Exam MS-101 All Questions

View all questions & answers for the MS-101 exam

Exam MS-101 topic 4 question 4 discussion

Actual exam question from Microsoft's MS-101

Question #: 4
Topic #: 4

HOTSPOT -
You need to configure a conditional access policy to meet the compliance requirements.
You add Exchange Online as a cloud app.
Which two additional settings should you configure in Policy1? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/intune/create-conditional-access-intune

by dfter at June 29, 2022, 6:24 p.m.

Comments

Submit Cancel

lusis987

Highly Voted 2 years, 9 months ago

Shouldn''t we turn on the policy?

upvoted 6 times

Learner2022

2 years, 5 months ago

Yes, the second should ”Enable the policy’

upvoted 1 times

...

Arlecchino

2 years, 6 months ago

My thought as well, like if it is off it doesn't matter what settings we change.

upvoted 1 times

...

Pepeti

Most Recent 2 years, 2 months ago

1usuarios e grupos 2 grant

upvoted 1 times

...

EsamiTopici

2 years, 3 months ago

So now? Groups and?

upvoted 1 times

EsamiTopici

2 years, 3 months ago

Point n6, so groups and grant-> device compliant https://learn.microsoft.com/en-us/mem/intune/protect/create-conditional-access-intune#create-the-conditional-access-policy

upvoted 1 times

...

shaden2000

2 years, 5 months ago

Step1:Select the Group1 under users. Step2: Exclude the compliant devices under Conditions>Filter for devcies (because the policy will block unless excluded) Step 3: Then Turn on the Policy.

upvoted 2 times

...

pbarnett85

2 years, 7 months ago

For the second - I thought it was - Access Controls - Grant - Grant access - Require device to be marked as compliant

upvoted 2 times

...

ziziman

2 years, 8 months ago

The answer seems to be correct. With the following settings 1) Users and groups > select 'Group1' 2) Conditons > Device state > Exclude > select 'Device marked as compliant' Group1 cannot access EXO from non-compliant devices. This means that Group1 users will only have access to EXO from compliant device.

upvoted 4 times

...

Sategi

2 years, 11 months ago

Require device to be marked as compliant - is now under GRANT field of the Conditional Access policy. So NOT under "Condition" -> "Device state"

upvoted 3 times

Arlecchino

2 years, 9 months ago

So now we choose users and groups under assignments then grant/block access under access control.

upvoted 1 times

...

dfter

3 years ago

users and group + require device to be compliant

upvoted 3 times

...