Conditional Access should target agent workload identities differently from humans. What design approach is appropriate?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Agents are identities too — CA can and should constrain them. Don't disable CA because agents arrived.
Full explanation below image
Full Explanation
Correct Answer — A
Conditional Access designs can protect applications and identities involved in agent access paths with conditions suitable for workload/agent scenarios.
Why B is wrong: Workload identity protections exist as part of modern CA strategy.
Why C is wrong: Agents can be restricted.
Why D is wrong: Weakens security.
Exam tip: Secure agents with CA, don't exempt them blindly.