An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their corporate Entra ID AND their device marked as 'Compliant' in Intune. Which feature enables this?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Microsoft Entra Conditional Access (Device compliance)

Conditional Access is the 'Zero Trust' policy engine that evaluates multiple signals (user, device, location) before granting access....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

An organization following the 'Zero Trust' model wants to ensure that access to their internal web apps is granted only if the user is authenticated via their corporate Entra ID AND their device marked as 'Compliant' in Intune. Which feature enables this?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Microsoft Entra Conditional Access (Device compliance)

Why This Answer Is Correct

Conditional Access is the 'Zero Trust' policy engine that evaluates multiple signals (user, device, location) before granting access.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.