A team uses Conditional Access policies. Which action can a Conditional Access policy take?
- A Block or allow access based on conditions (user, location, device, risk, app) (correct answer)
- B Assign RBAC roles
- C Encrypt data at rest
- D Configure network security groups
Shortcut: Conditional Access evaluates conditions (user identity, location, device compliance, sign-in risk, application) and enforces controls (require MFA, block access, require compliant device).