Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Conditional Access policies let you combine multiple conditions-such as sign-in location and network-into automated decisions that grant, block, or require multifactor authentication. A single policy can block sign-ins from specified countries and, in a different condition, require MFA for connections outside trusted networks. Identity Protection focuses on risk-based detections, not location-based blocking. Smart Lockout is a password protection feature that defends against brute-force attacks but cannot enforce MFA or location rules. Role-based access control assigns administrative permissions and does not evaluate sign-in context.