In Microsoft Defender for Cloud Apps, what is the purpose of OAuth app policies?

To regulate permissions and access granted to third-party OAuth apps

To control user sessions in cloud apps

A company has a third-party SaaS app that is connected to Defender for Cloud Apps. They want to enforce different session controls for two groups: 'Contractors' and 'Employees'. Contractors should be blocked from downloading files, while Employees should be allowed to download but blocked from printing. They have already created a Conditional Access policy that routes the app through Defender for Cloud Apps. What is the most efficient way to implement these requirements?

Create one session policy that blocks both downloads and printing for all users.

Create a Conditional Access policy for each group with different session controls.

Create two access policies: one that blocks downloads for Contractors and one that blocks printing for Employees.

Create two session policies: one that blocks downloads for Contractors and one that blocks printing for Employees.

What is the purpose of application-enforced restrictions in Microsoft Defender for Cloud Apps?

To restrict access to the app's network endpoints

To enforce multi-factor authentication for the app

To prevent users from installing the app

To block or restrict specific actions within a cloud app based on policy

A company uses Microsoft Defender for Cloud Apps and wants to block access to a high-risk cloud storage app that is not connected via API. They have discovered the app through Cloud Discovery. What should they do to block access?

Create a session policy that blocks the app for all users.

Create an access policy that targets the discovered app and set the action to 'Block'.

Connect the app via its API first, then create an access policy.

Add the app to the Cloud app catalog as unsanctioned.

Contoso wants to use Conditional Access app control to monitor and control user sessions in a third-party SaaS app that is connected to Microsoft Entra ID. They have already connected the app in Defender for Cloud Apps. What is the next step to enforce session policies?

Deploy the Defender for Cloud Apps collector to monitor the app's traffic.

Create a Conditional Access policy that routes the app's traffic through Defender for Cloud Apps.

Enable the app for SSO in Microsoft Entra ID.

Create a session policy in Defender for Cloud Apps and it will automatically apply to all connected apps.

Microsoft Certified:Identity and Access Administrator Associate

Domain 3Objective 4

Manage and Monitor App Access by Using Microsoft Defender for Cloud Apps SC-300 Practice Questions (Page 6)

Part of the Plan and implement workload identities domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

20–25%of the exam

Questions 26–30

26foundation · medium
In Microsoft Defender for Cloud Apps, what is the purpose of OAuth app policies?
Select an answer first
27expert · hard
A company has a third-party SaaS app that is connected to Defender for Cloud Apps. They want to enforce different session controls for two groups: 'Contractors' and 'Employees'. Contractors should be blocked from downloading files, while Employees should be allowed to download but blocked from printing. They have already created a Conditional Access policy that routes the app through Defender for Cloud Apps. What is the most efficient way to implement these requirements?
Select an answer first
28foundation · medium
What is the purpose of application-enforced restrictions in Microsoft Defender for Cloud Apps?
Select an answer first
29application · medium
A company uses Microsoft Defender for Cloud Apps and wants to block access to a high-risk cloud storage app that is not connected via API. They have discovered the app through Cloud Discovery. What should they do to block access?
Select an answer first
30application · medium
Contoso wants to use Conditional Access app control to monitor and control user sessions in a third-party SaaS app that is connected to Microsoft Entra ID. They have already connected the app in Defender for Cloud Apps. What is the next step to enforce session policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.