Microsoft Azure Fundamentals AZ-900 — Topic 1 Question 272

Question

You have an Azure subscription and 100 Windows 10 devices. You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications. What should you implement?

Accepted Answer

Correct answer: A. A Conditional Access policy can require devices to be marked compliant (for example, having the latest security patches via Intune) before granting access to Azure AD-integrated applications. Azure Bastion, Azure Firewall, and Azure Policy do not gate application sign-in based on device compliance.

Microsoft Azure Fundamentals AZ-900 — Question 272