SC-300 Certification Practice Question #155

Question

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps.

You have multiple third-party apps that access the resources in the subscription.

You need to monitor the access of the third-party apps.

What should you create?

Accepted Answer

The scenario is monitoring access by third-party (OAuth) apps in Defender for Cloud Apps. MS Learn states OAuth app policies are purpose-built to investigate which permissions each app requested and which users authorized them, and to alert/approve/ban based on criteria — exactly "monitor the access of the third-party apps." Both the Suggested Answer and Most Voted are C, and the highest-quality comment (Obi_Wan_Jacoby) maps the options correctly. The lone B dissent confuses the answer with a non-existent "app permission policy" name; the actual feature is the OAuth app policy, so it is discounted. Access policies (A) govern live session access rather than app permissions, and endpoint protection (D) is unrelated.

More SC-300 practice questions