MD-101 Conditional Access and Compliance Policies 3

Question 1

A Conditional Access policy is set to 'Report-only' mode. What effect does it have on users?

Accepted Answer

It evaluates the policy and logs what would have happened without enforcing any controls

Answer

Report-only mode evaluates Conditional Access policies and records results in sign-in logs without enforcing any grant or session controls on users.

Question 2

Which Intune compliance setting specifically checks that Secure Boot is enabled on Windows devices?

Accepted Answer

Require Secure Boot to be enabled on the device

Answer

The 'Require Secure Boot to be enabled on the device' compliance setting verifies that the device's firmware security feature is active.

Question 3

What is the difference between 'Mark device non-compliant' immediately vs. with a delay in compliance policy actions?

Accepted Answer

Immediate marking blocks access right away; delayed marking uses the grace period before CA enforcement

Answer

Marking non-compliant immediately triggers Conditional Access enforcement at once, while scheduling it with a delay creates a grace period before access is blocked.

Question 4

An organization wants to block access from legacy authentication clients (e.g., SMTP, IMAP) to prevent credential spray attacks. What should be configured?

Accepted Answer

Conditional Access policy blocking legacy authentication via client apps condition

Answer

A Conditional Access policy targeting 'Other clients' in the Client apps condition and using Block access blocks legacy authentication protocols that don't support MFA.

Question 5

Which Conditional Access session control limits what users can do in a cloud app without blocking access entirely?

Accepted Answer

Session control — Use Conditional Access App Control via Microsoft Defender for Cloud Apps

Answer

Conditional Access App Control via Microsoft Defender for Cloud Apps allows session-level controls like blocking download, copy/paste, or print within cloud apps.

MD-101 - Managing Modern Desktops Practice Test

MD-101 - Managing Modern Desktops Practice Test

MD-101 Conditional Access and Compliance Policies 3