MS-700 Configure and Manage a Teams Environment Practice Question
You are a Teams administrator for a global organization. You need to ensure that all users in the sales department can only use the Teams client on Windows devices that are compliant with your organization's conditional access policies. What should you configure?
⚠ Common exam trap
Test-takers frequently confuse Intune compliance policies with conditional access; compliance policies alone do not block access without a conditional access policy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a conditional access policy in Microsoft Entra ID that requires compliant devices for the Teams cloud app and assign it to the sales department.
Conditional access is the correct tool to enforce device compliance for cloud apps like Teams. By creating a policy that requires compliant devices and targeting the sales department, you ensure that only compliant Windows devices can access Teams. This integrates with Intune compliance policies to evaluate device state.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
In the Teams admin center, modify the global app permission policy to block Teams on unmanaged devices.
Why it's wrong here
App permission policies control which apps are available within Teams, not the ability to run the Teams client on specific devices. They do not have settings for device management or compliance. Thus, they cannot enforce the requirement.
- ✗
Create a Teams app setup policy that blocks the mobile client for sales users.
Why it's wrong here
App setup policies customize the Teams client experience, such as pinning apps, but they do not control device compliance or restrict access based on device state. They cannot enforce conditional access policies. Therefore, this does not meet the requirement.
- ✓
Configure a conditional access policy in Microsoft Entra ID that requires compliant devices for the Teams cloud app and assign it to the sales department.
Why this is correct
Conditional access policies in Microsoft Entra ID can enforce device compliance for specific cloud apps, including Teams. By targeting the Teams cloud app and the sales group, and requiring a compliant device, you ensure that only compliant Windows devices can access Teams. This directly satisfies the requirement.
- ✗
Use Intune to deploy a device compliance policy that blocks the Teams app on non-compliant devices.
Why it's wrong here
Intune compliance policies evaluate device state but do not directly block app access. They work in conjunction with conditional access to enforce restrictions. Without a conditional access policy, a compliance policy alone does not prevent access to Teams from non-compliant devices.
About these practice questions
This MS-700 question is part of Courseiva's 211-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-700 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-700 exam.