As a security specialist you are asked to consult with Sam on developing a good security posture. You meet with the company's IT team and discuss various strategies to enhance security when implementing Conditional Access. They are particularly interested in measures that can provide effective protection against unauthorized access. You provide them with three options to consider. Which of the following options represents a recommended best practice to enhance security when implementing Conditional Access?