SC-300 Certification Practice Question #192

Question

You have a Microsoft 365 tenant.

Sometimes, users use external, third-party applications that require limited access to the Microsoft 365 data of the respective user. The users register the applications in Azure AD.

You need to receive an alert if a registered application gains read and write access to the users’ email.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The goal is to be alerted when a registered (third-party OAuth) application gains read and write access to users' email. MS Learn's OAuth app policy doc shows these policies are created in Microsoft Defender for Cloud Apps and let you filter apps by the permissions they request (including mailbox read/write) and trigger automated notifications — exactly the monitoring described. Both Highly Voted comments (11 and 8 👍) and multiple corroborating comments independently select Microsoft Defender for Cloud Apps as the tool and OAuth app as the policy type, with no dissent. Confidence is held at 90 rather than higher because the file did not capture an explicit Suggested Answer key, though the community is unanimous and MS Learn directly confirms both selections.

More SC-300 practice questions