SC-300 Certification Practice Question #120

Question

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Cloud Apps and Yammer.

You need prevent users from signing in to Yammer from high-risk locations.

What should you do in the Microsoft Defender for Cloud Apps portal?

Accepted Answer

Defender for Cloud Apps access policies use Conditional Access App Control to monitor and control sign-in to a cloud app in real time, with a Location filter and a Block action — precisely the requirement to stop Yammer sign-ins from high-risk locations. MS Learn states an access policy "controls whether a user is allowed to sign in to a cloud application" and supports blocking by location. The other options fail: an activity policy governs in-app activity rather than the sign-in itself, unsanctioning Yammer removes the whole app for everyone, and an anomaly detection policy only detects/alerts and does not prevent sign-in (a point the lone dissenter explicitly retracted). Suggested Answer, Most Voted, and MS Learn all converge on A with minimal genuine dissent.

More SC-300 practice questions