SC-300 Certification Practice Question #117

Question

You have a Microsoft 365 E5 tenant.

You purchase a cloud app named App1.

You need to enable real-time session-level monitoring of App1 by using Microsoft Defender for Cloud Apps.

In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Accepted Answer

Real-time session-level monitoring with Conditional Access App Control follows a fixed dependency chain. First the app must exist/be published in Microsoft Entra so it can be targeted. Next a Conditional Access policy configured with the "Conditional Access App Control" session control routes that app's traffic through Defender for Cloud Apps as a reverse proxy. The app must then be onboarded/confirmed under MCAS Connected apps before a session policy can act on it. Finally the session policy itself is created in Defender for Cloud Apps to perform the real-time monitoring. The community is overwhelmingly aligned (44-vote Highly Voted answer plus four corroborating replies), and MS Learn confirms that Conditional Access routing is the prerequisite for session policies, which provide the session-level monitoring. Confidence is 90 given the strong cross-signal agreement and clear logical dependency, with a small discount for the absence of a recorded official Suggested Answer.

More SC-300 practice questions