(You have a Microsoft 365 E5 subscription.
You are implementing Microsoft Defender for Cloud Apps.
You need to ensure that you can create OAuth app policies.
Solution: You configure Conditional Access app control.
Does this meet the goal?)
Correct Answer: B
Comprehensive and Detailed Explanation From Exact Extract of Microsoft 365 Admin documents guides:
Explanation:
OAuth app policies are a feature of Microsoft Defender for Cloud Apps (MDCA) that allow you to:
* Monitor OAuth-connected apps
* Control app permissions
* Detect risky or overprivileged OAuth applications
Microsoft documentation clearly states that OAuth app policies are created and managed directly within Microsoft Defender for Cloud Apps, under Control # Policies # OAuth app policies.
Why Conditional Access app control does NOT meet the goal
Conditional Access app control is a different capability that:
* Integrates Microsoft Defender for Cloud Apps with Microsoft Entra Conditional Access
* Provides real-time session control for cloud apps
* Is used to control user actions (download, upload, copy, etc.) during app sessions Microsoft documentation explicitly distinguishes these features:
* Conditional Access app control is for session-based access control
* OAuth app policies are for app governance and permission monitoring
Configuring Conditional Access app control does not enable or affect the ability to create OAuth app policies.