Microsoft Exam MD-102 Topic 4 Question 47 Discussion

Actual exam question for Microsoft's MD-102 exam

Question #: 47
Topic #: 4

You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

You create a Conditional Access policy named CAPolicy1 that will block access to Microsoft Exchange Online from iOS devices. You assign CAPolicy1 to Group1.

You discover that User1 can still connect to Exchange Online from an iOS device.

You need to ensure that CAPolicy1 is enforced.

What should you do?

AConfigure a new terms of use (TOU).

BAssign CAPolicy1 to Group2.

CEnable CAPolicy1

DAdd a condition in CAPolicy1 to filter for devices.

Show Suggested Answer

Suggested Answer: B

Common signals that Conditional Access can take in to account when making a policy decision include the following signals:

* User or group membership

Policies can be targeted to specific users and groups giving administrators fine-grained control over access.

* Device

Users with devices of specific platforms or marked with a specific state can be used when enforcing Conditional Access policies.

Use filters for devices to target policies to specific devices like privileged access workstations.

* Etc.

by Lamar at May 03, 2025, 03:44 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emiko

7 days ago

Option B seems like the easiest fix. Just assign the policy to a different group and voila, problem solved. Unless, of course, User1 is secretly a member of Group2 as well.

upvoted 0 times

...

Sunny

9 days ago

Ah, I see the problem. User1 must be using some sort of magic iOS device that's immune to the policy. Maybe we need to call in the Hogwarts tech support team.

upvoted 0 times

...

Viola

28 days ago

Hmm, it seems like the policy isn't being enforced properly. I'd go with option D and add a condition to filter for devices. That should do the trick.

upvoted 0 times

Miles

18 days ago

User1: I think we should try option D and add a condition to filter for devices.

upvoted 0 times

...