SC-300 Certification Practice Question #272

Question

You have a Microsoft 365 subscription.

You need to create a Conditional Access policy that will use a Global Secure Access security profile. The solution must ensure that users are prevented from accessing websites that include the word gambling in the URL.

What should you do first?

Accepted Answer

Global Secure Access blocks websites by web category or URL/FQDN through a web content filtering policy. Per MS Learn, the build order is: (1) create a web content filtering policy with a rule that blocks the target (gambling category / URL containing "gambling"), (2) create a security profile and link that policy to it, then (3) link the security profile to a Conditional Access policy. The question asks what to do *first*, and the filtering policy is the foundational object that the security profile and Conditional Access policy reference — you cannot build the security profile/CA chain without it. A named location (B) only defines IP ranges/countries for CA conditions, Adaptive Access (C) is not the URL-content control, and an NSG (D) is an Azure networking construct, none of which filter websites by URL keyword. Suggested Answer A and MS Learn agree; confidence is 88% because community vote count is thin (1).

More SC-300 practice questions