Before enforcing a new sign-in risk CA policy, admin should evaluate impact. How?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Report-only is the flight simulator for CA. Watch impact, then enforce. YOLO-block is how you page yourself.
Full explanation below image
Full Explanation
Correct Answer — A
Report-only Conditional Access lets admins measure impact before enforcement, reducing outage risk.
Why B is wrong: High blast radius.
Why C is wrong: Report-only is best practice.
Why D is wrong: Unnecessarily dangerous.
Exam tip: New risk CA → report-only first.