A network engineer argues that Microsoft Entra Conditional Access is simply another hardware firewall appliance for the city datacenter. How should a fundamentals-level reply correct that view?
Select an answer to reveal the explanation.
Short Explanation
Firewalls babysit packets; Conditional Access babysits sign-ins. It lives in the identity world—who you are, where you are, what app you want—not as a box with network ports. Mixing those up is a common trap.
Full Explanation
Conditional Access is a Microsoft Entra identity policy engine that evaluates signals and enforces access controls for users and apps. It is not a physical firewall appliance and is not the same as network packet filtering or storage redundancy. AZ-900 expects recognition of CA as identity-driven policy rather than classic network hardware.