A company wants to require multifactor authentication when a user signs in under conditions defined by the security team. Which capability evaluates sign-in signals and enforces access requirements?

1. Azure resource locks
2. Azure Storage lifecycle rules
3. Microsoft Entra Conditional Access
4. Azure tags