Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

To scope a Conditional Access policy to a particular application, you configure the Cloud apps or actions assignment. In this section you can select the "Microsoft Azure Management" cloud app, which represents the Azure portal. The other options serve different purposes: "Users or workload identities" chooses who is affected, "Conditions" refines circumstances such as location or device state, and "Session controls" are enforcement actions that apply after access is granted. Without targeting the correct cloud app, the policy would either not run or would apply to unintended services.