Question

Your organization uses Microsoft Defender for Cloud Apps integrated with Conditional Access. Users can access SharePoint Online and Exchange Online from personal, unmanaged devices, but the security team requires that these users be prevented from downloading files to unmanaged devices while still allowing them to view and edit content in the browser. Which Defender for Cloud Apps configuration should you implement to meet this requirement?

Accepted Answer

Create a session policy that uses Conditional Access App Control to block file downloads for unmanaged devices

Answer

Create an access policy that blocks sign-in from unmanaged devices

Answer

Create an activity policy that alerts when files are downloaded from unmanaged devices

Answer

Create an app discovery policy to tag SharePoint Online as an unsanctioned app