Cloud App Discovery identifies a high-risk app used by several users. What is the recommended first step to mitigate the risk?

Contact the app vendor for a security audit

Immediately block the app at the firewall

Ignore the app if it is popular

Review the app's risk score and usage details

Fabrikam wants to discover which cloud apps are being used by employees, but they are concerned about privacy and want to minimize the impact on user devices. They have already deployed the Cloud Discovery log collector on their network. What should they do to ensure that only sanctioned apps are used and to respond to discovered unsanctioned apps?

Use the Cloud Discovery API to automatically sanction all discovered apps without manual review.

Disable the log collector to prevent further data collection, then manually review the existing logs.

Review the Cloud Discovery dashboard, identify unsanctioned apps, and use the 'Unsanction' action to block them via the app connector or proxy.

Create a file policy that automatically blocks all unsanctioned apps discovered by the log collector.

The security team wants to receive an email alert when a user signs in from a new country. They have already connected Microsoft 365 to Defender for Cloud Apps. Which policy configuration should they use?

Create a session policy that monitors sign-in activity and sends an email alert.

Create an access policy that blocks sign-ins from new countries and sends an alert.

Create an activity policy with the condition 'Country not previously seen' and set the alert to send an email.

Create a file policy with a condition on the sign-in activity and set the alert to send an email.

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 4

Implement and Manage Microsoft Defender for Cloud Apps MS-102 Practice Questions (Page 7)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

30–35%of the exam

Questions 31–33

31foundation · easy
Cloud App Discovery identifies a high-risk app used by several users. What is the recommended first step to mitigate the risk?
Select an answer first
32application · medium
Fabrikam wants to discover which cloud apps are being used by employees, but they are concerned about privacy and want to minimize the impact on user devices. They have already deployed the Cloud Discovery log collector on their network. What should they do to ensure that only sanctioned apps are used and to respond to discovered unsanctioned apps?
Select an answer first
33application · medium
The security team wants to receive an email alert when a user signs in from a new country. They have already connected Microsoft 365 to Defender for Cloud Apps. Which policy configuration should they use?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Implement and Manage Microsoft Defender for Cloud Apps MS-102 Practice Questions (Page 7)

Questions 31–33

Cloud App Discovery identifies a high-risk app used by several users. What is the recommended first step to mitigate the risk?

The security team wants to receive an email alert when a user signs in from a new country. They have already connected Microsoft 365 to Defender for Cloud Apps. Which policy configuration should they use?

Keep studying — Manage security and threats by using Microsoft Defender XDR