Microsoft 365 Fundamentals MS-900 Practice Question

Conditional Access is the correct answer because it enables administrators to create and enforce policies that grant or deny access to resources based on specific conditions such as user risk level, device compliance status, or network location. This enhances security by ensuring that only authenticated and compliant users and devices can access sensitive data. Multi-Factor Authentication (MFA) adds an extra layer of security by requiring additional verification methods but does not provide policy-based access controls. Role-Based Access Control (RBAC) assigns permissions to users based on their roles within the organization but doesn't consider real-time conditions like risk level or device state. Self-Service Password Reset allows users to reset their passwords without administrator assistance and is unrelated to regulating resource access.