Exam SC-200 topic 9 question 1 discussion

Actual exam question from Microsoft's SC-200

Question #: 1
Topic #: 13

You need to restrict cloud apps running on CLIENT1 to meet the Microsoft Defender for Endpoint requirements.
Which two configurations should you modify? Each correct answer present part of the solution.
NOTE: Each correct selection is worth one point.

A. the Onboarding settings from Device management in Microsoft Defender Security Center
B. Cloud App Security anomaly detection policies
C. Advanced features from Settings in Microsoft Defender Security Center
D. the Cloud Discovery settings in Cloud App Security

Show Suggested Answer

Suggested Answer: CD 🗳️

by Dris2021 at June 8, 2022, 2:12 a.m.

Comments

Submit Cancel

Lion007

Highly Voted 2 years, 1 month ago

Selected Answer: CD

Correct answers. As Harold_Finch explained, unsactioned apps will be blocked using Defender for Cloud Apps (MCAS). You can also add URLs/Domains to block directly from Defender - Settings - Endpoints - Indicators - URLs/Domains tab - Add items --> to add cloud apps to block.

upvoted 17 times

...

OneplusOne

Most Recent 2 months, 3 weeks ago

Selected Answer: CD

✅ C. Advanced features from Settings in Microsoft Defender Security Center - Go to Microsoft Defender Security Center → Settings → Advanced Features. - Enable Microsoft Defender for Endpoint integration with Defender for Cloud Apps. - This allows Defender for Endpoint to enforce blocking of unsanctioned apps. ✅ D. Cloud Discovery settings in Cloud App Security - Go to Microsoft Defender for Cloud Apps → Settings → Cloud Discovery. - Enable Microsoft Defender for Endpoint integration and Enforce app access. - This ensures that unsanctioned apps are blocked at the endpoint level.

upvoted 1 times

...

billo79152718

1 year ago

Selected Answer: CD

C and D

upvoted 2 times

...

itsadel

1 year, 1 month ago

Selected Answer: BC

The correct answers are B. Cloud App Security anomaly detection policies and C. Advanced features from Settings in Microsoft Defender Security Center.

upvoted 2 times

danb67

10 months, 1 week ago

You need to do both C & D to meet the ask. I have done this many times.

upvoted 2 times

...

Dris2021

2 years, 2 months ago

Answer B & D

upvoted 1 times

Harold_Finch

2 years, 1 month ago

Nope - the given answers are correct. Check the provided link. It's a two part process: - Block unsanctioned apps via Cloud Discovery in MCAS - Enable advanced 'Custom network indicators' within Microsoft 365 Defender

upvoted 23 times

...