Exam SC-100 topic 11 question 1 discussion

Access Reviews are not relevant here. Monitor real-time needs Conditional Access & Defender for Cloud Apps

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session#conditional-access-application-control https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-integrate-with-microsoft-cloud-application-security

A. Azure AD Conditional Access: Azure AD Conditional Access allows you to define policies and rules that control access to your applications and services based on specific conditions. You can use it to enforce multi-factor authentication, device compliance, location-based access, and more, providing advanced security controls for your SharePoint Online and Exchange Online resources. D. Microsoft Defender for Cloud Apps (formerly known as Microsoft Cloud App Security): This service provides advanced security features for cloud applications, including Office 365 apps like SharePoint Online and Exchange Online. It helps you monitor user activities, control access, and detect and respond to threats in these applications, ensuring the security of your data.

AD is the answer. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview The modern security perimeter now extends beyond an organization's network to include user and device identity. Organizations can use identity-driven signals as part of their access control decisions. Conditional Access brings signals together, to make decisions, and enforce organizational policies. Azure AD Conditional Access is at the heart of the new identity-driven control plane. https://learn.microsoft.com/en-us/defender-cloud-apps/protect-office-365 Connecting Office 365 to Defender for Cloud Apps gives you improved insights into your users' activities, provides threat detection using machine learning based anomaly detections, information protection detections (such as detecting external information sharing), enables automated remediation controls, and detects threats from enabled third-party apps in your organization.

Application Security Requirements mentioned in the question are as follows... "Monitor and control access to Microsoft SharePoint Online and Exchange Online data in real time." Therefore, AD appears to be a right answer here.

Focusing on main requirements: "Identify internal applications that will support single sign-on (SSO) by using Azure AD Application Proxy. Monitor and control access to Microsoft SharePoint Online and Exchange Online data in real time.", definitely conditional access and MDCA

A & D For real time > Conditional access

https://learn.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-config-sso-how-to

Correct answer is A & D

I think it is A and B

Has to be AzureAD Conditional Access!!!