Which policy type should you create?

You have a Microsoft 365 tenant.

All users have computers that run Windows 10. Most computers are company-owned and joined to Azure Active Directory (Azure AD). Some computers are user-owned and are only registered in Azure AD.

You need to prevent users who connect to Microsoft SharePoint Online on their user-owned computer from downloading or syncing files. Other users must NOT be restricted.

Which policy type should you create?
A . a Microsoft Cloud App Security activity policy that has Microsoft Office 365 governance actions configured
B . an Azure AD conditional access policy that has session controls configured
C . an Azure AD conditional access policy that has client apps conditions configured
D . a Microsoft Cloud App Security app discovery policy that has governance actions configured

View Answer

Answer: B

Explanation:

Reference: https://docs.microsoft.com/en-us/cloud-app-security/proxy-intro-aad