Sensitive application access must require an approved authentication strength and device conditions. Which capability should be configured?

1. Only an NSG rule allowing HTTPS
2. Conditional Access with the appropriate supported controls
3. A storage replication setting
4. Only Azure resource naming conventions