MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 2

Question 1

An administrator needs to block legacy authentication protocols for all users in the organization. Which Conditional Access condition should be configured?

Accepted Answer

Client apps condition set to 'Exchange ActiveSync clients and other clients'

Answer

The 'Exchange ActiveSync clients and other clients' client apps condition targets legacy authentication protocols that do not support modern authentication.

Question 2

A company wants to enforce Conditional Access only for users accessing SharePoint Online from unmanaged devices. Which cloud app should be selected in the policy?

Accepted Answer

Office 365 SharePoint Online

Answer

Selecting 'Office 365 SharePoint Online' as the cloud app scopes the policy specifically to SharePoint Online access.

Question 3

A Conditional Access policy is set to grant access only when a compliant device is detected, but users report being blocked even on Intune-enrolled devices. What is the most likely cause?

Accepted Answer

The device compliance policy has not been assigned to those users

Answer

If a device compliance policy is not assigned to users, their devices remain in a 'Not evaluated' state and are not considered compliant.

Question 4

Which Conditional Access session control restricts a user from downloading, printing, or syncing files when accessing a cloud app from an unmanaged device?

Accepted Answer

Use Conditional Access App Control

Answer

Conditional Access App Control integrates with Microsoft Defender for Cloud Apps to enforce session-level controls like blocking downloads on unmanaged devices.

Question 5

An administrator wants to ensure that the Conditional Access policy does not lock out break-glass accounts during an authentication incident. What is the recommended approach?

Accepted Answer

Assign break-glass accounts to a group excluded from all Conditional Access policies

Answer

Break-glass (emergency access) accounts should be excluded from all Conditional Access policies to ensure administrative access during incidents.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Implementing Conditional Access Policies 2