Scenario: To minimize the blast radius of a potential compromise, you want to ensure that your developers can only access the production environment from machines that are compliant with your organization's security policy. Which identity feature enables this?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Microsoft Entra Conditional Access (Device compliance policy)

Conditional Access can be configured to require 'Compliant Devices' (as reported by Intune) before granting access to sensitive cloud apps....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

Scenario: To minimize the blast radius of a potential compromise, you want to ensure that your developers can only access the production environment from machines that are compliant with your organization's security policy. Which identity feature enables this?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Microsoft Entra Conditional Access (Device compliance policy)

Why This Answer Is Correct

Conditional Access can be configured to require 'Compliant Devices' (as reported by Intune) before granting access to sensitive cloud apps.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.