Microsoft 365 Mobility and Security (legacy) — Question 143

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps.

You configure a session control policy to block downloads from SharePoint Online sites.

Users report that they can still download files from SharePoint Online sites.

You need to ensure that file download is blocked while still allowing users to browse SharePoint Online sites.

What should you configure?

Answer options

• A. an access policy
• B. a data loss prevention (DLP) policy
• C. an activity policy
• D. a Conditional Access policy

Correct answer: D

Explanation

The correct answer is D, as a Conditional Access policy can enforce specific controls, including the ability to restrict downloads while allowing browsing. The other options, such as data loss prevention policies, are focused more on preventing data leakage rather than controlling access in real-time sessions.