Exam SC-100 topic 4 question 19 discussion

Actually there seems no correct answer here. Requirement is clear "the application must be blocked automatically until an administrator authorizes the application", but looking at Adaptative Application controls details: No enforcement options are currently available. Adaptive application controls are intended to provide security alerts if any application runs other than the ones you've defined as safe. Source - https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controls#are-there-any-options-to-enforce-the-application-controls

Using Adaptive application controls can help simplify the process of configuring and maintaining application policies. By using Adaptive application controls, you can: -Block attempts to run potentially malicious applications. -Receive alerts when adaptive application control blocks an application https://learn.microsoft.com/en-us/training/modules/create-implement-application-allowlists-adaptive-application-control/2-describe-controls

I'll go with A

Now controlled through intune app policies

A. Adaptive application controls in Defender for Cloud Adaptive application controls, often referred to as application whitelisting, allow you to specify which applications are authorized to run on your virtual machines and block all others. If an unauthorized application attempts to run, it will be blocked until an administrator authorizes it. This control provides a strong layer of security against unapproved or malicious applications. The other options (B, C, and D) are not primarily designed for controlling which applications can run on Windows Server 2019 virtual machines in your Azure subscription

A is the answer. How to block intentional or unintentional deletion of backup data? https://learn.microsoft.com/en-us/azure/backup/protect-backups-from-ransomware-faq#how-to-block-intentional-or-unintentional-deletion-of--backup-data

https://learn.microsoft.com/en-us/defender-cloud-apps/app-permission-policy

A is the answer. https://learn.microsoft.com/en-us/azure/defender-for-cloud/adaptive-application-controls Adaptive application controls are an intelligent and automated solution for defining allowlists of known-safe applications for your machines. Often, organizations have collections of machines that routinely run the same processes. Microsoft Defender for Cloud uses machine learning to analyze the applications running on your machines and create a list of the known-safe software. Allowlists are based on your specific Azure workloads, and you can further customize the recommendations using the following instructions. When you've enabled and configured adaptive application controls, you'll get security alerts if any application runs other than the ones you've defined as safe.

Although none of the options can block the app, A is the best choice. The correct solution should be Windows Defender Application Control and AppLocker.

Correct

A is correct