Microsoft 365 Fundamentals MS-900 Practice Question

Conditional Access policies in Microsoft Entra ID evaluate many contextual signals-including user or group, location (network), device compliance state (from Intune), and risk levels from Microsoft Entra ID Protection-to decide whether to grant, block, or require additional controls (for example, MFA) before a user gains access.

Multi-factor Authentication (MFA) is an access control step that can be required by Conditional Access but, by itself, does not inspect context such as location or device state.

Microsoft Entra ID Protection detects and classifies user and sign-in risks and can apply risk-based policies; however, it does not evaluate other conditions like location or device compliance, so organizations typically feed its risk signals into Conditional Access for a full decision.

Self-Service Password Reset (SSPR) simply lets users reset their own passwords and does not make real-time access decisions based on contextual signals.