正解:B
OAuth app policies are a feature of Microsoft Defender for Cloud Apps (MDCA) that allow you to:
Monitor OAuth-connected apps
Control app permissions
Detect risky or overprivileged OAuth applications
Microsoft documentation clearly states that OAuth app policies are created and managed directly within Microsoft Defender for Cloud Apps, under Control # Policies # OAuth app policies.
Why Conditional Access app control does NOT meet the goal
Conditional Access app control is a different capability that:
Integrates Microsoft Defender for Cloud Apps with Microsoft Entra Conditional Access Provides real-time session control for cloud apps Is used to control user actions (download, upload, copy, etc.) during app sessions Microsoft documentation explicitly distinguishes these features:
Conditional Access app control is for session-based access control
OAuth app policies are for app governance and permission monitoring
Configuring Conditional Access app control does not enable or affect the ability to create OAuth app policies.