A Conditional Access policy must place a SaaS application under Microsoft Defender for Cloud Apps so that session policies can monitor and control activity in real time. After selecting the target app and users, which session control inside the Conditional Access policy actually routes the user's session through the Defender for Cloud Apps reverse proxy?
- AThe Sign-in frequency session control set to a short interval so the session is re-evaluated often enough for Defender for Cloud Apps to take over
- BThe Persistent browser session control set to never persistent so each new browser session is redirected into the Defender for Cloud Apps proxy
- CThe Use Conditional Access App Control session control, configured to use custom policy, which redirects the session to Defender for Cloud Apps Correct
- DThe Customise continuous access evaluation session control, which streams session events to Defender for Cloud Apps for real-time policy matching
Why A is wrong: Sign-in frequency only forces periodic reauthentication; it never hands the session to the Defender for Cloud Apps proxy and so cannot enable session policies.
Why B is wrong: Persistent browser session only governs whether the sign-in stays signed in across browser restarts and has no role in routing traffic through the proxy.
Why C is correct: The Use Conditional Access App Control session control is what redirects the session to the Defender for Cloud Apps reverse proxy, where the configured session policies are then evaluated.
Why D is wrong: Continuous access evaluation handles near real-time token revocation between Microsoft services and does not proxy or hand the session to Defender for Cloud Apps.