Microsoft Identity and Access Administrator — Question 39

Your company purchases a Microsoft 365 E5 subscription.

A user named User1 is assigned the Security Administrator role.

You need to ensure that User1 can create Microsoft Defender for Cloud Apps session policies.

What should you do first?

Answer options

• A. Create a Conditional Access policy and select Require app protection policy.
• B. Create a Conditional Access policy and select Use Conditional Access App Control.
• C. Assign the Cloud Application Administrator role to User1.
• D. Assign the Cloud App Security Administrator role to User1.

Correct answer: B

Explanation

The correct answer is B, as selecting 'Use Conditional Access App Control' is necessary for creating session policies in Microsoft Defender for Cloud Apps. Options A, C, and D do not specifically grant the required permissions to create session policies, making them insufficient for this task.