You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1. You need to enable Microsoft Defender for Cloud Apps session control for Site1. Which type of…

An access policy in MDCA is typically used to control access *to* apps, but the prerequisite for session control to function is routing through Conditional Access.

A session policy in MDCA defines what actions are controlled *during* a session (e.g., preventing downloads), but it relies on a Conditional Access policy to first direct the session to MDCA for enforcement.

App governance is a feature within MDCA focused on monitoring and managing SaaS app behaviors and data usage, not directly on enabling session control for a specific site.

Microsoft Defender for Cloud Apps (MDCA) session control integrates with Microsoft Entra Conditional Access. To leverage MDCA session control, you must first create a Conditional Access policy that directs relevant user sessions to MDCA for proxying and enforcement of session policies.