clearly shows us that to make domain registration status not count you go to cloud discovery -> score metrics So I assume custom key is the only answer that makes sense?

upvoted 3 times

Paolo2022

2 years, 7 months ago

A is definitely correct, see the source that Nastha has provided: https://learn.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries#creating-and-managing-custom-app-tags

upvoted 1 times

...

NrdAlrt

1 year, 11 months ago

You are awesome for linking. I think you're correct here because you read the details. Yes, you can sanction an app but it won't effect the "risk score" which is what this question is asking us to address specifically. I'd say the broad impact of adjusting how risk is tabulated might be overly broad, but they mention other apps being impact by this so kind of suggests this is something that is unwanted as a risk negative more broadly. Also you can individually override apps to assign whatever score you want, so that would achieve desired goal too with D.

upvoted 1 times

...

Nastha

3 years, 6 months ago

I think the correct URL is:- https://docs.microsoft.com/en-us/defender-cloud-apps/discovered-app-queries

upvoted 2 times

...