MS-102 Practice Question 3040
Exam: MS-102
Domain: Implement and manage Microsoft Entra identity and access
Difficulty: hard
You configure a Conditional Access policy to prevent users on unmanaged web browsers from downloading sensitive documents from SharePoint, while still allowing online viewing. Which session control should you select?
Answer Options
A
Session control: Use app-enforced restrictions or Defender for Cloud Apps
B
DNS sinkholing on client workstations
C
Exchange Online OWA mailbox policy disabling all attachments
D
Disabling TLS 1.3 across the tenant
Correct Answer
A: Session control: Use app-enforced restrictions or Defender for Cloud Apps
Explanation
Use Conditional Access Session controls configured with "Use app-enforced restrictions" or route sessions through Defender for Cloud Apps to block file downloads on unmanaged devices.