SC-300 Certification Practice Question #132

Question

You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3 and a Microsoft SharePoint Online site named Site1.

The subscription contains the devices shown in the following table.

The users sign in to the devices as shown in the following table.

You have a Conditional Access policy that has the following settings:

•	Name: CA1
•	Assignments
o	Users and groups: User1, User2, User3
o	Cloud apps or actions: SharePoint - Site1
•	Access controls
o	Session: Use app enforced restrictions

From the SharePoint admin center, you configure Access control for unmanaged devices to allow limited, web-only access.

Which users will have full access to Site1?

Accepted Answer

When SharePoint Access control for unmanaged devices is set to "Allow limited, web-only access", only **managed** devices get full access. MS Learn defines an unmanaged device for SharePoint/OneDrive as one that is *not hybrid AD joined or compliant in Intune* — so compliance, not merely Entra join state, is decisive. Device1 is Azure AD joined but **Noncompliant**, so it is treated as unmanaged (web-only) → User1 limited. Device2 is Azure AD registered and **Compliant**, so it is managed → User2 gets full access. Device3 has no join and compliance is Not applicable → unmanaged → User3 limited. Therefore only User2 has full access (B). The high-voted A dissent (jlbrandes, 17 👍) hinges on "only joined devices are managed" and ignores the compliance dimension; the much larger Most Voted of 51 for B, multiple well-reasoned comments, and the explicit MS Learn definition that hinges on compliance outweigh it, so confidence is high but not maxed given that vocal A minority.

More SC-300 practice questions