During a design review at an e-commerce company, a newly hired architect keeps mixing up Conditional Access with Azure RBAC and Azure Policy. Which statement would correctly describe Conditional Access?

1. A. Conditional Access policies grant users permissions to create and manage Azure resources, such as virtual machines, storage accounts, and virtual networks 💬 A
2. B. Azure RBAC role assignments are evaluated at sign-in and challenge users for a second factor before granting resource access 💬 B
3. C. Conditional Access policies evaluate identity signals, such as user, location, and device, and can allow access, require MFA, or block ✓ C
4. D. Conditional Access policies enforce tagging and allowed regions on resources, updating the rules after those resources are deployed 💬 D

Reveal answer

Correct answer: Conditional Access policies evaluate identity signals, such as user, location, and device, and can allow access, require MFA, or block

Reference: https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/5-conditional-access