A supported service should be accessible only when required device and context conditions are satisfied. Which approach best fits?

1. Evaluate security keys or passkeys under the applicable authentication policy.
2. Configure context-aware access with the necessary licensing and tested conditions.
3. Enforce appropriate two-step verification with a planned enrollment process.
4. Delegate a suitable limited administrative role.