A sensitive Microsoft 365 application should require a compliant device under defined conditions. Which capability should be configured?

1. SharePoint folder naming
2. Microsoft Entra Conditional Access
3. A Microsoft 365 license assignment alone
4. Exchange mailbox storage quota only