Administrators need strong phishing-resistant sign-in for a sensitive cohort using supported methods. Which approach best fits?

1. Configure context-aware access with the necessary licensing and tested conditions.
2. Delegate a suitable limited administrative role.
3. Evaluate security keys or passkeys under the applicable authentication policy.
4. Enforce appropriate two-step verification with a planned enrollment process.