Your company has a Microsoft 365 subscription.
The company does not permit users to enroll personal devices in mobile device management (MOM).
Users in the sales department have personal iOS devices.
You need to ensure that the sales department users can use the Microsoft Power Bl app from iOS devices to access the Power Bl data in your tenant. The users must be prevented from backing up the app’s data to iCIoud.
What should you create?
A . a device compliance policy in Microsoft Endpoint Manager
B . a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a device state condition
C . a conditional access policy in Microsoft Azure Active Directory (Azure AD) that has a client apps condition
D . an app protection policy in Microsoft Endpoint Manager
Answer: D