A city’s payroll apps should be reachable only from compliant devices or trusted locations. Which Microsoft Entra capability is designed for that kind of adaptive access rule?
Select an answer to reveal the explanation.
Short Explanation
Conditional Access is the bouncer that checks more than the password—device health, place, and other signals. Payroll only from compliant or trusted contexts is exactly that story. It is identity-driven access, not a network firewall rewrite.
Full Explanation
Conditional Access applies adaptive access decisions using signals such as user, device, location, and risk before granting access to apps. Requiring compliant devices or trusted locations for payroll fits that purpose at describe depth—without authoring policy JSON, which is associate territory. Stream, Planner, and Office 365 vs Microsoft 365 naming do not enforce those adaptive access checks.