Perform User Account Management Phase 1 Practice Test

Device-based conditional access gates access to resources based on the security status of the endpoint. When a device is enrolled in management and passes posture checks—such as being encrypted, having a current OS, a valid passcode, and not being jailbroken or rooted—it’s considered compliant and allowed to access corporate apps and data. If it isn’t compliant, access can be blocked or restricted or require remediation first. This approach reduces risk by ensuring sensitive resources aren’t exposed to insecure or unmanaged devices, tying access to both who you are and the trustworthiness of the device you’re using. It also aligns with a Zero Trust mindset, where access decisions consider device health alongside user identity. Other options don’t fit as well because device-based conditional access doesn’t mandate that all devices share the same OS version, and it doesn’t remove the need for MFA or passwords. MFA and credentials may still be required; device compliance enhances risk-based access rather than replacing authentication.