Microsoft 365 Administrator Expert MS-102 Practice Question
Your organization integrates Microsoft Defender for Cloud Apps with Microsoft Defender for Endpoint. While reviewing the Cloud Discovery data, you find that users are frequently connecting to an unmanaged cloud storage service that carries a high-risk score. You need to stop all onboarded Windows devices from accessing this specific service immediately, without affecting access to other sanctioned storage apps. Which action should you take in Microsoft Defender for Cloud Apps?
Configure an OAuth app governance policy that revokes the app's permissions in Microsoft 365.
Mark the discovered cloud storage app as Unsanctioned on the Discovered apps page.
Create a file policy that quarantines any file uploaded to the app's domain.
Add the app's IP addresses to an Azure AD named location and configure Conditional Access to block it.
Because Defender for Cloud Apps is integrated with Defender for Endpoint, marking an app as Unsanctioned automatically pushes the app's domains to Defender for Endpoint as custom network indicators with a Block action. As a result, any device that is onboarded to Defender for Endpoint and has network protection enabled will be prevented from connecting to the app. File policies, OAuth app governance policies, or Conditional Access named locations do not create the device-level network block that the scenario requires.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
How does marking an app as Unsanctioned in Defender for Cloud Apps work?
Open an interactive chat with Bash
What is the role of network protection in Microsoft Defender for Endpoint?
Open an interactive chat with Bash
Why are other options like file policies or Conditional Access insufficient in this scenario?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Manage security and threats by using Microsoft Defender XDR
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .