SC-100 Practice Question 4016
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: easy
You are designing application consent governance in Microsoft Entra ID. You need to prevent users from authorizing third-party applications that request high-privilege delegated permissions (such as reading user files or mail). What should you configure?
Answer Options
A
Disable user consent and enable the Admin Consent Request workflow
B
Delete all enterprise applications from the directory
C
Revoke licenses from all application developers
D
Disable modern authentication across the tenant
Correct Answer
A: Disable user consent and enable the Admin Consent Request workflow
Explanation
Under Enterprise Applications > Consent and permissions, disable user consent and enable the Admin Consent Request workflow to require security administrator review.