ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 365 discussion

Actual exam question from Microsoft's MD-102
Question #: 365
Topic #: 1
[All MD-102 Questions]

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

The subscription contains users that have devices onboarded to Microsoft Defender for Endpoint. Defender for Endpoint is configured to forward signals to Microsoft Defender for Cloud Apps.

Cloud Discovery identifies a risky web app named App1.

You need to block users from connecting to App1 from Microsoft Edge. Users must be able to bypass the restriction.

Which type of app tag should you use, and what should you configure to integrate Defender for Endpoint with Defender for Cloud Apps? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by neothwin at Feb. 27, 2025, 4:20 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Alex1184
3 days, 11 hours ago
No doubt about Enforce App Access but if you want the user to be able to make a decision to access it, you must instead Warn and allow bypass rather than block. Allowing bypass is exclusive to Monitored, as can be seen in this screenshot: https://learn.microsoft.com/en-us/defender-cloud-apps/media/mde-govern/mda-custom-block-url-config.png#lightbox Technically, you could set up a custom app. tag that blocks it for some users but allows for others, but then it wouldn't be any of the answer options, and also the user wouldn't technically be required to make the decision to access, it would just go through without any interaction. So for me, it's Monitored.
upvoted 1 times
...
siheom
1 month ago
Given Answer is correct.
upvoted 1 times
...
neothwin
1 month, 3 weeks ago
Should be monitored
upvoted 1 times
ExamBud
1 month, 2 weeks ago
But it says: "You need to block users from connecting to App1 from Microsoft Edge. Users must be able to bypass the restriction.". If you monitor it, you're not blocking. Unsanctioned would block and users can bypass.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago