AB-650 Practice Question 3135
Exam: AB-650
Domain: Govern and secure Microsoft 365 tenants and workloads
Difficulty: hard
You need to prevent unmanaged, personal mobile devices from downloading corporate attachments from Outlook Web Access (OWA) while still allowing web-based reading. Which Conditional Access control should you use?
Answer Options
A
Conditional Access Session control: Use app-enforced restrictions
B
Disabling TLS 1.3 across the tenant
C
Local Windows Firewall inbound port blocking
D
Uninstalling the Edge browser from corporate laptops
Correct Answer
A: Conditional Access Session control: Use app-enforced restrictions
Explanation
Conditional Access Session control using "Use app-enforced restrictions" or Defender for Cloud Apps session policies enforces read-only access and blocks downloads.