You have a Microsoft 365 subscription that includes Microsoft Intune.
You create a new Android app protection policy named Policy1 that prevents screen captures in all Microsoft apps.
You discover that an unmanaged email client installed on Android devices can still capture screens.
You need to ensure that users can only use Microsoft apps to access email.
What should you do?
To restrict access to email so that only Microsoft apps can be used, the best approach is to create a Conditional Access policy. This type of policy allows you to control how and when users can access your apps and data, ensuring that only compliant or approved applications are used to access specified resources.
Should be CA.
Conditional Access seems the most logical. ie, block access from anything not approved. Assignments refers to who(users/devices) the policy applies to, so it can't be D.