You have a Microsoft 365 subscription.
Some users access Microsoft SharePoint Online from unmanaged devices.
You create a conditional access policy in Azure Active Directory.
You need to prevent the users from downloading, printing, and syncing files.
What should you do?
To prevent users from downloading, printing, and syncing files in SharePoint Online from unmanaged devices, you should configure the Access control settings in the SharePoint admin center. This setting directly addresses the requirement to manage access based on device compliance and can enforce restrictions on file actions such as downloading, printing, and syncing.
C is correct, but question is slightly confusing. Question says you create a CA policy in Azure. One of the answers is that you create a CA policy in Azure? Conditional Access is a AAD P1 license requirement; you cannot assume you have that ("a M365 subscription", not all M365 have CA), so C has to be the answer as that will always work for this specific purpose.
The answer is below and C is correct: https://docs.microsoft.com/en-US/sharepoint/control-access-from-unmanaged-devices#block-or-limit-access-to-specific-sharepoint-site-collections-or-onedrive-accounts
C is correct!