A credit-union security lead wants Azure portal users to authenticate again every few hours even after MFA already succeeded at sign-in. Which Conditional Access control re-challenges the session on that schedule?
Select an answer to reveal the explanation.
Short Explanation
MFA at the door is a grant; how long the badge stays valid is a session control. Sign-in frequency is the dial that says “come back and prove it again in a few hours,” without stacking another grant checkbox that never reopens the session clock.
Full Explanation
Conditional Access separates grant controls from session controls. Grant controls decide whether access is allowed; session controls such as sign-in frequency govern how often users must reauthenticate after a successful sign-in. Requiring MFA again only as a grant does not by itself enforce periodic reauthentication of an already established Azure portal session. Azure RBAC and NSGs do not set Entra sign-in frequency for portal sessions.