SC-300 Certification Practice Question #198

Question

Your company purchases a new Microsoft 365 E5 subscription and an app named App1.

You need to create a Microsoft Defender for Cloud Apps access policy for App1.

What should you do you first?

Accepted Answer

A Defender for Cloud Apps access policy depends on Conditional Access App Control, and CAAC itself requires a Microsoft Entra ID Conditional Access policy that routes the app's session traffic through Defender for Cloud Apps as a reverse proxy. MS Learn lists this Conditional Access policy explicitly as a prerequisite ("creates the permissions required to control traffic"), so it must exist before the access policy can be created. The Suggested Answer, the unanimous community vote, and multiple well-reasoned comments all converge on D, with no credible dissent.

More SC-300 practice questions