Exam SC-300 topic 4 question 75 discussion

C. a Conditional Access policy To configure continuous access evaluation for app sign-ins and assign the configuration to users that are assigned the Application Administrator role, you should configure a Conditional Access policy. Conditional Access policies in Microsoft Entra allow you to control access to apps and resources based on certain conditions such as user, location, device, and application state. By creating a Conditional Access policy, you can enable continuous access evaluation for app sign-ins and target the policy specifically to users assigned the Application Administrator role. This ensures that the configuration applies only to those users who have the appropriate role.

Continuous Access Evaluation has to do with making conditional access checks for token refreshes at the time of expiration to see if the user has been disabled or changed IP addresses. Conditional Access Policy is the answer.

To configure continuous access evaluation for app sign-ins and assign the configuration to users with the Application Administrator role, you should configure a Conditional Access policy (Option C). Conditional Access policies allow you to enforce real-time access decisions based on user and session risk, which is essential for continuous access evaluation.

Continuous Access Evaluation (CAE) is a valuable security feature in Azure AD that constantly monitors user access. Here's a breakdown on how to configure CAE: Prerequisites: Microsoft Entra (Azure AD) tenant with Conditional Access enabled. Understanding of your organization's security needs and user risk profiles. Steps: Enable CAE (Preview): CAE is currently in preview. To enable it, navigate to the Azure portal and access the Conditional Access blade. Look for "Preview features" and enable "Continuous Access Evaluation."

Answer is B: "access evaluation for app sign-ins": This implies access review to apps.