MD-102 Question #437: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 subscription. You use app protection policies to protect corporate data on Android devices. You need to ensure that any user connecting from an Android device can only access the corporate data if they connect from an app that supports mobile application management (MAM). What should you configure?

Options

• Aan app configuration policy
• Ba Conditional Access policy
• Ca device configuration profile
• Da device compliance policy

Explanation

To ensure users on Android devices can only access corporate data through apps that support mobile application management (MAM), you must configure a Conditional Access policy with the "Require app protection policy" grant control.

Common mistakes.

• A. App configuration policies are used to deliver configuration settings to apps, not to restrict access based on an app's MAM support.
• C. Device configuration profiles are used to manage device-level settings and features, not to control access based on an application's MAM capabilities.
• D. Device compliance policies assess the overall health and compliance of the device itself, not whether a specific application being used to access data supports mobile application management.

Concept tested. Conditional Access with App Protection Policy

Reference. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-traffic-mfa-compliance#require-app-protection-policy

No community discussion yet for this question.