MS-102 · Question #320
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You register a cloud app named App1 in Microsoft Entra ID. You need to create an access policy for App1. What…
The correct answer is D. Configure an app connector to Defender for Cloud Apps. You must first configure an app connector to Defender for Cloud Apps (D). An app connector establishes the API-level integration between Defender for Cloud Apps and the target application, allowing the service to see app activity and enforce policies. Without a connector…
Question
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Cloud Apps. You register a cloud app named App1 in Microsoft Entra ID. You need to create an access policy for App1. What should you do first?
Options
- ADeploy Conditional Access App Control to App1.
- BCreate an app tag for App1.
- CAdd a security information and event management (SIEM) agent to Defender for Cloud Apps.
- DConfigure an app connector to Defender for Cloud Apps.
How the community answered
(26 responses)- A8% (2)
- B12% (3)
- C4% (1)
- D77% (20)
Explanation
You must first configure an app connector to Defender for Cloud Apps (D). An app connector establishes the API-level integration between Defender for Cloud Apps and the target application, allowing the service to see app activity and enforce policies. Without a connector, Defender for Cloud Apps has no visibility into or communication channel with App1. Conditional Access App Control (A) is used for proxy-based session and access policies but requires the app to first be discoverable and integrated. Creating an app tag (B) is a classification action that comes after onboarding. A SIEM agent (C) is for exporting alerts, not for enabling policy creation on a specific app.
Topics
Community Discussion
No community discussion yet for this question.