Question
You open the Cloud App Security portal as shown in the following exhibit.
Your environment does NOT have Microsoft Defender for Endpoint enabled.
You need to remediate the risk for the Launchpad app.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Explanation
Launchpad has a low risk score, so it should be blocked: select the app in Discovered apps and tag it as Unsanctioned. Without Microsoft Defender for Endpoint integration, unsanctioned apps are not blocked automatically on endpoints, so you generate a block script for your firewall or proxy and run it on the source appliance that uploaded the discovery logs. Azure Cloud Shell cannot change the on-premises appliance, and tagging the app as Sanctioned would allow it.
