AB-650 Practice Question 3181
Exam: AB-650
Domain: Manage and secure AI services in Microsoft 365
Difficulty: medium
You want to enforce that an AI agent accessing corporate APIs must authenticate only from managed, compliant devices or secure IP ranges. How can this be enforced in Microsoft Entra?
Answer Options
A
Conditional Access policies targeted at workload identities
B
Creating simple text passwords on domain controllers
C
Disabling modern authentication tenant-wide
D
Configuring IMAP4 email access
Correct Answer
A: Conditional Access policies targeted at workload identities
Explanation
Conditional Access policies targeted at workload identities or service principals associated with the agent identity enforce network location and authentication controls.