Microsoft
SC-300 · Question #249
Your company purchases a Microsoft 365 E5 subscription. A user named User1 is assigned the Security Administrator role. You need to ensure that User1 can create Microsoft Defender for Cloud Apps…
The correct answer is B. Create a Conditional Access policy and select Use Conditional Access App Control. https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad
Submitted by femi9· Mar 6, 2026Implement access management for apps
Question
Your company purchases a Microsoft 365 E5 subscription. A user named User1 is assigned the Security Administrator role. You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies. What should you do first?
Options
- ACreate a Conditional Access policy and select Require app protection policy.
- BCreate a Conditional Access policy and select Use Conditional Access App Control.
- CAssign the Cloud Application Administrator role to User1.
- DAssign the Cloud App Security Administrator role to User1.
How the community answered
(40 responses)- A5% (2)
- B83% (33)
- C10% (4)
- D3% (1)
Explanation
https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad
Topics
#Defender for Cloud Apps#session policies#Conditional Access App Control#prerequisites
Community Discussion
No community discussion yet for this question.