A security engineer needs to configure Microsoft Entra ID to require re-authentication for all users when they access a sensitive AI application after being inactive for more than 30 minutes. Which Conditional Access feature should be configured?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — a is correct because the Conditional Access session control 'Sign-in frequency' can be set to a specific time interval (such as 30 minutes) for a targeted application. Users who have been inactive for longer than this period will be prompted to re-authenticate when they next access the application.
Full Explanation
A is correct because the Conditional Access session control 'Sign-in frequency' can be set to a specific time interval (such as 30 minutes) for a targeted application. Users who have been inactive for longer than this period will be prompted to re-authenticate when they next access the application. B is incorrect because Continuous Access Evaluation is for near-real-time revocation of access (responding to policy changes or user state changes), not for enforcing re-authentication after inactivity. C is incorrect because persistent browser session policies control whether the browser session remains after the browser is closed, not inactivity-based re-authentication. D is incorrect because token protection enforces that tokens can only be used by the client they were issued to, not re-authentication after inactivity.