(You have a Microsoft 365 E5 subscription.
You are implementing Microsoft Defender for Cloud Apps.
You need to ensure that you can create OAuth app policies .
Solution: You configure Conditional Access app control .
Does this meet the goal?)
Correct Answer: B
OAuth app policies are a feature of Microsoft Defender for Cloud Apps (MDCA) that allow you to:
* Monitor OAuth-connected apps
* Control app permissions
* Detect risky or overprivileged OAuth applications
Microsoft documentation clearly states that OAuth app policies are created and managed directly within Microsoft Defender for Cloud Apps , under Control # Policies # OAuth app policies .
Why Conditional Access app control does NOT meet the goal
Conditional Access app control is a different capability that:
* Integrates Microsoft Defender for Cloud Apps with Microsoft Entra Conditional Access
* Provides real-time session control for cloud apps
* Is used to control user actions (download, upload, copy, etc.) during app sessions Microsoft documentation explicitly distinguishes these features:
* Conditional Access app control is for session-based access control
* OAuth app policies are for app governance and permission monitoring
Configuring Conditional Access app control does not enable or affect the ability to create OAuth app policies .