SC-100 Certification Practice Question #171

Question

You have on-premises Windows 11 devices that have the Global Secure Access client deployed.

You have a Microsoft 365 subscription that uses Microsoft SharePoint Online and Exchange Online.

You deploy Microsoft Entra Internet Access from the on-premises network to Microsoft 365. The deployment has the Microsoft 365 profile enabled and contains the following:

•	Default traffic policies for Microsoft 365 services
•	A linked Conditional Access policy that performs compliant network checks with continuous access evaluation and is applied to all users
•	An assignment to all the devices
•	An assignment to a remote network associated with the on-premises network

Which Microsoft 365 resources are protected by using continuous access evaluation?

Accepted Answer

Continuous access evaluation is supported by the core Microsoft 365 workloads — Exchange Online, SharePoint Online (and Teams) — per MS Learn, which states the initial CAE implementation focuses on "Exchange, Teams, and SharePoint Online." With the Microsoft 365 traffic profile enabled and a linked Conditional Access policy performing compliant-network checks through Global Secure Access, both SharePoint Online and Exchange Online are protected by CAE, so options A and B are too narrow. Suggested Answer C, the 7-vote unanimous community majority, multiple comments citing the official CAE article, and MS Learn all agree, giving high confidence at 90%.

More SC-100 practice questions