MD-102 Question #566: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You plan to perform a security audit of all the apps detected by Cloud Discovery. You need to track which apps were audited. The solution must ensure that the list of audited apps can be displayed in the cloud app catalog. What should you do?

Options

• AApply a custom app tag to each app.
• BDeploy Conditional Access App Control.
• CDefine each app as a critical asset.
• DGenerate a Cloud Discovery snapshot report.
• EEnable app governance.

Explanation

Microsoft Defender for Cloud Apps allows administrators to apply custom app tags to discovered apps in the Cloud Discovery catalog. A custom tag (for example, 'Audited') can be created and applied to each app after it has been reviewed, making it easy to filter the catalog and display only audited apps. This directly satisfies the requirement that the list of audited apps must be visible in the cloud app catalog. Option B (Conditional Access App Control) is about session control, not audit tracking. Option C (critical asset) is an unrelated Defender feature. Option D (snapshot report) generates discovery data but does not tag apps for audit tracking. Option E (app governance) focuses on OAuth app oversight, not catalog tagging.

No community discussion yet for this question.