Conditional Access Policies GCAD Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the effect of a Conditional Access policy that uses the 'Block access' control?

   • AIt logs the access attempt but allows the user through
   • BIt prevents the user from accessing the targeted resources
   • CIt allows access but restricts the user's session
   • DIt requires the user to perform additional authentication steps
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the first step in the Conditional Access policy evaluation process?

   • ABlocking access if the user is not compliant
   • BLogging the sign-in attempt to the audit log
   • CApplying access controls
   • DChecking if the policy is enabled and applies to the user and resource
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator is reviewing the sign-in logs to determine why a user was not prompted for MFA. The user's sign-in risk is low, and the user is accessing the app from a trusted location. The conditional access policy requires MFA for all users, but the policy is configured to exclude trusted locations. What is the most likely reason the user was not prompted for MFA?

   • AThe user is accessing from a trusted location, which is excluded from the policy.
   • BThe user is not a member of the group assigned to the policy.
   • CThe policy is in report-only mode.
   • DThe user's sign-in risk is low, so the policy did not apply.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization wants to allow users to access a cloud app from unmanaged devices, but they want to restrict what users can do with the data once it is accessed. Specifically, they want to prevent users from copying sensitive data from the app to personal storage. The app supports Azure AD conditional access and has integration with Microsoft Cloud App Security (MCAS). Which access control should be configured in the conditional access policy?

   • AUse Conditional Access App Control
   • BRequire MFA
   • CUse app enforced restrictions
   • DRequire compliant device
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which tool or report is used to monitor the effectiveness of Conditional Access policies?

   • AAzure Active Directory diagnostic settings
   • BAzure Monitor workbooks
   • CMicrosoft Defender for Cloud recommendations
   • DThe Conditional Access 'What If' tool and sign-in logs
   Reveal Solution Discussion Select an answer first