Microsoft 365 Fundamentals MS-900 Practice Question

Conditional Access should be used because it allows organizations to create and enforce policies that control access to Microsoft 365 resources based on specific conditions such as user location, device compliance status, and sign-in risk. By implementing Conditional Access policies, the organization can ensure that only compliant and trusted users can access resources under defined conditions, thereby enhancing security.

Multi-Factor Authentication (MFA) strengthens security by requiring additional verification steps during sign-in but does not provide the ability to enforce condition-based access policies. Self-Service Password Reset (SSPR) enables users to reset their own passwords without administrator intervention but does not control access based on conditions. Azure Information Protection helps classify and protect documents and emails but does not manage access policies based on user conditions.