SC-200 Certification Practice Question #205

Question

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

You need to enable Microsoft Defender for Cloud Apps session control for Site1.

Which type of policy should you create first?

Accepted Answer

Microsoft Defender for Cloud Apps session control works through Conditional Access App Control, which proxies app traffic via Microsoft Entra. MS Learn states explicitly that before a Defender for Cloud Apps session policy can function, you must first have a Microsoft Entra Conditional Access policy that routes traffic through Defender (Access controls > Session > Use Conditional Access App Control). Therefore the Conditional Access policy is the policy created first. Suggested Answer, the unanimous community vote (9-0 for D), and MS Learn all agree.

More SC-200 practice questions