What should you create?

You have a Microsoft 365 tenant.

You need to implement a policy to enforce the following requirements:

• If a user uses a Windows 10 device that is NOT hybrid Azure Active Directory (Azure AD) joined, the user must be allowed to connect to Microsoft SharePoint Online only from a web browser. The user must be prevented from downloading files or syncing files from SharePoint Online.

• If a user uses a Windows 10 device that is hybrid Azure AD joined, the user must be able connect to SharePoint Online from any client application, download files, and sync files.

What should you create?
A . a conditional access policy in Azure AD that has Client apps conditions configured
B. a compliance policy in Microsoft Endpoint Manager that has the Device Health settings configured
C. a compliance policy in Microsoft Endpoint Manager that has the Device Properties settings configured
D. a conditional access policy in Azure AD that has Session controls configured

View Answer

Answer: D