Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Conditional Access is the Microsoft Entra ID capability that applies real-time if-then logic to sign-ins. Administrators define conditions (for example, user groups, device compliance, network location, or risk level) and grant or block controls (such as require multifactor authentication, require a compliant device, or block access). Self-service password reset deals only with credential recovery, Privileged Identity Management manages privileged role activation, and Identity Protection sign-in risk policies focus solely on risk without the broader range of conditions and controls offered by Conditional Access.