正解:C
Correct:
* OAuth app policy
You can create an OAuth app policy in the Microsoft Defender for Cloud Apps portal (now part of App Governance within Defender XDR) to generate alerts when an app requests high permissions and is authorized by a specified number of users, such as over 20, helping you detect potentially risky, overprivileged apps. These policies allow you to monitor, block, or flag apps based on permission levels (high, medium, low), publisher status, and user authorization count, enabling proactive security management.
Incorrect:
* access policy
* activity policy
* anomaly detection policy
* app discovery policy
Reference:
https://learn.microsoft.com/en-us/defender-cloud-apps/app-permission-policy