- (Exam Topic 4)
You have a Microsoft 365 E5 subscription that contains a user named User! and the devices shown In the following table.
User1 can access her Microsoft Exchange Online mailbox from both Device1 and Device2.
You plan to create a Conditional Access policy named CAPolicy1 that will have the following settings:
• Assignments
• Users or workload identities: User1
• Cloud apps or actions: Office 365 Exchange Online
• Access controls
• Grant Block access
You need to configure CAPolicy1 to allow mailbox access from Device1 but block mailbox access from Device2.
Solution: You add a condition to filter for devices. Does this meet the goal?
Correct Answer:A
Conditional Access: Filter for devices
When creating Conditional Access policies, administrators have asked for the ability to target or exclude specific devices in their environment. The condition filter for devices gives administrators this capability. Now you can target specific devices using supported operators and properties for device filters and the other available assignment conditions in your Conditional Access policies.
Reference:
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices