thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

Conditional Access

Microsoft Entra ID policy engine that grants, blocks or restricts access based on signals such as user, device, location and risk.

Definition

Conditional Access policies evaluate assignments (users, cloud apps, conditions like location, device platform, client app and risk) and apply access controls such as block, require MFA, require compliant or hybrid joined device, or session controls. It requires Microsoft Entra ID P1 and is a core Zero Trust enforcement point.

Example

A policy requires MFA for all admins and blocks sign-ins from countries where the company does not operate.

Exam tip

Conditional Access is the answer when access must depend on device compliance, location or risk; Security defaults are the free baseline alternative.

Related terms