Conditional Access Policies GCAD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In a Conditional Access policy, what do 'access controls' determine?

   • AThe conditions under which the policy is evaluated
   • BThe logging and monitoring settings for the policy
   • CWhich users and groups the policy applies to
   • DThe action to take when the policy conditions are met, such as requiring MFA or blocking access
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When troubleshooting a user's access issue, which log should you review to see which Conditional Access policies were applied?

   • AMicrosoft Entra sign-in logs
   • BAzure Activity log
   • CMicrosoft 365 audit log
   • DWindows Event Viewer
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An administrator is troubleshooting a conditional access issue. A user is being blocked from accessing an app, but the administrator cannot determine why. The user is in a group that is assigned to a policy that requires MFA, but the user is not being prompted for MFA; instead, access is blocked. The administrator checks the sign-in logs and sees that the policy was applied, but the access control was 'Block access'. What is the most likely reason?

   • AThe user's device is not compliant, and the policy requires a compliant device.
   • BThe user's sign-in risk is high, and the policy blocks high-risk sign-ins.
   • CThe policy is configured to block access instead of require MFA.
   • DThe user is not a member of the group assigned to the policy.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to require that users accessing a sensitive application from personal devices can only view data and cannot download it. Which conditional access control should they configure?

   • ABlock access for personal devices.
   • BRequire a compliant device for the application.
   • CUse a session control to restrict access to the application.
   • DRequire MFA for the application.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company wants to implement conditional access policies but is concerned about the impact on users. Which approach should they take to minimize disruption while maintaining security?

   • ACreate policies that only apply to a small group of users.
   • BEnable all policies immediately to ensure security.
   • CUse report-only mode to evaluate the impact before enabling policies.
   • DExclude all users from policies to avoid disruption.
   Reveal Solution Discussion Select an answer first