You have a Microsoft 365 E5 subscription that contains a user named User1. You have a Conditional Access policy applied to a cloud-based app named App1. App1 has Conditional Access App Control…

The correct answer is B. session policy. Designed to control user sessions for cloud applications. It allows you to enforce restrictions based on user actions during a session, including blocking specific activities like printing. Since App1 has Conditional Access App Control deployed, you can leverage session…

Submitted by olafpl· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription that contains a user named User1. You have a Conditional Access policy applied to a cloud-based app named App1. App1 has Conditional Access App Control deployed. You need to create a Microsoft Defender for Cloud Apps policy to block User1 from printing from App1. Which type of policy should you create?

Options

Aactivity policy
Bsession policy
COAuth app policy
DCloud Discovery anomaly detection policy

How the community answered

(29 responses)

A
7% (2)
B
76% (22)
C
14% (4)
D
3% (1)

Explanation

Designed to control user sessions for cloud applications. It allows you to enforce restrictions based on user actions during a session, including blocking specific activities like printing. Since App1 has Conditional Access App Control deployed, you can leverage session policies to monitor and control user activities in real-time. https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad

Topics

#Microsoft Defender for Cloud Apps#Conditional Access App Control#Session policies#Real-time session control

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice