You have an Azure subscription. You plan to deploy a new Conditional Access policy named CAPolicy1. You need to use the What if tool to evaluate how CAPolicy1 wall affect users. The solution must…

Question

Options

• AOff
• BOn
• CReport only

• A
  2% (1)
• B
  5% (2)
• C
  93% (38)

Explanation

Explanation

Report-only mode is the correct setting because it allows the What If tool to simulate how CAPolicy1 would apply to users without actually enforcing the policy, meaning users experience zero disruption while administrators can evaluate the policy's impact. This directly satisfies both requirements: using the What If tool for evaluation and minimizing impact on users.

Why the distractors are wrong:

• Option A (Off): Setting the policy to "Off" disables it entirely, meaning the What If tool cannot evaluate it as an active policy - it simply won't be assessed.
• Option B (On): Setting the policy to "On" fully enforces it immediately, which could block or interrupt users before you've confirmed the policy behaves as intended - directly violating the "minimize impact" requirement.

Memory Tip: Think of Report-only = "Read-only for users" - the policy watches and reports silently like a security camera, but doesn't act. Whenever an exam question mentions evaluating a Conditional Access policy without affecting users, Report-only is always your answer.

No community discussion yet for this question.