nerdexam
Microsoft

AZ-500 · Question #515

Drag and Drop Question You have an Azure subscription that contains an Azure web app named App1. You plan to configure a Conditional Access policy for App1. The solution must meet the following…

The correct answer is Conditions; Target resources. The 'Conditions' setting is used to restrict access based on device platform (Windows), allowing you to specify which operating systems are permitted. The 'Grant' setting is used to enforce compliance requirements, such as requiring a device to be marked as compliant before…

Submitted by omar99· Mar 6, 2026Implement and manage identity and access in Microsoft Azure - specifically configuring Conditional Access policies to enforce device-based and compliance-based access controls (Microsoft SC-300 / AZ-104)

Question

Drag and Drop Question You have an Azure subscription that contains an Azure web app named App1. You plan to configure a Conditional Access policy for App1. The solution must meet the following requirements: - Only allow access to App1 from Windows devices. - Only allow devices that are marked as compliant to access App1. Which Conditional Access policy settings should you configure? To answer, drag the appropriate settings to the correct requirements. Each setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #515 exhibit

Answer Area

Drag items

Target resourcesConditionsGrantSessionUsers or workload identities

Correct arrangement

  • Conditions
  • Target resources

Explanation

The 'Conditions' setting is used to restrict access based on device platform (Windows), allowing you to specify which operating systems are permitted. The 'Grant' setting is used to enforce compliance requirements, such as requiring a device to be marked as compliant before access is allowed. Together, these two settings address both requirements: Conditions filters by Windows platform, and Grant enforces device compliance as an access control.

Topics

#Conditional Access#Azure AD#Device Compliance#Identity and Access Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice