Question

Your organization wants to ensure that users can access SharePoint Online and Exchange Online only from devices that are enrolled and marked as compliant in Microsoft Intune. Users on unmanaged personal devices should be blocked. Which Microsoft Entra ID feature should you configure to enforce this requirement?

Accepted Answer

A conditional access policy with a grant control that requires the device to be marked as compliant

Answer

A Privileged Identity Management (PIM) role assignment for SharePoint and Exchange access

Answer

A per-user multi-factor authentication (MFA) enforcement setting

Answer

A self-service password reset (SSPR) policy scoped to the affected users