nerdexam
Microsoft

SC-300 · Question #249

Your company purchases a Microsoft 365 E5 subscription. A user named User1 is assigned the Security Administrator role. You need to ensure that User1 can create Microsoft Defender for Cloud Apps…

The correct answer is B. Create a Conditional Access policy and select Use Conditional Access App Control. https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad

Submitted by femi9· Mar 6, 2026Implement access management for apps

Question

Your company purchases a Microsoft 365 E5 subscription. A user named User1 is assigned the Security Administrator role. You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies. What should you do first?

Options

  • ACreate a Conditional Access policy and select Require app protection policy.
  • BCreate a Conditional Access policy and select Use Conditional Access App Control.
  • CAssign the Cloud Application Administrator role to User1.
  • DAssign the Cloud App Security Administrator role to User1.

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    83% (33)
  • C
    10% (4)
  • D
    3% (1)

Explanation

https://learn.microsoft.com/en-us/defender-cloud-apps/session-policy-aad

Topics

#Defender for Cloud Apps#session policies#Conditional Access App Control#prerequisites

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice