A security engineer needs to configure Microsoft Entra ID to require re-authentication for all users when they access a sensitive AI application after being inactive for more than 30 minutes. Which Conditional Access feature should be configured?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — a is correct because the Conditional Access session control 'Sign-in frequency' can be set to a specific time interval (such as 30 minutes) for a targeted application. Users who have been inactive for longer than this period will be prompted to re-authenticate when they next access the application.
Full explanation below image
Full Explanation
A is correct because the Conditional Access session control 'Sign-in frequency' can be set to a specific time interval (such as 30 minutes) for a targeted application. Users who have been inactive for longer than this period will be prompted to re-authenticate when they next access the application. B is incorrect because Continuous Access Evaluation is for near-real-time revocation of access (responding to policy changes or user state changes), not for enforcing re-authentication after inactivity. C is incorrect because persistent browser session policies control whether the browser session remains after the browser is closed, not inactivity-based re-authentication. D is incorrect because token protection enforces that tokens can only be used by the client they were issued to, not re-authentication after inactivity.