SC-100 Certification Practice Question #125

Question

You have a Microsoft 365 subscription that contains a Microsoft SharePoint Online site named Site1.

You have a Conditional Access policy named Policy1 that only allows workload identities from trusted locations to access SharePoint Online.

You plan to move all business-sensitive information to Site1.

You need to ensure that CAPolicy1 applies to Site1 only.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Accepted Answer

MS Learn's SharePoint authentication-context procedure maps directly to three actions: first add an authentication context in Microsoft Entra ID; then bind it to the Conditional Access policy — and because an authentication context is selected under "Cloud apps or actions" (the policy's target resources, not its Conditions), the correct action is "Modify the target resources of Policy1"; finally apply the context to the single site by configuring a sensitivity label for Site1. "Authentication strength" and "Modify the conditions" are distractors. The question notes more than one order earns credit (the sensitivity-label and target-resources steps can swap, per emadmf76), and creating the authentication context must come first. Confidence is held at 85% because there is no Suggested/Most-Voted marker, but two MS-Learn-grounded comments (incl. a 3-👍 quote) agree.

More SC-100 practice questions