SC-100 Certification Practice Question #280

Question

You need to design a strategy for securing the SharePoint Online and Exchange Online data. The solution must meet the application security requirements.
Which two services should you leverage in the strategy? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

The requirement is to "monitor and control access to SharePoint Online and Exchange Online data in real time." MS Learn states real-time session monitoring is delivered by Conditional Access App Control, which is the integration of Microsoft Entra Conditional Access (route the session) with Microsoft Defender for Cloud Apps (the reverse-proxy that enforces and monitors the session). Both halves are mandatory, so A and D each earn one point. The official Suggested Answer lists only D, which is incomplete for a two-answer question; the community (61 votes) and MS Learn both confirm the missing piece is A (Conditional Access), so confidence stays high despite the partial suggested answer.

More SC-100 practice questions