SC-100 Question #272: Real Exam Question with Answer & Explanation

Question

You have a Microsoft 365 subscription that uses Microsoft Defender XDR and Microsoft Purview. On a Microsoft SharePoint Online site, you have a file named File1 that has a sensitivity label applied. You need to recommend a solution that will reevaluate Conditional Access policies when a user downloads Filel from the SharePoint site. What should you include in the recommendation?

Options

• AMicrosoft Defender for Cloud Apps
• BMicrosoft Defender for Cloud
• CMicrosoft Defender for Office 365
• DMicrosoft Entra application proxy

Explanation

{"question_number": 3, "correct_answer": "A", "explanation": "The correct answer is A: Microsoft Defender for Cloud Apps (MDCA). MDCA provides Conditional Access App Control, which creates a reverse proxy between users and cloud apps like SharePoint Online. This proxy intercepts file operations (including downloads) in real time and can reevaluate Conditional Access policies at the moment of download-not just at sign-in. When File1 has a sensitivity label, MDCA session policies can inspect the label and enforce access controls dynamically. Defender for Cloud (B) focuses on cloud security posture and workload protection, not session-level app control. Defender for Office 365 (C) protects against email and collaboration threats. Entra Application Proxy (D) enables access to on-premises apps and has no role in SharePoint download session control.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.