Conditional Access is a feature of Microsoft Entra ID that acts as an intelligent policy engine. Its primary purpose is to enforce organizational policies by evaluating signals from various sources—such as user, location, device, and application—to make decisions and enforce access controls for cloud apps and resources. This allows administrators to implement granular controls, like requiring multi-factor authentication (MFA) for specific users or blocking access from non-compliant devices, thereby securing organizational data while enabling productivity.

A. Sign-in activity reports are a signal used by Conditional Access policies, not their main purpose. The purpose is enforcement, not just reporting.

C. Hardware inventory is managed by services like Microsoft Intune (part of Microsoft Endpoint Manager), not directly by Conditional Access policies.

D. Data backup in Microsoft 365 is handled by separate features and third-party solutions, not by Conditional Access policies.

1. Microsoft Learn. (2023). What is Conditional Access? Microsoft Entra Documentation. Retrieved from https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview. (See the "Overview" section, paragraphs 1-3).

2. Microsoft Learn. (2023). Common Conditional Access policies. Microsoft Entra Documentation. Retrieved from https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-policy-common. (This document provides examples that demonstrate the enforcement of granular controls).