MD-102 · Question #437
You have a Microsoft 365 subscription. You use app protection policies to protect corporate data on Android devices. You need to ensure that any user connecting from an Android device can only…
The correct answer is B. a Conditional Access policy. To ensure users on Android devices can only access corporate data through apps that support mobile application management (MAM), you must configure a Conditional Access policy with the "Require app protection policy" grant control.
Question
You have a Microsoft 365 subscription. You use app protection policies to protect corporate data on Android devices. You need to ensure that any user connecting from an Android device can only access the corporate data if they connect from an app that supports mobile application management (MAM). What should you configure?
Options
- Aan app configuration policy
- Ba Conditional Access policy
- Ca device configuration profile
- Da device compliance policy
How the community answered
(19 responses)- A26% (5)
- B47% (9)
- C16% (3)
- D11% (2)
Why each option
To ensure users on Android devices can only access corporate data through apps that support mobile application management (MAM), you must configure a Conditional Access policy with the "Require app protection policy" grant control.
App configuration policies are used to deliver configuration settings to apps, not to restrict access based on an app's MAM support.
A Conditional Access policy can be configured with the "Require app protection policy" grant control to enforce that users can only access corporate data if they are using an app that is managed by an Intune app protection policy.
Device configuration profiles are used to manage device-level settings and features, not to control access based on an application's MAM capabilities.
Device compliance policies assess the overall health and compliance of the device itself, not whether a specific application being used to access data supports mobile application management.
Concept tested: Conditional Access with App Protection Policy
Source: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-traffic-mfa-compliance#require-app-protection-policy
Topics
Community Discussion
No community discussion yet for this question.