You have a Microsoft 365 E5 subscription. You need to create a Microsoft Defender for Cloud Apps session policy. What should you do first?

To implement a Microsoft Defender for Cloud Apps session policy, you must first route the relevant user sessions to Defender for Cloud Apps. This is achieved by creating an Azure Active Directory (Azure AD) Conditional Access policy. Within this policy, you configure the "Session" control to use "Conditional Access App Control." This action redirects the user's session through the Defender for Cloud Apps reverse proxy, making it possible to apply the session policies you create within the Defender for Cloud Apps portal. Therefore, creating the Conditional Access policy is the necessary first step in the deployment process.

A. User monitoring is a feature for viewing user activity logs and investigating alerts, not for creating session control policies.

B. While the app must be connected (onboarded), the Conditional Access policy is the specific trigger that initiates session control for that app.

D. Creating a continuous report is used for exporting logs and data for analysis, which is unrelated to the creation of real-time session policies.

1. Microsoft Learn. (2023). Deploy Conditional Access App Control for featured apps. "Step 1: Configure Azure AD to work with Defender for Cloud Apps". This section explicitly details the first step as creating an Azure AD Conditional Access policy and selecting "Use Conditional Access App Control" under Session controls.

2. Microsoft Learn. (2023). Session policies. In the "Prerequisites to use session policies" section

it states

"The relevant apps should be deployed with Conditional Access App Control

" confirming that the Conditional Access configuration is a prerequisite.

3. Microsoft Learn. (2023). SC-300: Implement access management for apps - Implement session policies in Microsoft Defender for Cloud Apps. This training module states

"To route sessions to Defender for Cloud Apps

you configure Azure AD Conditional Access policies to include Conditional Access App Control session controls." This directly identifies the Conditional Access policy as the starting point.