Hotspot Question
You have a Microsoft 365 E5 subscription. The subscription contains 1,000 devices that run Windows 11 Pro and are enrolled in Microsoft Intune.
You need to recommend a Microsoft Defender for Cloud Apps solution that meets the following requirements:
- When a user downloads a file from Microsoft SharePoint Online, a
label must be applied to the file in real time based on the file's
contents.
- Only users that use Intune-compliant devices must be able to sign in
to Dropbox.
Which type of policy should you recommend for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: File policy
It is possible to apply a sensitivity label to a file in real-time when it's downloaded from Microsoft SharePoint Online, based on the file's content. This can be achieved by using a combination of file policies in Microsoft Defender for Cloud Apps (formerly Cloud App Security) and sensitivity labels configured within Microsoft Purview Information Protection.
Box 2: Access policy
It is possible to restrict Dropbox sign-ins to Intune-compliant devices using a combination of Intune and Microsoft Entra ID Conditional Access policies. This is achieved by configuring a Conditional Access policy that requires devices to be marked as compliant by Intune before granting access to Dropbox.
Reference:
https://learn.microsoft.com/en-us/purview/sensitivity-labels-sharepoint-onedrive-files
https://learn.microsoft.com/en-us/answers/questions/2115107/restricting-access-to-a-web- application-based-on-d

Comment: *

Name: *

Email: *

Verification: *

You are designing a security strategy for providing access to Azure App Service web apps through an Azure Front Door instance.
You need to recommend a solution to ensure that the web apps only allow access through the Front Door instance.
Solution: You recommend configuring gateway-required virtual network integration.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *