What is the primary purpose of Conditional Access App Control in Microsoft Defender for Cloud Apps?

To discover cloud apps used in the organization

To enforce session policies on cloud apps in real time

To connect apps via API connectors

To manage OAuth app permissions

A company uses Microsoft Defender for Cloud Apps and wants to ensure that only approved cloud apps are used. They have a list of approved apps in the Cloud app catalog. What should they do to enforce that only these apps are accessible?

Disable Cloud Discovery for unapproved apps.

Create an access policy that blocks all apps not tagged as 'Approved' in the catalog.

Remove all unapproved apps from the Cloud app catalog.

Create a session policy that monitors all apps.

A company wants to use Conditional Access app control to monitor user sessions in a custom line-of-business (LOB) app that is not in the Defender for Cloud Apps catalog. The app is registered in Microsoft Entra ID. What should you do to enable session monitoring?

Use the app's built-in session monitoring feature.

Add the LOB app as a custom app in the Cloud app catalog and then create a Conditional Access policy with app control.

Deploy the Defender for Cloud Apps collector to capture the app's traffic.

Create a session policy directly for the LOB app in Defender for Cloud Apps.

After running Cloud Discovery for 30 days, Fabrikam's security team sees that a custom line-of-business app named 'ProjectTracker' has high usage. The app is not in the Microsoft Defender for Cloud Apps catalog. The team wants to assess its risk and decide whether to allow it. What should they do?

Review the Cloud Discovery report for ProjectTracker, then add it to the Cloud app catalog with a custom risk score.

Create a session policy that blocks ProjectTracker for all users.

Block ProjectTracker immediately because it is not in the catalog.

Connect ProjectTracker as a connected app using its API.

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 4

Manage and Monitor App Access by Using Microsoft Defender for Cloud Apps SC-300 Practice Questions (Page 2)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

20–25%of the exam

Questions 6–10

6foundation · medium
What is the primary purpose of Conditional Access App Control in Microsoft Defender for Cloud Apps?
Select an answer first
7foundation · medium
In Microsoft Defender for Cloud Apps, which feature is used to discover and analyze cloud app usage by collecting logs from network devices?
Select an answer first
8application · medium
A company uses Microsoft Defender for Cloud Apps and wants to ensure that only approved cloud apps are used. They have a list of approved apps in the Cloud app catalog. What should they do to enforce that only these apps are accessible?
Select an answer first
9application · medium
A company wants to use Conditional Access app control to monitor user sessions in a custom line-of-business (LOB) app that is not in the Defender for Cloud Apps catalog. The app is registered in Microsoft Entra ID. What should you do to enable session monitoring?
Select an answer first
10application · medium
After running Cloud Discovery for 30 days, Fabrikam's security team sees that a custom line-of-business app named 'ProjectTracker' has high usage. The app is not in the Microsoft Defender for Cloud Apps catalog. The team wants to assess its risk and decide whether to allow it. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.