Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

To limit access to potentially harmful applications, which policy can be utilized?

1. App configuration policy

2. Device compliance policy

3. App protection policy

4. Device security policy

The correct answer is: App protection policy

Using an app protection policy is an effective strategy to limit access to potentially harmful applications. This policy is designed to protect organizational data within apps, ensuring that sensitive information is managed appropriately. It achieves this by restricting how apps can be used and by controlling access to certain applications based on the organization's security requirements. App protection policies can enforce limitations on data sharing, manage the ability to copy and paste between apps, and categorize apps based on their potential risks. For instance, it can prevent users from accessing non-compliant or risky apps, thus safeguarding the organization’s data against potential breaches and vulnerabilities that could arise from unapproved applications. Other types of policies relate to different aspects of endpoint management. For example, device compliance policies focus on ensuring that devices meet specific security standards before they are granted access to corporate resources. App configuration policies are typically used for managing the settings of applications rather than restricting their access. Device security policies might address broader security frameworks but won't specifically target application risk mitigation as directly as app protection policies do.