MENU
You have a Microsoft 365 E5 subscription that contains a user named User! and a web app named Appl.
App1 must only accept modern authentication requests.
You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:
* Assignments
Users or workload identities: User1
Cloud apps or actions: App1
* Access controls
Grant: Block access
You need to block only legacy authentication requests to Appl. Which condition should you add to CAPolicy1?
17 comments · newest first
IV
Ivory
1 month ago
Just focus on the legacy auth aspect. E) covers it well!
RE
Rene
1 month ago
I’m just worried about missing something in the conditions.
GE
Gertude
1 month ago
Yeah, E) is definitely the best fit. We need to target the client apps specifically.
EA
Earnestine
2 months ago
D) Sign-in risk seems off-topic here.
KR
Kristeen
2 months ago
I’m leaning towards E) too. It directly addresses the authentication type.
AL
Aleisha
2 months ago
I feel like A) Filter for devices could also be relevant, but not as much.
CH
Cheryll
2 months ago
Agreed! Legacy auth is tied to client apps.
IV
Ivory
2 months ago
This question is tricky! I think E) Client apps is the right choice.
DA
Daron
3 months ago
Just to clarify, legacy auth means older protocols, right?
FR
Francine
3 months ago
Device platforms could also be relevant, but client apps seems best.
JE
Jennie
3 months ago
Wait, are we sure legacy auth is the only issue here?
CH
Chara
3 months ago
Totally agree, client apps is the way to go!
VO
Vonda
3 months ago
You need to filter by client apps to block legacy auth.
JE
Jesusita
3 months ago
I’m confused about this one. I thought user risk and sign-in risk were more about security, not specifically about blocking legacy authentication.
DE
Devorah
4 months ago
I practiced a similar question where we had to block certain access types, and I feel like the answer might be related to device platforms instead.
CA
Carin
4 months ago
I'm not entirely sure, but I remember something about legacy authentication being tied to specific client apps. Could that be the right choice?
IS
Isabelle
4 months ago
I think we need to focus on the type of authentication being used, so maybe we should look at Client apps for this policy?