nerdexam
Microsoft

MS-302 · Question #29

Your company uses Microsoft SharePoint Online and Microsoft OneDrive for Business to store documents. You need to prevent uses from downloading the SharePoint and OneDrive documents from unmanaged…

The correct answer is A. Create a conditional access policy for web browsers that has app-enforced restrictions C. Set Allow limited access to Block downloading D. Create a conditional access policy that allows access from managed devices. Go to Microsoft Azure portal and add two policies. Create a policy for SharePoint that applies to mobile apps and desktop clients, and allows access only from compliant or domain-joined devices. Create another policy for SharePoint that applies to web browsers, and select "use…

Plan and configure a Microsoft Teams environment

Question

Your company uses Microsoft SharePoint Online and Microsoft OneDrive for Business to store documents. You need to prevent uses from downloading the SharePoint and OneDrive documents from unmanaged devices. The users must be able to edit the documents from a web browser on the unmanaged devices. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Exhibit

MS-302 question #29 exhibit

Options

  • ACreate a conditional access policy for web browsers that has app-enforced restrictions
  • BSet Allow limited access to Allow downloading
  • CSet Allow limited access to Block downloading
  • DCreate a conditional access policy that allows access from managed devices
  • ECreate a conditional access policy to block access from unmanaged mobile and desktop clients

How the community answered

(51 responses)
  • A
    76% (39)
  • B
    16% (8)
  • E
    8% (4)

Explanation

Go to Microsoft Azure portal and add two policies. Create a policy for SharePoint that applies to mobile apps and desktop clients, and allows access only from compliant or domain-joined devices. Create another policy for SharePoint that applies to web browsers, and select "use app-enforced Once your Office 365 tenant is enabled for first release we can limit device access to SharePoint, OneDrive and Office 365 Groups in SharePoint Admin Center. Select "Allow limited access (web- only, without the Download, Print and Sync commands)". For files that can't be viewed on the web select "Block downloading" https://ronnydejong.com/2017/07/04/control-access-to-sharepoint-onlineonedrive-from- unmanaged-devices/

Topics

#conditional access#unmanaged devices#SharePoint Online#OneDrive

Community Discussion

No community discussion yet for this question.

Full MS-302 Practice