You have a Microsoft 365 tenant. In Microsoft Entra ID, you configure the terms of use. You need to ensure that only users who accept the terms of use can access the resources in the tenant. Other…

Question

Options

• ATerms and conditions in Microsoft Intune
• Ban access policy in Microsoft Defender for Cloud Apps
• Ca conditional access policy in Microsoft Entra ID
• Da compliance policy in Microsoft Intune

• A
  18% (6)
• B
  3% (1)
• C
  71% (24)
• D
  9% (3)

Explanation

Explanation

A Conditional Access policy in Microsoft Entra ID (Option C) is the correct tool because it acts as the enforcement engine that links the Terms of Use configuration to actual resource access - it can require users to accept the terms as a grant control before allowing access, and automatically deny access to those who refuse or haven't accepted.

Why the distractors are wrong:

• Option A (Intune Terms and Conditions): This applies only to device enrollment in Intune, not to broad tenant resource access.
• Option B (Defender for Cloud Apps access policy): This is used for session/access control of specific cloud apps, not for enforcing tenant-wide Terms of Use acceptance.
• Option D (Intune Compliance Policy): This evaluates device health and compliance state, not whether a user has accepted legal terms of use.

Memory Tip: Think of Conditional Access as the "gatekeeper" of Microsoft Entra ID - it's always the answer when you need to enforce a requirement (MFA, Terms of Use, compliant device) before granting access to resources. If something is configured in Entra ID and needs to be enforced, Conditional Access is what connects the two.

No community discussion yet for this question.