You are the IT administrator in a company with a Microsoft 365 subscription.
You have a bring-your-own-device (BYOD) policy, and users have personal iOS mobile devices.
You want to enable your users to use the Sharepoint app to access company data, but you must require a PIN to open it work context.
What should you create?
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: D
You should create an app protection policy in Microsoft Endpoint Manager.
Even though your devices are not managed in mobile device management (MDM), you can still protect your company data on the app level by creating an app protection policy.
In Microsoft Endpoint Manager admin center, navigate to Apps and select App protection policy.
Option A is incorrect.
App registrations are about authenticating and authorizing workflows in Azure.
Option B is incorrect.
App configuration policy lets you assign configuration settings when users run the app.
Option C is incorrect.
Device compliance policy are about stating compliancy rules that devices must meet.
To know more about application protection policy, please refer to the link below:
The correct answer to the question is D. An app protection policy in Microsoft Endpoint Manager.
Explanation: Microsoft Endpoint Manager is a unified management platform that enables IT administrators to manage and secure devices, apps, and data across different platforms, including Windows, iOS, and Android. Endpoint Manager provides various policies to manage and secure mobile devices, including app protection policies.
In this scenario, the company allows personal iOS devices to access SharePoint data through the SharePoint app. However, to ensure the security of the company data, the IT administrator wants to require a PIN to access the app in a work context. This can be achieved by creating an app protection policy in Microsoft Endpoint Manager.
App protection policies are a type of mobile application management (MAM) policy that applies to specific apps. They allow IT administrators to configure policies that protect company data within the app, regardless of the device's overall security posture. App protection policies can be applied to managed and unmanaged devices and can be used to control app behavior, such as requiring a PIN or encrypting app data.
To create an app protection policy for the SharePoint app, the following steps can be followed:
Once the policy is applied, users will be required to enter a PIN to access the SharePoint app in a work context, providing an additional layer of security to protect the company's data.