Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Microsoft SC-900 Exam - Topic 4 Question 70 Discussion

Actual exam question for Microsoft's SC-900 exam

Question #: 70
Topic #: 4

[All SC-900 Questions]

Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

Anetwork security groups (NSGs)

BAzure AD Privileged Identity Management (PIM)

Cconditional access policies

Dresource locks

Show Suggested Answer

Suggested Answer: B

by Solange at Jun 12, 2025, 12:45 PM

Limited Time Offer

25%

Off

Get Premium SC-900 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cathern

8 months ago

Wow, I didn't know that!

upvoted 0 times

...

Celestina

9 months ago

I thought it was PIM, but I guess not.

upvoted 0 times

...

Maryrose

9 months ago

NSGs don't apply here, right?

upvoted 0 times

...

Rozella

9 months ago

Wait, are you sure it's not resource locks?

upvoted 0 times

...

Marshall

9 months ago

It's definitely conditional access policies!

upvoted 0 times

...

Kirby

10 months ago

Resource locks seem unrelated to user access. I think it's definitely between conditional access policies and PIM.

upvoted 0 times

...

Sharmaine

10 months ago

I feel like network security groups are more about controlling traffic rather than managing device access.

upvoted 0 times

...

Tu

10 months ago

I'm not entirely sure, but I remember something about Azure AD PIM being related to permissions, not device access.

upvoted 0 times

...

Jin

10 months ago

I think conditional access policies might be the right answer. We practiced a similar question about restricting access based on device compliance.

upvoted 0 times

...

Lai

10 months ago

I'm a bit confused on the difference between the options here. Are network security groups, PIM, and resource locks also ways to restrict Intune device access? I want to make sure I fully understand the distinctions before answering.

upvoted 0 times

...

Eulah

11 months ago

Conditional access policies sound like the right approach here. That's how you can enforce things like device compliance and other requirements before granting access. I feel pretty confident about this one.

upvoted 0 times

...

Shawn

11 months ago

Hmm, I'm not totally sure about this one. I know Azure AD has a lot of security features, but I'm not familiar with the specifics of how to restrict Intune-managed devices. I'll have to think this through carefully.

upvoted 0 times

...

Olene

11 months ago

I think the answer is C - conditional access policies. That's the Azure AD feature that allows you to control access to resources based on device state and other conditions.

upvoted 0 times

...

Erick

1 year ago

Azure AD Privileged Identity Management? Sounds like a fancy dance move. I'll stick with conditional access policies - the bouncers of the Azure AD party.

upvoted 0 times

Samira

1 year ago

I think it's important to have that extra layer of security with conditional access policies.

upvoted 0 times

...

Annamae

1 year ago

Yeah, they're like the security guards of Azure AD, keeping everything in check.

upvoted 0 times

...

King

1 year ago

I agree, conditional access policies are like the bouncers making sure only the right people get in.

upvoted 0 times

...

...

Jess

1 year ago

I'm not sure, but I think it's either A) network security groups or C) conditional access policies.

upvoted 0 times

...

Rosalia

1 year ago

Resource locks? What is this, a game of Tetris? I'm going with conditional access policies. It's the lock and key for your Azure AD kingdom.

upvoted 0 times

Yolando

1 year ago

Definitely, it's the best way to restrict access to corporate resources for Intune-managed devices.

upvoted 0 times

...

Rocco

1 year ago

I agree, they're like the lock and key to keep unwanted devices out.

upvoted 0 times

...

Eveline

1 year ago

Conditional access policies are like the gatekeepers of your Azure AD kingdom.

upvoted 0 times

...

...

Jules

1 year ago

I agree with Levi, because conditional access policies can control access based on certain conditions.

upvoted 0 times

...

Gilberto

1 year ago

Conditional access policies, all the way! It's like building a digital fort around your corporate resources. No unwanted guests allowed!

upvoted 0 times

Monte

1 year ago

I agree, it's like setting up a digital barrier to keep out any unauthorized devices. Super important for security.

upvoted 0 times

...

Eileen

1 year ago

Conditional access policies are definitely the way to go. It's like having a bouncer at the door.

upvoted 0 times

...

...

Levi

1 year ago

I think the answer is C) conditional access policies.

upvoted 0 times

...

Judy

1 year ago

Hmm, I'd say network security groups. That's the obvious choice, right? Who needs fancy Azure AD features when you've got good old NSGs?

upvoted 0 times

Reita

1 year ago

I see your point. It's always good to have options.

upvoted 0 times

...

Rutha

1 year ago

True, but conditional access policies offer more flexibility and control.

upvoted 0 times

...

Shayne

1 year ago

But NSGs are so reliable and easy to set up.

upvoted 0 times

...

Alease

1 year ago

I think conditional access policies might be a better option.

upvoted 0 times

...

...

Apolonia

1 year ago

Conditional access policies, of course! That's the way to go to control access to corporate resources. Easy peasy.

upvoted 0 times

Freeman

1 year ago

It's important to have that level of control over who can access our corporate resources, and conditional access policies make it easy to do so.

upvoted 0 times

...

Stanton

1 year ago

I agree, using conditional access policies is a great way to control which devices can access our resources.

upvoted 0 times

...

Magnolia

1 year ago

Conditional access policies are definitely the way to go for restricting access to corporate resources.

upvoted 0 times

...

...