Microsoft 365 Administrator Expert MS-102 Practice Question

Conditional Access session controls allow you to enforce token lifetimes for specific cloud apps and scenarios. By creating a policy that targets the Exchange Online cloud app and excludes devices that are either hybrid Azure AD joined or evaluated as compliant, you can apply a Session control that sets the Sign-in frequency to four hours, forcing re-authentication only for unmanaged devices. Token lifetime policies are considered legacy, have broader scope, and are no longer the recommended approach. Continuous Access Evaluation improves responsiveness to risk events but does not let administrators specify a fixed re-authentication interval. Intune device compliance settings manage local device access, not the authentication session length of Outlook on the web, and therefore cannot meet the stated requirement on their own.