BenchMark Quizzes by MDFT Pro

MDFT Academy uses Azure AD, Microsoft 365, Microsoft Intune, and Azure Information Protection. Your security policy states the following:

Personal devices do not need to be enrolled in Intune.
Users must authenticate by using a PIN before they can access corporate email data.
Users can use their personal iOS and Android devices to access corporate cloud services.
Users must be prevented from copying corporate email data to a cloud storage service other than Microsoft OneDrive for Business.

You need to configure a solution to enforce the security policy. What should you create?

Choose the correct answer from the options below.

Explanations for each answer:

A device configuration policy from the Microsoft Intune admin center is incorrect. Device configuration policies are used to manage device settings, not app data protection.
A data loss prevention (DLP) policy from the Microsoft Purview compliance portal is incorrect. DLP policies protect sensitive data but don't handle app authentication or data copying between apps.
An insider risk management policy from the Microsoft Purview compliance portal is incorrect. Insider risk policies detect risky user behavior but don't control app data access.
An app protection policy from the Microsoft Intune admin center is correct.

Learn more about app protection policies in Microsoft Intune:

Exam Preparation Quiz