You have a Microsoft 365 subscription.
Some users access Microsoft SharePoint Online from unmanaged devices.
You need to prevent the users from downloading, printing, and syncing files.
What should you do?

A. Run the Set-SPOTenant cmdlet and specify the -ConditionalAccessPolicy parameter.

B. From the SharePoint admin center, configure the secure control settings.

C. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection sign-in risk policy.

D. From the Microsoft Azure portal, create an Azure AD Identity Protection user risk policy.








 

Suggested Answer: A

As a SharePoint or global admin in Microsoft 365, you can use the Access control page of the SharePoint admin center or the Set-SPOTenant -
ConditionalAccessPolicy cmdlet to block or limit access to SharePoint and OneDrive content from unmanaged devices.
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. Run the Set-SPOTenant cmdlet and specify the
-ConditionalAccessPolicy parameter.
2. From the SharePoint admin center, configure the Access control settings.
Other incorrect answer options you may see on the exam include the following:
1. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) Identity Protection user risk policy.
2. From the Microsoft Azure portal, create an Azure Active Directory (Azure AD) conditional access policy
Reference:
https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant?view=sharepoint-ps
 https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices

This question is in MS-500 Microsoft 365 Security Administration Exam
For getting Microsoft Certified: Security, Compliance, and Identity Fundamentals Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.