A multinational wants sensitive cloud application access to require compliant devices and additional authentication based on sign-in conditions. Which capability should the architect use?

1. Microsoft Entra Conditional Access
2. Storage replication
3. Azure resource tags
4. A larger App Service plan