SC-100 Practice Question 3918
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: hard
You need to design an identity perimeter where unmanaged personal laptops cannot download documents from SharePoint Online, but are allowed to view and edit files in a web browser. What should you architect?
Answer Options
A
Conditional Access with Session controls and Defender for Cloud Apps App Control
B
Uninstalling web browsers from all personal laptops
C
Disabling modern authentication across the entire tenant
D
Deleting the user Microsoft Entra ID accounts
Correct Answer
A: Conditional Access with Session controls and Defender for Cloud Apps App Control
Explanation
A Microsoft Entra Conditional Access policy with Session controls configured for "Use app-enforced restrictions" or routing web sessions through Microsoft Defender for Cloud Apps Conditional Access App Control.