Conditional Access evaluates every enabled policy that applies to the sign-in. If any applicable policy includes the Block access control, the overall result is a denial, regardless of other policies that might grant access after MFA. Because Policy-B applies (High sign-in risk) and contains a block control, the user's access to Outlook on the web is rejected. Policy-A is also evaluated, but its grant control cannot override the block from Policy-B. The sign-in is therefore blocked.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Conditional Access in Microsoft 365?
Open an interactive chat with Bash
How does Conditional Access prioritize its policies?
Open an interactive chat with Bash
What is Microsoft Entra ID Protection and how does it assess sign-in risks?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Implement and manage Microsoft Entra identity and access
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .