SC-300 Certification Practice Question #163

Question

You have a Microsoft 365 subscription.

You configure a Global Secure Access security profile named SecurityProfile1.

You need to create a Conditional Access policy named CAPolicy1 that will use SecurityProfile1.

Which two settings should you configure to ensure that CAPolicy1 uses SecurityProfile1? To answer, select the appropriate settings in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Every weighted comment (the Highly Voted answer with 7 👍 plus three additional 3-👍 comments) and MS Learn agree exactly. Microsoft's documented procedure for delivering a Global Secure Access security profile through Conditional Access is to set **Target resources** to "All internet resources with Global Secure Access" and then, under **Session**, choose **Use Global Secure Access security profile** and pick the profile (SecurityProfile1). Session is the delivery mechanism for the security profile; the Grant section only enforces point-of-access controls such as MFA or device compliance and cannot attach a security profile. Unanimous community and documentation agreement supports a high 90.

More SC-300 practice questions