StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Microsoft 365 Intune Purview and Copilot

Practice question 376 of 498 · hard

A recently consented OAuth application reads many mailboxes while users are offline. Browser download restrictions are enabled. What is the most relevant next control?

Choose the single best answer.

  1. A.Enable Safe Attachments only
  2. B.Increase browser session timeout
  3. C.Replace all mailbox protection with SaaS discovery
  4. D.Investigate app permissions and behavior through app governance and consent controls
Show the answer and explanation

✓ Correct answer

  • Investigate app permissions and behavior through app governance and consent controls

App governance and consent controls address app-to-app permissions and behavior. Browser timeouts do not govern offline API access, Safe Attachments focuses on malicious attachments, and discovery alone does not govern the granted permissions.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.