A fennel-seed mill user’s sign-in to a municipal app succeeds at Entra but access is still blocked by a Conditional Access grant. How should the developer interpret this?
Select an answer to reveal the explanation.
Short Explanation
Sometimes Entra says “you signed in fine, but policy still says no.” That’s Conditional Access tapping you on the shoulder—know it exists; don’t turn the item into a security-engineer redesign.
Full Explanation
Conditional Access evaluates signals after authentication and can block or challenge access before the app receives a usable session. AZ-204 expects developers to recognize that Entra policies can interrupt client flows; designing CA policies, Microsoft Defender, or Sentinel is outside the exam’s associate-developer scope.