Microsoft Certified: Cybersecurity Architect Expert Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose BD2

  Tokens alone do not guarantee that the device is secure, furthermore CA policies enforce compliance which the question clarifies as already present.

• Chose BD1

  The question is saying that the customer already follows zero-trust principles, which means it already enforces conditional access policies that allow only compliant devices for accessing corporate applications. In this scenario there's no need to create new CA policies Also tokens are refreshed automaticaly, specially in a case like this where the access was blocked and then will be allowed again after the malware is removed. Finally the only possible correct answers are B and D Intune and MDE needs to be integrated so CA policies can confirm that the device does not have high-risk and it's compliant documentation: https://learn.microsoft.com/en-us/intune/intune-service/protect/microsoft-defender-with-intune

• Chose BD1

  B and D is correct