StudyToCert

All certifications / SC-300 / Lessons

Microsoft Certified: Identity and Access Administrator Associate SC-300 (skills outline of April 27, 2026) · Domain 3: Plan and implement workload identities

Microsoft Defender for Cloud Apps: cloud discovery, app governance and Conditional Access app control session policies

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Microsoft Defender for Cloud Apps is Microsoft's cloud access security broker (CASB). It sits between users and cloud services to give visibility and control: which apps people use, what data they move, and what OAuth apps can do. For SC-300 you need three capabilities: cloud discovery, app governance and Conditional Access app control.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SC-300 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-300 study plan