You have a Microsoft 365 subscription that uses Microsoft Intune Suite. You use Intune to manage all devise. Users have iOS devices with Microsoft apps installed. You need to prevent users from cutting, copying, and pasting data between Microsoft Excel and other apps installed on the devices. What should you configure?
I don’t think you need both platforms, just go with Android here. The question only says "Android devices" so selecting iOS would expand the policy too far, which is a common trap in these labs. Pretty sure that's what Microsoft expects.
Just set up the Conditional Access policy in Entra ID, point it at sg-Legal, pick Android only for device platform and set Office 365 as the app. Grant access only if the device is marked compliant. That should do it but I wonder if missing anything on exclusions-didn't see a step for that so maybe this is enough?