SC-100 Practice Question 4016

Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: easy
You are designing application consent governance in Microsoft Entra ID. You need to prevent users from authorizing third-party applications that request high-privilege delegated permissions (such as reading user files or mail). What should you configure?

Answer Options

A
Disable user consent and enable the Admin Consent Request workflow
B
Delete all enterprise applications from the directory
C
Revoke licenses from all application developers
D
Disable modern authentication across the tenant

Correct Answer

A: Disable user consent and enable the Admin Consent Request workflow

Explanation

Under Enterprise Applications > Consent and permissions, disable user consent and enable the Admin Consent Request workflow to require security administrator review.