Access to Microsoft 365 from iOS/Android must require approved app protection / compliant devices per policy design. What engine enforces?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Conditional Access is how mobile platforms get real enforcement — compliance and app protection grants, not paper policies.
Full explanation below image
Full Explanation
Correct Answer — A
Conditional Access can target device platforms and require compliance or app protection policies for mobile access.
Why B is wrong: Non-enforcing.
Why C is wrong: Cosmetic.
Why D is wrong: CA is the proper enforcement engine when mobile is allowed under controls.
Exam tip: Mobile M365 control → CA + compliance/app protection.