StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 362 of 498 · medium

A finance app needs stricter Conditional Access than general private resources. Which definition provides the finer policy boundary?

Choose the single best answer.

  1. A.One broad Quick Access app with identical permissions for everyone
  2. B.A separate per-app Global Secure Access application
  3. C.A DNS alias for finance without a separate private application definition
  4. D.A separate connector group while retaining finance in the same broad Quick Access app
Show the answer and explanation

✓ Correct answer

  • A separate per-app Global Secure Access application

A separate per-app definition provides its own resource scope, user assignment, and Conditional Access boundary. A broad Quick Access app with identical permissions cannot differentiate finance. Connector placement and DNS aliases do not by themselves create a separate enterprise-application policy boundary.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.