You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps. You need to identify which users access Facebook from their devices and browsers. The solution must minimize…

The correct answer is D. From the Microsoft Defender for Cloud Apps portal, unsanction Facebook. Unsanctioning an app doesn't block use, but enables you to more easily monitor its use with the Cloud Discovery filters. You can then notify users of the unsanctioned app and suggest an alternative safe app for their use, or generate a block script using the Defender for Cloud…

Submitted by yaw92· Mar 6, 2026Implement access management for apps

Question

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps. You need to identify which users access Facebook from their devices and browsers. The solution must minimize administrative effort. What should you do first?

Options

ACreate a Conditional Access policy.
BCreate a Defender for Cloud Apps access policy.
CCreate an app configuration policy in Microsoft Endpoint Manager.
DFrom the Microsoft Defender for Cloud Apps portal, unsanction Facebook.

How the community answered

(31 responses)

A
16% (5)
B
3% (1)
C
10% (3)
D
71% (22)

Explanation

Unsanctioning an app doesn't block use, but enables you to more easily monitor its use with the Cloud Discovery filters. You can then notify users of the unsanctioned app and suggest an alternative safe app for their use, or generate a block script using the Defender for Cloud Apps APIs to block all unsanctioned apps. https://learn.microsoft.com/en-us/defender-cloud-apps/governance- discovery#sanctioningunsanctioning-an-app

Topics

#Defender for Cloud Apps#shadow IT#app discovery#unsanction apps

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice