Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft MD-102 Exam - Topic 4 Question 64 Discussion

You have a Microsoft 365 E5 subscription that contains a user named User! and a web app named Appl.App1 must only accept modern authentication requests.You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:* Assignments Users or workload identities: User1 Cloud apps or actions: App1* Access controls Grant: Block accessYou need to block only legacy authentication requests to Appl. Which condition should you add to CAPolicy1?
E) Client apps
A) Filter for devices
B) Device platforms
C) User risk
D) Sign-in risk

Microsoft MD-102 Exam - Topic 4 Question 64 Discussion

Actual exam question for Microsoft's MD-102 exam
Question #: 64
Topic #: 4
[All MD-102 Questions]

You have a Microsoft 365 E5 subscription that contains a user named User! and a web app named Appl.

App1 must only accept modern authentication requests.

You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:

* Assignments

Users or workload identities: User1

Cloud apps or actions: App1

* Access controls

Grant: Block access

You need to block only legacy authentication requests to Appl. Which condition should you add to CAPolicy1?

Show Suggested Answer Hide Answer
Suggested Answer: E

you can use the client apps condition to block legacy authentication requests to App11.Legacy authentication is a term that refers to authentication protocols that do not support modern authentication features such as multi-factor authentication or conditional access2.Examples of legacy authentication protocols include Basic Authentication, Digest Authentication, NTLM, and Kerberos2.To block legacy authentication requests, you need to configure the client apps condition to include Other clients, which covers any client that uses legacy authentication protocols13. Reference:1: Conditional Access: Block legacy authentication | Microsoft Learn https://learn.microsoft.com/en-us/mem/identity-protection/conditional-access/block-legacy-authentication2: What is legacy authentication?| Microsoft Learn https://learn.microsoft.com/en-us/mem/identity-protection/conditional-access/legacy-authentication3: Client apps condition in Azure Active Directory Conditional Access | Microsoft Learn https://learn.microsoft.com/en-us/mem/identity-protection/conditional-access/client-apps-condition


by Precious at Jun 01, 2026, 11:04 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jennie
3 days ago
Wait, are we sure legacy auth is the only issue here?
upvoted 0 times
...
Chara
8 days ago
Totally agree, client apps is the way to go!
upvoted 0 times
...
Vonda
13 days ago
You need to filter by client apps to block legacy auth.
upvoted 0 times
...
Jesusita
18 days ago
I’m confused about this one. I thought user risk and sign-in risk were more about security, not specifically about blocking legacy authentication.
upvoted 0 times
...
Devorah
23 days ago
I practiced a similar question where we had to block certain access types, and I feel like the answer might be related to device platforms instead.
upvoted 0 times
...
Carin
29 days ago
I'm not entirely sure, but I remember something about legacy authentication being tied to specific client apps. Could that be the right choice?
upvoted 0 times
...
Isabelle
1 month ago
I think we need to focus on the type of authentication being used, so maybe we should look at Client apps for this policy?
upvoted 0 times
...

Save Cancel