A security team wants a protected operation to trigger stronger authentication only when the user reaches that operation. Which Conditional Access concept should it evaluate with application integration?

1. A storage access tier
2. A resource tag alone
3. A DNS TTL
4. Authentication context