nerdexam
Microsoft

MS-102 · Question #389

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets…

The correct answer is B. No. Configuring Cloud Discovery identifies shadow IT apps but does not provide the API-level integration necessary to inspect OAuth app permissions and create OAuth app policies.

Submitted by hans_de· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 E5 subscription. You are implementing Microsoft Defender for Cloud Apps. You need to ensure that you can create OAuth app policies. Solution: You configure Cloud Discovery. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(61 responses)
  • A
    31% (19)
  • B
    69% (42)

Why each option

Configuring Cloud Discovery identifies shadow IT apps but does not provide the API-level integration necessary to inspect OAuth app permissions and create OAuth app policies.

AYes

Cloud Discovery focuses on discovering and assessing the risk of apps in use across the organization, not on providing the capability to manage or create policies for the permissions of OAuth applications.

BNoCorrect

Cloud Discovery identifies and assesses unsanctioned cloud applications (Shadow IT) based on traffic logs, but it does not establish the API connectors required to discover OAuth app permissions or enable the creation of OAuth app policies within Defender for Cloud Apps. OAuth app policies rely on direct API integration with the cloud provider to inspect app permissions.

Concept tested: Defender for Cloud Apps Cloud Discovery vs. OAuth app policies

Source: https://learn.microsoft.com/en-us/defender-cloud-apps/app-permission-policy

Topics

#Defender for Cloud Apps#OAuth app policies#Cloud Discovery#App governance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-102 Practice