Microsoft
SC-300 · Question #48
Hotspot Question You have a Microsoft 365 tenant. Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users regist
Sign in or unlock SC-300 to reveal the answer and full explanation for question #48. The question stem and answer options stay visible for context.
Submitted by certguy· Mar 6, 2026Implement access management for apps
Question
Hotspot Question You have a Microsoft 365 tenant. Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure Active Directory (Azure AD). You need to receive an alert if a registered application gains read and write access to the users' email. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- Tool to use:Azure AD Identity ProtectionIdentity GovernanceMicrosoft Defender for Cloud AppsMicrosoft Endpoint Manager
- Policy type to create:App discoveryApp protectionConditional accessOAuth appSign-in riskUser risk
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Defender for Cloud Apps#OAuth app policy#app permissions#email access