HOTSPOT
You have a Microsoft Entra tenant. The tenant contains a security group named Group1. Group1 contains the members of your company's IT support team.
You have an Azure subscription. The subscription contains 800 Windows devices that are Microsoft Entra joined and 200 Windows devices that are Microsoft Entra registered.
You have 200 standalone macOS devices.
You deploy 10 Windows devices that are Microsoft Entra joined and have the Microsoft Entra ExtensionAttribute1 value set to SecureWorkstation.
You need to recommend a Conditional Access solution that meets the following requirements:
Only allows access to Microsoft Entra resources from devices that run Windows 10 or Windows 11
Restricts Windows Azure Service Management API access to the following users:
1. The members of Group1.
2. Users that authenticate by using multifactor authentication (MFA)
3. Users that connect from a device that has the SecureWorkstation ExtensionAttribute1.
The solution must minimize the number of required policies and maximize security.
What should include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Select the correct area(s) on the image.
