Question

You have several Conditional Access policies that block noncompliant devices from connecting to services.You need to identity which devices are blocked by which policies.What should you use?

Answer 1

To identify which devices are blocked by which policies in Conditional Access, use the Azure AD sign-in logs. These logs provide information about the devices that were blocked and the policies that were triggered.

Step-by-step explanation:

To identify which devices are blocked by which policies in Conditional Access, you can use the Azure AD sign-in logs. These logs provide information about the devices that were blocked and the policies that were triggered. By analyzing the logs, you can determine which policies are blocking noncompliant devices from connecting to services.

For example, if you have a Conditional Access policy that requires devices to have up-to-date antivirus software installed, you can check the sign-in logs to see if any devices were blocked due to noncompliance with this policy. You can then identify the specific devices that were blocked and the policy that was triggered.

Using the Azure AD sign-in logs is an effective way to monitor and manage the access of devices to services based on the configured Conditional Access policies.