What combination helps detect and block sharing of 'Confidential' files to unmanaged devices?

What combination helps detect and block sharing of 'Confidential' files to unmanaged devices?

• A. Labeling alone
• B. Conditional Access and app-enforced restrictions
• C. Manual monitoring of file sharing
• D. Encrypting files before sharing

Answer: (B)

The combination of Conditional Access and app-enforced restrictions is effective in detecting and blocking the sharing of 'Confidential' files to unmanaged devices because it establishes a comprehensive security framework that evaluates both the user identity and the device compliance before granting access to sensitive information. Conditional Access policies can be configured to ensure that only devices that meet specific criteria—such as being compliant with organizational security standards—are allowed access to confidential files. This means that if a user attempts to access or share these files from an unmanaged or non-compliant device, the access can be denied outright. In conjunction with app-enforced restrictions, which impose specific rules on how files can be shared and accessed via applications, this combined approach ensures that even if a user is authenticated, they can only share or access files in ways that comply with security requirements. For instance, policies could restrict sharing to managed devices or prevent downloading files onto personal devices altogether. Labeling alone is useful for classifying data but does not actively prevent sharing to unmanaged devices. Manual monitoring can be resource-intensive and may not provide real-time intervention when files are being shared. Encrypting files before sharing adds a layer of security but does not inherently stop the sharing process itself or control the devices to which files are shared.

The combination of Conditional Access and app-enforced restrictions is effective in detecting and blocking the sharing of 'Confidential' files to unmanaged devices because it establishes a comprehensive security framework that evaluates both the user identity and the device compliance before granting access to sensitive information.

Conditional Access policies can be configured to ensure that only devices that meet specific criteria—such as being compliant with organizational security standards—are allowed access to confidential files. This means that if a user attempts to access or share these files from an unmanaged or non-compliant device, the access can be denied outright.

In conjunction with app-enforced restrictions, which impose specific rules on how files can be shared and accessed via applications, this combined approach ensures that even if a user is authenticated, they can only share or access files in ways that comply with security requirements. For instance, policies could restrict sharing to managed devices or prevent downloading files onto personal devices altogether.

Labeling alone is useful for classifying data but does not actively prevent sharing to unmanaged devices. Manual monitoring can be resource-intensive and may not provide real-time intervention when files are being shared. Encrypting files before sharing adds a layer of security but does not inherently stop the sharing process itself or control the devices to which files are shared.