You manage iOS devices with Microsoft apps via Microsoft Intune. To prevent users from cutting, copying, and pasting data between Microsoft Excel and other apps on those iOS devices, which configuration should you apply?

An app protection policy (APP) is the correct choice because it allows you to manage and protect organizational data within an application, even on personal devices. Specifically, these policies can enforce data loss prevention (DLP) controls like restricting cut, copy, and paste functions between managed apps (like Excel) and unmanaged apps on iOS devices. An app configuration policy is used to standardize app settings upon deployment, not to control data transfer between apps. An iOS app provisioning profile is used for app signing and deployment, not for in-app data protection. While policies can be applied to Microsoft Office apps, an app protection policy is the specific Intune feature designed for this cross-app data protection scenario.